Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1477da-6454-4e7b-9e0d-92d57934c88f/1/cz590o2gHx2UVM4g2EIKOQzPRzg.roa
File: cz590o2gHx2UVM4g2EIKOQzPRzg.roa (raw, json)
Hash identifier: pTfThm6w/M57uZsJzwgh2j/Gt96pK2FLS7ASILov8Rc=
Subject key identifier: 73:3E:7D:D2:8D:A0:1F:1D:94:54:CE:20:D8:42:0A:39:0C:CF:47:38
Certificate issuer: /CN=990742994f6e75a47df4d18ec2d3c24858eb1f05
Certificate serial: 0215BDF1
Authority key identifier: 99:07:42:99:4F:6E:75:A4:7D:F4:D1:8E:C2:D3:C2:48:58:EB:1F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQdCmU9udaR99NGOwtPCSFjrHwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1477da-6454-4e7b-9e0d-92d57934c88f/1/cz590o2gHx2UVM4g2EIKOQzPRzg.roa
Signing time: Sat 01 Jan 2022 04:55:57 +0000
ROA not before: Sat 01 Jan 2022 04:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34979313 (0x215bdf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990742994f6e75a47df4d18ec2d3c24858eb1f05
Validity
Not Before: Jan 1 04:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=733e7dd28da01f1d9454ce20d8420a390ccf4738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:55:37:72:d3:98:83:33:cb:2b:ba:4d:7a:
bd:52:b7:f0:26:b9:3d:a7:d2:8a:fe:57:e6:7c:56:
64:3c:a2:64:45:bf:4f:16:27:75:8f:cf:38:59:0e:
ff:a4:87:00:b1:e3:6a:f1:d1:f4:38:79:1e:13:a6:
70:cc:71:e9:5b:1b:6e:bf:ae:62:1e:8a:6b:6c:b2:
1a:6e:8b:c9:2c:b6:53:ac:2d:64:3b:df:bb:37:bb:
c9:6a:f7:25:c1:4b:f4:82:76:e3:3f:00:ec:f6:d1:
9d:7a:9a:9b:21:37:83:42:54:1c:db:9b:7f:4f:e4:
bc:47:fe:11:a0:45:bf:fc:49:eb:66:96:a1:f5:a3:
83:8e:82:17:30:4e:01:e0:95:55:04:33:5e:b1:af:
6f:40:97:fe:f5:cf:0e:81:14:4b:cb:ff:ef:a5:22:
af:64:be:10:57:c9:74:fa:6f:3e:ac:8e:fe:ac:95:
3e:fd:31:12:0a:b0:11:d6:e8:60:18:ab:8c:05:3b:
d7:f7:42:3c:e0:60:42:3e:17:63:17:20:5d:46:f6:
34:45:f1:28:4f:85:f5:52:70:fb:6f:4b:74:dd:92:
d6:28:fe:43:8b:9d:04:15:cf:d0:49:e6:7b:3b:62:
bb:ac:f8:d8:6e:c1:5d:48:d8:9a:99:d2:75:4a:39:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3E:7D:D2:8D:A0:1F:1D:94:54:CE:20:D8:42:0A:39:0C:CF:47:38
X509v3 Authority Key Identifier:
keyid:99:07:42:99:4F:6E:75:A4:7D:F4:D1:8E:C2:D3:C2:48:58:EB:1F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQdCmU9udaR99NGOwtPCSFjrHwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1477da-6454-4e7b-9e0d-92d57934c88f/1/cz590o2gHx2UVM4g2EIKOQzPRzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1477da-6454-4e7b-9e0d-92d57934c88f/1/mQdCmU9udaR99NGOwtPCSFjrHwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.184.0-45.130.186.255
Signature Algorithm: sha256WithRSAEncryption
d0:52:4e:e9:e3:52:f9:1d:5c:f3:47:86:bf:17:87:f6:45:90:
71:df:89:45:4c:98:50:94:36:a2:d1:3d:54:1e:1a:53:08:c2:
27:fc:5a:58:48:4a:11:a1:b4:86:cf:45:2a:0d:5f:d4:c8:1b:
92:56:93:46:e5:21:6f:9b:59:d5:22:a5:90:f2:6f:35:ab:79:
bd:4c:ca:24:44:c7:79:3c:2f:bb:68:60:6c:89:1b:ab:b7:1b:
2c:bb:71:99:f1:3a:91:4a:30:b0:3d:ff:6c:42:aa:73:d5:15:
dd:5a:b4:ff:3d:0a:05:a6:bd:c3:50:f5:ea:49:71:96:55:40:
52:b3:5e:7d:fd:a3:b8:e1:0b:3a:7d:cc:59:b1:2e:2e:45:b5:
01:be:c9:a4:e1:70:26:52:f4:1d:e2:01:9b:40:99:bb:4c:a1:
56:63:62:a4:2e:15:ac:20:ba:a4:5b:6e:22:ed:af:5d:6a:54:
49:2a:0a:9a:9d:96:55:8e:6b:ad:54:e1:40:b6:51:df:d1:b0:
02:e1:c4:d4:17:16:a7:8d:8e:1f:7a:5e:04:5f:b8:6b:ba:87:
d6:d4:3d:74:86:c0:ce:a1:e1:11:49:67:c9:21:3f:4c:53:10:
4e:8a:ac:8b:cd:99:d6:a9:42:eb:8c:2a:52:80:9e:7f:c3:1b:
21:b5:7e:0a
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEAhW98TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTA3NDI5OTRmNmU3NWE0N2RmNGQxOGVjMmQzYzI0ODU4ZWIxZjA1MB4XDTIyMDEw
MTA0NTU1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzMzZTdkZDI4ZGEw
MWYxZDk0NTRjZTIwZDg0MjBhMzkwY2NmNDczODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALu5VTdy05iDM8sruk16vVK38Ca5PafSiv5X5nxWZDyiZEW/
TxYndY/POFkO/6SHALHjavHR9Dh5HhOmcMxx6Vsbbr+uYh6Ka2yyGm6LySy2U6wt
ZDvfuze7yWr3JcFL9IJ24z8A7PbRnXqamyE3g0JUHNubf0/kvEf+EaBFv/xJ62aW
ofWjg46CFzBOAeCVVQQzXrGvb0CX/vXPDoEUS8v/76Uir2S+EFfJdPpvPqyO/qyV
Pv0xEgqwEdboYBirjAU71/dCPOBgQj4XYxcgXUb2NEXxKE+F9VJw+29LdN2S1ij+
Q4udBBXP0Enmeztiu6z42G7BXUjYmpnSdUo5Av0CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBRzPn3SjaAfHZRUziDYQgo5DM9HODAfBgNVHSMEGDAWgBSZB0KZT251pH30
0Y7C08JIWOsfBTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21RZENtVTl1ZGFSOTlOR093dFBDU0Zqckh3VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvMTQ3N2RhLTY0NTQtNGU3Yi05ZTBkLTkyZDU3OTM0Yzg4Zi8x
L2N6NTkwbzJnSHgyVVZNNGcyRUlLT1F6UFJ6Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
MTQ3N2RhLTY0NTQtNGU3Yi05ZTBkLTkyZDU3OTM0Yzg4Zi8xL21RZENtVTl1ZGFS
OTlOR093dFBDU0Zqckh3VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQDLYK4AwQALYK6MA0GCSqGSIb3
DQEBCwUAA4IBAQDQUk7p41L5HVzzR4a/F4f2RZBx34lFTJhQlDai0T1UHhpTCMIn
/FpYSEoRobSGz0UqDV/UyBuSVpNG5SFvm1nVIqWQ8m81q3m9TMokRMd5PC+7aGBs
iRurtxssu3GZ8TqRSjCwPf9sQqpz1RXdWrT/PQoFpr3DUPXqSXGWVUBSs159/aO4
4Qs6fcxZsS4uRbUBvsmk4XAmUvQd4gGbQJm7TKFWY2KkLhWsILqkW24i7a9dalRJ
KgqanZZVjmutVOFAtlHf0bAC4cTUFxanjY4fel4EX7hruofW1D10hsDOoeERSWfJ
IT9MUxBOiqyLzZnWqULrjCpSgJ5/wxshtX4K
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-fra.rpki-client.org