Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/rpZsPj0NWgOIKcHUAlXIaRwZuNs.roa
File: rpZsPj0NWgOIKcHUAlXIaRwZuNs.roa (raw, json)
Hash identifier: 8svseYe382yqSVV3y4H6sE/rb/hgq/f3BdKS2jttG5I=
Subject key identifier: AE:96:6C:3E:3D:0D:5A:03:88:29:C1:D4:02:55:C8:69:1C:19:B8:DB
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184116A55DB47906B7029E3E34280AAE52F
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/rpZsPj0NWgOIKcHUAlXIaRwZuNs.roa
Signing time: Tue 25 Oct 2022 23:11:32 +0000
ROA not before: Tue 25 Oct 2022 23:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.91.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:11:6a:55:db:47:90:6b:70:29:e3:e3:42:80:aa:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 25 23:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae966c3e3d0d5a038829c1d40255c8691c19b8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:3e:3c:fe:12:19:5d:a0:36:1d:9f:b8:07:
6f:72:4d:64:8e:34:bf:84:7a:4c:9a:cc:e4:d3:5f:
6d:b4:64:d3:41:20:61:0d:ef:09:85:5e:c9:bb:83:
8c:6f:7b:86:b0:cc:09:25:27:13:aa:93:00:f0:b3:
59:07:c1:ed:85:16:1f:4f:30:7b:cd:13:fe:f0:0d:
d1:f3:8f:a9:65:e2:33:e7:91:7a:65:7b:70:cc:40:
81:6b:f7:a4:67:ec:6a:b8:29:08:be:6a:e0:dd:a0:
e8:80:c6:26:04:83:b4:9b:7b:95:f2:ca:fc:5c:8f:
b1:35:85:a6:06:5b:d6:9d:84:3a:c8:60:93:a6:e9:
17:d5:82:1f:a0:61:68:bb:5f:48:ec:25:e0:93:32:
7a:14:62:24:a7:2a:be:f6:a2:76:64:26:b8:c5:7a:
2c:5f:56:3c:64:42:3b:bf:a2:ec:a2:92:87:f0:9d:
83:c1:bc:eb:2f:ee:62:ae:c2:81:5a:3e:0f:ea:fa:
03:de:20:8e:65:a1:47:ba:32:82:4f:1d:b6:ef:70:
be:5a:90:10:a8:b3:0d:b0:77:b0:dc:8c:59:a1:4d:
63:1e:84:c9:b4:d0:50:f9:e2:88:73:7a:f2:df:3d:
03:3b:c9:5d:a0:a4:45:4f:b9:27:68:40:34:37:31:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:96:6C:3E:3D:0D:5A:03:88:29:C1:D4:02:55:C8:69:1C:19:B8:DB
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/rpZsPj0NWgOIKcHUAlXIaRwZuNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:af:a7:53:fd:0c:53:5c:38:96:8f:46:d0:98:f3:54:a2:b1:
94:f4:e9:c2:5f:b6:f5:ce:53:2f:02:da:01:8a:48:dd:a7:88:
c9:2e:a6:03:7a:80:45:77:ec:d3:73:17:1a:6e:83:71:d4:78:
b3:3b:11:51:a9:a0:ca:cf:6f:bf:7d:70:7e:b1:de:66:ab:c2:
c9:bc:fd:f4:32:00:f0:97:72:e7:08:c2:3e:30:c9:c5:72:f7:
b0:99:aa:10:b3:39:ab:33:b3:5d:01:dc:b8:18:6c:88:16:34:
1c:b9:dc:dd:a0:37:ba:02:b5:39:b3:c2:4b:69:1c:15:69:b3:
c7:cd:cb:03:50:fc:03:25:a2:e8:9a:14:07:5f:af:b0:b2:80:
bf:1b:89:73:43:a3:b3:57:ca:18:16:65:ff:ea:9c:38:00:ee:
67:da:a7:42:80:5a:8c:dc:20:47:a4:e9:92:e9:b7:42:85:d6:
56:4e:6c:77:b7:1d:f2:eb:1a:b3:ee:9e:84:34:8b:fd:46:83:
24:cd:7e:46:0b:63:da:b9:2a:8d:8b:78:cd:0f:08:3d:bd:ed:
c4:62:fa:68:a8:86:88:b9:7f:ff:e2:ed:e0:f3:d7:0e:b4:6d:
77:35:5b:87:d9:a1:8c:f6:f8:f3:5d:96:fe:cd:45:90:9c:7e:
b5:3e:78:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQRalXbR5BrcCnj40KAquUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMDI1MjMxMTMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTk2NmMzZTNkMGQ1YTAzODgyOWMxZDQwMjU1Yzg2OTFjMTliOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM4+PP4SGV2gNh2fuAdvck1kjjS/
hHpMmszk019ttGTTQSBhDe8JhV7Ju4OMb3uGsMwJJScTqpMA8LNZB8HthRYfTzB7
zRP+8A3R84+pZeIz55F6ZXtwzECBa/ekZ+xquCkIvmrg3aDogMYmBIO0m3uV8sr8
XI+xNYWmBlvWnYQ6yGCTpukX1YIfoGFou19I7CXgkzJ6FGIkpyq+9qJ2ZCa4xXos
X1Y8ZEI7v6LsopKH8J2DwbzrL+5irsKBWj4P6voD3iCOZaFHujKCTx2273C+WpAQ
qLMNsHew3IxZoU1jHoTJtNBQ+eKIc3ry3z0DO8ldoKRFT7knaEA0NzGZ+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6WbD49DVoDiCnB1AJVyGkcGbjbMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvcnBac1BqME5XZ09JS2NIVUFsWElhUndadU5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVuKMA0G
CSqGSIb3DQEBCwUAA4IBAQAar6dT/QxTXDiWj0bQmPNUorGU9OnCX7b1zlMvAtoB
ikjdp4jJLqYDeoBFd+zTcxcaboNx1HizOxFRqaDKz2+/fXB+sd5mq8LJvP30MgDw
l3LnCMI+MMnFcvewmaoQszmrM7NdAdy4GGyIFjQcudzdoDe6ArU5s8JLaRwVabPH
zcsDUPwDJaLomhQHX6+wsoC/G4lzQ6OzV8oYFmX/6pw4AO5n2qdCgFqM3CBHpOmS
6bdChdZWTmx3tx3y6xqz7p6ENIv9RoMkzX5GC2PauSqNi3jNDwg9ve3EYvpoqIaI
uX//4u3g89cOtG13NVuH2aGM9vjzXZb+zUWQnH61Pnj5
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org