Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ojADyucZ03IZuXG-q8fR-302TJ8.roa
File: ojADyucZ03IZuXG-q8fR-302TJ8.roa (raw, json)
Hash identifier: AAtmOdWGDQ0f5iF1M5Xm6r9tV4a7E2dIol/hkaz1KyQ=
Subject key identifier: A2:30:03:CA:E7:19:D3:72:19:B9:71:BE:AB:C7:D1:FB:7D:36:4C:9F
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A5F2259
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ojADyucZ03IZuXG-q8fR-302TJ8.roa
Signing time: Mon 04 Apr 2022 15:28:54 +0000
ROA not before: Mon 04 Apr 2022 15:28:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 45.137.97.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174006873 (0xa5f2259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Apr 4 15:28:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a23003cae719d37219b971beabc7d1fb7d364c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:dc:1d:d4:7f:b7:65:81:67:b0:54:46:6a:
12:cb:89:f8:8b:88:5c:b4:87:a5:62:d1:f7:37:c5:
5d:5c:64:d8:5f:22:b0:46:eb:1d:66:8a:72:32:4f:
85:1b:d1:96:84:45:d9:db:f8:2d:33:a9:ac:fa:f1:
a2:9c:66:94:35:89:45:51:b0:10:c5:23:c5:d8:c9:
71:16:d7:82:73:79:cc:72:27:a8:9c:67:9d:e6:cd:
a1:b1:63:6d:da:f8:33:b8:78:8a:5f:a3:f5:ba:b8:
58:c3:51:62:45:7e:1e:11:98:05:4a:aa:38:a5:a9:
99:07:8c:88:cd:0c:ef:27:e7:0a:4c:6d:3e:85:f8:
d6:3a:94:41:48:2f:89:3d:6a:70:12:ed:e5:20:2a:
95:4d:95:93:fc:ac:1b:5e:dd:3e:9b:6a:90:1f:82:
16:c4:33:6d:d5:85:5a:f4:0a:60:3a:61:38:5f:b6:
93:59:71:b7:9b:44:5a:2a:80:51:7f:b9:e3:c7:e4:
08:ab:ad:31:c8:b4:8d:5a:63:da:26:4b:b0:db:4b:
76:24:9a:9a:05:1d:69:69:0f:f4:f2:c3:2a:db:0f:
cf:65:f1:e3:57:e7:4a:bd:4b:51:85:2c:78:29:e3:
ea:36:3e:3f:af:de:9e:7d:a4:31:89:e0:a5:39:41:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:03:CA:E7:19:D3:72:19:B9:71:BE:AB:C7:D1:FB:7D:36:4C:9F
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ojADyucZ03IZuXG-q8fR-302TJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.251.0/24
45.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
11:19:4e:ac:59:5d:70:9e:b5:f9:74:3d:cd:0b:cd:c4:97:db:
0e:d9:d6:28:2b:7f:9e:1d:d6:43:c3:ec:56:63:a3:62:36:9f:
19:f7:43:2f:9c:e3:16:23:04:82:c6:01:51:ea:c4:ff:ce:18:
80:a2:a7:10:82:52:26:e9:74:68:2a:16:b6:99:a7:4f:87:08:
02:91:0a:d9:67:e4:55:14:ae:a1:91:bc:1a:72:63:30:6f:58:
61:8c:64:2f:70:bf:00:14:b4:5b:7d:8a:ce:12:a2:39:56:93:
88:b5:ab:b4:96:df:46:bf:3b:18:2a:94:5a:88:5a:fe:d6:a6:
f9:ca:d1:76:67:bd:44:d7:e9:01:dd:57:51:e9:d4:b3:92:61:
08:8a:19:fe:c5:24:0f:37:b8:f5:d7:18:f4:99:40:9a:e7:e2:
94:48:7a:50:45:f1:3c:bd:b6:43:40:62:11:73:95:4f:49:3f:
9d:da:fa:79:a1:06:46:38:c0:c1:f3:00:0f:a8:90:08:b2:6f:
b6:dd:7d:4d:1e:eb:7f:38:c4:bc:d1:bd:fc:a8:8f:5b:8e:23:
17:33:99:cf:8b:ef:42:a0:f1:52:21:99:a6:fd:9a:81:50:d8:
86:63:92:45:a1:af:09:8b:a4:aa:8d:4d:b6:e6:ab:75:0c:2f:
60:1f:b0:5e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECl8iWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDQw
NDE1Mjg1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTIzMDAzY2FlNzE5
ZDM3MjE5Yjk3MWJlYWJjN2QxZmI3ZDM2NGM5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMz/3B3Uf7dlgWewVEZqEsuJ+IuIXLSHpWLR9zfFXVxk2F8i
sEbrHWaKcjJPhRvRloRF2dv4LTOprPrxopxmlDWJRVGwEMUjxdjJcRbXgnN5zHIn
qJxnnebNobFjbdr4M7h4il+j9bq4WMNRYkV+HhGYBUqqOKWpmQeMiM0M7yfnCkxt
PoX41jqUQUgviT1qcBLt5SAqlU2Vk/ysG17dPptqkB+CFsQzbdWFWvQKYDphOF+2
k1lxt5tEWiqAUX+548fkCKutMci0jVpj2iZLsNtLdiSamgUdaWkP9PLDKtsPz2Xx
41fnSr1LUYUseCnj6jY+P6/enn2kMYngpTlB1ZsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSiMAPK5xnTchm5cb6rx9H7fTZMnzAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L29qQUR5dWNaMDNJWnVYRy1xOGZSLTMwMlRKOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAI4+wMEAC2JYTANBgkqhkiG9w0B
AQsFAAOCAQEAERlOrFldcJ61+XQ9zQvNxJfbDtnWKCt/nh3WQ8PsVmOjYjafGfdD
L5zjFiMEgsYBUerE/84YgKKnEIJSJul0aCoWtpmnT4cIApEK2WfkVRSuoZG8GnJj
MG9YYYxkL3C/ABS0W32KzhKiOVaTiLWrtJbfRr87GCqUWoha/tam+crRdme9RNfp
Ad1XUenUs5JhCIoZ/sUkDze49dcY9JlAmufilEh6UEXxPL22Q0BiEXOVT0k/ndr6
eaEGRjjAwfMAD6iQCLJvtt19TR7rfzjEvNG9/KiPW44jFzOZz4vvQqDxUiGZpv2a
gVDYhmOSRaGvCYukqo1NtuardQwvYB+wXg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org