Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gvJoNn-blA5c51_F-EXxGRxBnRQ.roa
File: gvJoNn-blA5c51_F-EXxGRxBnRQ.roa (raw, json)
Hash identifier: hx8A9HFJGTY5FQiisjF44kKjNXBiqewOqD3MuswZILs=
Subject key identifier: 82:F2:68:36:7F:9B:94:0E:5C:E7:5F:C5:F8:45:F1:19:1C:41:9D:14
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09A31AD5
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gvJoNn-blA5c51_F-EXxGRxBnRQ.roa
Signing time: Thu 03 Feb 2022 15:55:31 +0000
ROA not before: Thu 03 Feb 2022 15:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 45.137.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161684181 (0x9a31ad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 3 15:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82f268367f9b940e5ce75fc5f845f1191c419d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:92:ae:9e:7d:44:37:5c:52:05:02:4b:c4:76:
9c:1d:be:de:15:ff:d7:a8:66:ab:fc:92:c6:ab:55:
da:66:f8:7b:d9:d6:3d:23:3c:c9:a7:8a:0a:3f:92:
cd:7d:5c:41:7a:15:ba:d0:d1:8a:df:23:c5:13:57:
88:4d:97:e8:3a:a6:dd:18:f2:3a:5f:58:f3:00:77:
da:9e:12:87:d7:0d:34:4e:71:82:4a:b0:e0:65:19:
6c:65:6b:90:f2:77:b1:4e:d4:bd:6f:c3:a3:1d:73:
b4:11:70:30:e1:a4:62:f0:c5:d2:5c:a9:a4:b7:b4:
4f:f6:47:a4:ac:44:eb:85:05:57:bc:a9:07:81:db:
cf:c1:3d:33:9d:d9:4c:e9:5b:c2:41:0f:d6:ea:62:
99:33:ca:e6:4d:75:af:98:87:11:f1:fc:83:6e:74:
94:3c:65:9b:60:01:e6:8d:73:87:30:ea:1e:89:09:
30:c0:c6:95:44:0b:b2:bc:96:be:55:dd:de:9e:d6:
85:13:8e:fe:a1:60:65:a0:83:df:c8:b7:30:8f:72:
ed:02:c7:86:84:5e:8d:0c:eb:4c:c8:00:7d:e0:17:
82:f2:be:65:e5:f1:07:ad:1f:9e:09:54:a8:5e:6b:
cd:33:46:3e:14:82:d8:75:80:42:6a:d3:15:d8:a7:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F2:68:36:7F:9B:94:0E:5C:E7:5F:C5:F8:45:F1:19:1C:41:9D:14
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gvJoNn-blA5c51_F-EXxGRxBnRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5a:6a:7b:1c:a7:04:13:84:db:33:bf:9d:1e:24:05:0e:bf:
15:fb:52:4c:5c:c5:da:55:56:25:21:78:d2:d5:cd:5e:9d:ce:
8c:20:8e:21:0c:1c:15:03:11:f1:cb:51:a7:01:39:8b:7a:f9:
24:a2:31:57:cb:fd:8d:fa:14:10:f6:34:15:02:ee:3a:5b:f1:
c2:2f:67:35:bd:54:93:3e:50:74:96:e6:d1:30:38:f3:76:25:
1a:7b:4c:aa:5f:7e:28:b3:bb:9d:ff:f4:d6:33:bd:1c:bc:d2:
5a:64:71:f1:c0:dc:8d:1f:d7:b7:8d:a7:8d:ba:8c:40:48:d7:
60:00:c7:bd:f7:fc:ab:97:b6:b0:2b:c1:58:a9:8b:4c:ad:ee:
fd:43:65:f6:59:c9:18:27:a0:fa:3d:f4:3d:fb:aa:4b:65:cc:
be:45:98:09:65:9b:a7:5c:18:53:54:c1:2c:ff:de:97:a9:a2:
42:ef:1e:00:64:69:70:13:f7:af:f3:61:b9:14:17:61:36:99:
b7:71:e7:25:15:94:8d:7a:d7:5b:59:93:c6:5d:b9:b6:34:cd:
24:d6:21:80:1d:99:15:e6:77:10:e9:69:21:a5:5c:e0:d0:aa:
3a:15:f7:55:d9:c0:bb:9d:70:a3:af:25:69:5d:88:0f:13:44:
07:ae:9b:81
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECaMa1TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDIw
MzE1NTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODJmMjY4MzY3Zjli
OTQwZTVjZTc1ZmM1Zjg0NWYxMTkxYzQxOWQxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOqSrp59RDdcUgUCS8R2nB2+3hX/16hmq/ySxqtV2mb4e9nW
PSM8yaeKCj+SzX1cQXoVutDRit8jxRNXiE2X6Dqm3RjyOl9Y8wB32p4Sh9cNNE5x
gkqw4GUZbGVrkPJ3sU7UvW/Dox1ztBFwMOGkYvDF0lyppLe0T/ZHpKxE64UFV7yp
B4Hbz8E9M53ZTOlbwkEP1upimTPK5k11r5iHEfH8g250lDxlm2AB5o1zhzDqHokJ
MMDGlUQLsryWvlXd3p7WhROO/qFgZaCD38i3MI9y7QLHhoRejQzrTMgAfeAXgvK+
ZeXxB60fnglUqF5rzTNGPhSC2HWAQmrTFdinpw8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSC8mg2f5uUDlznX8X4RfEZHEGdFDAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L2d2Sm9Obi1ibEE1YzUxX0YtRVh4R1J4Qm5SUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2JYzANBgkqhkiG9w0BAQsFAAOC
AQEAmlpqexynBBOE2zO/nR4kBQ6/FftSTFzF2lVWJSF40tXNXp3OjCCOIQwcFQMR
8ctRpwE5i3r5JKIxV8v9jfoUEPY0FQLuOlvxwi9nNb1Ukz5QdJbm0TA483YlGntM
ql9+KLO7nf/01jO9HLzSWmRx8cDcjR/Xt42njbqMQEjXYADHvff8q5e2sCvBWKmL
TK3u/UNl9lnJGCeg+j30PfuqS2XMvkWYCWWbp1wYU1TBLP/el6miQu8eAGRpcBP3
r/NhuRQXYTaZt3HnJRWUjXrXW1mTxl25tjTNJNYhgB2ZFeZ3EOlpIaVc4NCqOhX3
VdnAu51wo68laV2IDxNEB66bgQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org