Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c5227a-d5ae-4e6e-9d80-a71e12b1bf2a/1/4j2VX7itde5mMqdC76JP9PpRXfk.roa
File: 4j2VX7itde5mMqdC76JP9PpRXfk.roa (raw, json)
Hash identifier: LBpkxdr/CPfxko1R+0YQ3elkJZB7Lu1qwZnNpOYyPpc=
Subject key identifier: E2:3D:95:5F:B8:AD:75:EE:66:32:A7:42:EF:A2:4F:F4:FA:51:5D:F9
Certificate issuer: /CN=046da5d90755218175f66f723b37d408b522b735
Certificate serial: 07227923
Authority key identifier: 04:6D:A5:D9:07:55:21:81:75:F6:6F:72:3B:37:D4:08:B5:22:B7:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG2l2QdVIYF19m9yOzfUCLUitzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c5227a-d5ae-4e6e-9d80-a71e12b1bf2a/1/4j2VX7itde5mMqdC76JP9PpRXfk.roa
Signing time: Sat 01 Jan 2022 13:57:34 +0000
ROA not before: Sat 01 Jan 2022 13:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63473
IP address blocks: 45.91.95.0/24 maxlen: 24
45.91.92.0/24 maxlen: 24
45.91.93.0/24 maxlen: 24
45.91.94.0/24 maxlen: 24
2a0e:dc0:5::/48 maxlen: 48
2a0e:dc0:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119699747 (0x7227923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046da5d90755218175f66f723b37d408b522b735
Validity
Not Before: Jan 1 13:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e23d955fb8ad75ee6632a742efa24ff4fa515df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:90:01:7e:7d:1a:5e:95:70:b9:6a:0d:b0:
8c:fe:4a:08:00:53:9d:c9:95:df:cc:55:2a:f5:3b:
52:66:34:55:66:4e:20:db:87:d4:d8:ae:ab:19:00:
5e:9c:54:7d:c3:6f:83:23:96:55:42:d0:49:44:b8:
c3:12:c3:27:93:00:f3:c3:27:cd:6a:c4:90:23:51:
f0:4d:99:56:42:ed:09:49:8b:08:6b:1c:21:ef:0b:
53:4c:f5:8d:3a:1c:de:f9:43:3b:15:e1:f6:fd:f2:
27:52:de:79:f7:c8:27:c5:05:7e:40:89:a9:8a:fa:
51:10:f9:ff:26:e5:9a:e2:e5:6e:df:45:c7:55:f4:
b3:1d:73:78:cb:30:32:d1:c6:8b:ec:90:be:69:16:
39:15:7c:82:59:99:5a:c3:e2:45:3e:59:ed:32:14:
16:f4:93:cb:30:a2:b2:34:16:90:5a:4c:05:3f:c3:
ae:17:6e:bb:f3:66:b9:ca:ac:16:ed:d8:0d:27:8b:
6b:f1:45:32:2f:1f:24:a9:15:cb:e8:f5:89:15:e8:
c0:b3:f8:e5:4a:be:f0:53:7a:9c:40:0b:fd:a3:7a:
a9:07:c0:9a:e2:57:f9:49:d3:d3:ae:e7:cc:f8:68:
60:f2:c3:8c:d5:29:26:62:97:72:31:d9:44:82:71:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3D:95:5F:B8:AD:75:EE:66:32:A7:42:EF:A2:4F:F4:FA:51:5D:F9
X509v3 Authority Key Identifier:
keyid:04:6D:A5:D9:07:55:21:81:75:F6:6F:72:3B:37:D4:08:B5:22:B7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG2l2QdVIYF19m9yOzfUCLUitzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c5227a-d5ae-4e6e-9d80-a71e12b1bf2a/1/4j2VX7itde5mMqdC76JP9PpRXfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c5227a-d5ae-4e6e-9d80-a71e12b1bf2a/1/BG2l2QdVIYF19m9yOzfUCLUitzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
IPv6:
2a0e:dc0:3::/48
2a0e:dc0:5::/48
Signature Algorithm: sha256WithRSAEncryption
8a:b2:65:2b:26:90:2e:b2:3f:72:20:d9:63:45:66:f9:9a:72:
05:38:9e:ce:eb:67:42:d6:8a:1c:92:fa:01:7f:8f:8e:6d:a0:
e9:07:ed:99:69:9f:76:30:9e:0b:94:51:b2:a3:dc:40:6e:3f:
e6:96:92:a9:ca:48:d4:ba:4b:fa:b3:24:a3:a5:da:50:5f:2d:
11:07:20:6a:e7:48:41:3e:36:cd:b6:5b:46:bd:8c:73:64:8d:
61:cb:e5:bc:2d:31:cd:f9:af:1a:fe:7b:fe:10:2b:ce:6b:b3:
30:8c:e2:83:fd:23:6a:df:42:4f:de:ee:6e:10:eb:22:e9:93:
48:f3:5e:c2:59:1a:78:71:aa:63:ee:ab:d2:12:76:de:c2:40:
73:ec:3d:46:aa:e0:01:72:84:74:10:e8:22:39:da:7d:35:33:
65:47:a0:64:e5:6e:7b:11:2a:97:21:2d:68:2c:e8:06:1e:f5:
68:91:0e:29:e4:7b:f4:92:70:a7:85:bc:a7:3d:c5:cd:6e:ee:
9d:f6:96:db:50:38:a2:c8:8c:e2:59:d7:9a:5e:8a:d8:cc:da:
60:66:ae:cc:66:c5:ac:c6:81:5d:50:77:80:8b:c1:63:91:f7:
78:e8:68:d9:b9:3b:92:16:81:ab:57:34:d6:fb:a3:25:5a:26:
72:68:65:3e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEByJ5IzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NDZkYTVkOTA3NTUyMTgxNzVmNjZmNzIzYjM3ZDQwOGI1MjJiNzM1MB4XDTIyMDEw
MTEzNTczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTIzZDk1NWZiOGFk
NzVlZTY2MzJhNzQyZWZhMjRmZjRmYTUxNWRmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJBYkAF+fRpelXC5ag2wjP5KCABTncmV38xVKvU7UmY0VWZO
INuH1NiuqxkAXpxUfcNvgyOWVULQSUS4wxLDJ5MA88MnzWrEkCNR8E2ZVkLtCUmL
CGscIe8LU0z1jToc3vlDOxXh9v3yJ1LeeffIJ8UFfkCJqYr6URD5/yblmuLlbt9F
x1X0sx1zeMswMtHGi+yQvmkWORV8glmZWsPiRT5Z7TIUFvSTyzCisjQWkFpMBT/D
rhduu/NmucqsFu3YDSeLa/FFMi8fJKkVy+j1iRXowLP45Uq+8FN6nEAL/aN6qQfA
muJX+UnT067nzPhoYPLDjNUpJmKXcjHZRIJxxq8CAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBTiPZVfuK117mYyp0Lvok/0+lFd+TAfBgNVHSMEGDAWgBQEbaXZB1UhgXX2
b3I7N9QItSK3NTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JHMmwyUWRWSVlGMTltOXlPemZVQ0xVaXR6VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTUvYzUyMjdhLWQ1YWUtNGU2ZS05ZDgwLWE3MWUxMmIxYmYyYS8x
LzRqMlZYN2l0ZGU1bU1xZEM3NkpQOVBwUlhmay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUv
YzUyMjdhLWQ1YWUtNGU2ZS05ZDgwLWE3MWUxMmIxYmYyYS8xL0JHMmwyUWRWSVlG
MTltOXlPemZVQ0xVaXR6VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEwBgMEAi1bXDAYBAIAAjASAwcAKg4NwAAD
AwcAKg4NwAAFMA0GCSqGSIb3DQEBCwUAA4IBAQCKsmUrJpAusj9yINljRWb5mnIF
OJ7O62dC1oockvoBf4+ObaDpB+2ZaZ92MJ4LlFGyo9xAbj/mlpKpykjUukv6sySj
pdpQXy0RByBq50hBPjbNtltGvYxzZI1hy+W8LTHN+a8a/nv+ECvOa7MwjOKD/SNq
30JP3u5uEOsi6ZNI817CWRp4capj7qvSEnbewkBz7D1GquABcoR0EOgiOdp9NTNl
R6Bk5W57ESqXIS1oLOgGHvVokQ4p5Hv0knCnhbynPcXNbu6d9pbbUDiiyIziWdea
XorYzNpgZq7MZsWsxoFdUHeAi8Fjkfd46GjZuTuSFoGrVzTW+6MlWiZyaGU+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:22 2024 by rpki-client on console-ams.rpki-client.org