Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/aKszF2bx6ixBnqvaI5rrIWZFs-A.roa
File: aKszF2bx6ixBnqvaI5rrIWZFs-A.roa (raw, json)
Hash identifier: xtjbgPlBNjjNl07k0V6RLWTyZVEV8g41yfZsPH2ws1A=
Subject key identifier: 68:AB:33:17:66:F1:EA:2C:41:9E:AB:DA:23:9A:EB:21:66:45:B3:E0
Certificate issuer: /CN=c732c680ce512d72f15c136293b737e098ac255f
Certificate serial: 018572E82FC9267D23BBFBA7495D89A247B3
Authority key identifier: C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/aKszF2bx6ixBnqvaI5rrIWZFs-A.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 45.90.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2f:c9:26:7d:23:bb:fb:a7:49:5d:89:a2:47:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c732c680ce512d72f15c136293b737e098ac255f
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68ab331766f1ea2c419eabda239aeb216645b3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:e5:ca:21:c0:d9:1d:d5:ee:8c:82:ad:15:
09:cb:24:8a:b2:c1:13:28:8d:8d:00:50:6a:13:3d:
a4:fe:6a:97:78:a7:fe:76:0a:9c:27:82:e1:fc:61:
9a:cc:b3:ad:77:5a:04:f9:77:f5:e7:f6:42:47:0f:
a3:1d:18:96:b2:2c:21:19:c6:f4:8d:d1:ae:59:f2:
ac:ad:eb:38:3e:52:83:d0:36:92:82:a8:4e:f7:09:
c3:42:73:f2:26:e4:eb:8e:b2:2f:d1:14:68:4b:d7:
dd:21:d7:cb:81:d5:e1:72:5f:16:7d:c8:67:80:c9:
2c:3a:34:e6:b3:c0:ab:ed:7e:49:61:28:26:1c:b5:
91:9a:fe:f1:03:f7:c1:e5:bc:ff:78:8a:70:db:f1:
1a:d5:81:89:24:a3:b3:3c:20:e0:47:39:49:64:da:
6c:75:36:6a:1d:2a:46:82:59:3c:2d:97:ad:96:c9:
f2:1d:ad:5e:6b:82:58:a4:c3:03:c8:18:52:26:ef:
11:09:e6:3b:a5:0a:0c:f2:97:a1:ec:08:71:f8:46:
f1:b0:8f:9b:96:93:bf:0d:8b:bc:fc:4e:44:5f:d0:
f8:6e:f9:82:fe:9a:f5:e4:6a:b6:0b:48:b1:36:06:
9d:4a:a2:06:ed:50:82:e9:62:43:f5:5d:1e:af:7f:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AB:33:17:66:F1:EA:2C:41:9E:AB:DA:23:9A:EB:21:66:45:B3:E0
X509v3 Authority Key Identifier:
keyid:C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/aKszF2bx6ixBnqvaI5rrIWZFs-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/xzLGgM5RLXLxXBNik7c34JisJV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:a1:70:f3:28:dd:a7:2f:84:7b:cd:a3:cd:33:60:45:fd:7a:
45:df:97:c8:2e:61:1d:a9:6c:61:e5:fd:32:5f:c9:8d:30:b9:
f3:1f:96:a6:88:49:c9:60:99:a8:ff:17:f2:57:68:b2:e8:ed:
d6:22:70:ff:6a:b2:ee:96:84:e5:7a:5e:a5:5b:df:c2:c4:be:
25:51:62:31:3c:61:13:71:2e:98:95:c2:e7:be:96:16:d6:67:
e4:16:93:c3:0d:68:f8:3f:e2:1d:9c:d3:74:1b:87:49:d9:07:
86:83:c0:00:c6:d7:f0:c3:ed:92:09:b0:c7:41:be:ae:6c:f8:
ae:6f:1c:b0:bf:fe:3a:65:93:e7:59:b3:14:5f:55:96:ec:39:
96:2f:75:b4:94:92:82:eb:f5:e3:34:b5:c6:62:1e:81:5e:8a:
ca:63:77:b8:1d:dc:94:32:ab:ac:57:9f:51:37:c3:f9:2c:77:
89:d0:a7:2d:00:64:81:ff:51:45:43:0a:d2:e0:07:01:2a:78:
b1:76:7e:49:f1:4d:24:e0:b3:1a:72:89:fe:8f:af:71:33:83:
3e:70:e4:f3:f8:ea:a4:33:42:06:5f:ad:96:1d:a0:4a:86:20:
11:14:21:31:ee:1b:fb:67:a1:3b:3e:a2:49:c4:6c:d5:e9:de:
97:65:29:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6C/JJn0ju/unSV2JokezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MzJjNjgwY2U1MTJkNzJmMTVjMTM2MjkzYjczN2UwOThh
YzI1NWYwHhcNMjMwMTAyMTQzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGFiMzMxNzY2ZjFlYTJjNDE5ZWFiZGEyMzlhZWIyMTY2NDViM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/jlyiHA2R3V7oyCrRUJyySKssET
KI2NAFBqEz2k/mqXeKf+dgqcJ4Lh/GGazLOtd1oE+Xf15/ZCRw+jHRiWsiwhGcb0
jdGuWfKsres4PlKD0DaSgqhO9wnDQnPyJuTrjrIv0RRoS9fdIdfLgdXhcl8Wfchn
gMksOjTms8Cr7X5JYSgmHLWRmv7xA/fB5bz/eIpw2/Ea1YGJJKOzPCDgRzlJZNps
dTZqHSpGglk8LZetlsnyHa1ea4JYpMMDyBhSJu8RCeY7pQoM8peh7Ahx+EbxsI+b
lpO/DYu8/E5EX9D4bvmC/pr15Gq2C0ixNgadSqIG7VCC6WJD9V0er38D1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGirMxdm8eosQZ6r2iOa6yFmRbPgMB8GA1UdIwQY
MBaAFMcyxoDOUS1y8VwTYpO3N+CYrCVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHpMR2dNNVJMWEx4WEJOaWs3YzM0SmlzSlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNWE1NDgtODk3Zi00MDA3LTk2YmIt
Mzg4ZWY5OTk3YTcyLzEvYUtzekYyYng2aXhCbnF2YUk1cnJJV1pGcy1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mNWE1NDgtODk3Zi00MDA3LTk2YmItMzg4ZWY5OTk3YTcy
LzEveHpMR2dNNVJMWEx4WEJOaWs3YzM0SmlzSlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVq4MA0G
CSqGSIb3DQEBCwUAA4IBAQCloXDzKN2nL4R7zaPNM2BF/XpF35fILmEdqWxh5f0y
X8mNMLnzH5amiEnJYJmo/xfyV2iy6O3WInD/arLuloTlel6lW9/CxL4lUWIxPGET
cS6YlcLnvpYW1mfkFpPDDWj4P+IdnNN0G4dJ2QeGg8AAxtfww+2SCbDHQb6ubPiu
bxywv/46ZZPnWbMUX1WW7DmWL3W0lJKC6/XjNLXGYh6BXorKY3e4HdyUMqusV59R
N8P5LHeJ0KctAGSB/1FFQwrS4AcBKnixdn5J8U0k4LMacon+j69xM4M+cOTz+Oqk
M0IGX62WHaBKhiARFCEx7hv7Z6E7PqJJxGzV6d6XZSm2
-----END CERTIFICATE-----
Generated at Fri Dec 8 15:21:31 2023 by rpki-client on console-fra.rpki-client.org