Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b32547-b440-441e-b6ce-03cd5a1c207c/1/YKKjSHIt9059QMhbI6SnV2WcGHE.roa
File: YKKjSHIt9059QMhbI6SnV2WcGHE.roa (raw, json)
Hash identifier: SsgiFyl3txAAC1idnQilZ8X5xlaxCwSP3+ite0OCJCo=
Subject key identifier: 60:A2:A3:48:72:2D:F7:4E:7D:40:C8:5B:23:A4:A7:57:65:9C:18:71
Certificate issuer: /CN=bda68b3ff01cdb43896f93c1e90c69d9934f428d
Certificate serial: 01F50C26
Authority key identifier: BD:A6:8B:3F:F0:1C:DB:43:89:6F:93:C1:E9:0C:69:D9:93:4F:42:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaaLP_Ac20OJb5PB6Qxp2ZNPQo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b32547-b440-441e-b6ce-03cd5a1c207c/1/YKKjSHIt9059QMhbI6SnV2WcGHE.roa
Signing time: Sat 01 Jan 2022 03:54:16 +0000
ROA not before: Sat 01 Jan 2022 03:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137443
IP address blocks: 45.146.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32836646 (0x1f50c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda68b3ff01cdb43896f93c1e90c69d9934f428d
Validity
Not Before: Jan 1 03:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60a2a348722df74e7d40c85b23a4a757659c1871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:b4:a8:b5:3d:a9:4a:94:4e:1c:f1:c0:b5:
31:8e:00:d5:53:b3:4d:6d:9a:bc:18:67:a7:ac:be:
23:37:20:c5:71:24:25:f4:0f:79:e9:4b:73:a8:d2:
86:a8:04:8e:9a:2c:50:44:cc:1b:2d:e1:32:89:fd:
0e:75:47:c5:74:47:17:c1:4f:b3:f7:69:c9:1d:47:
1e:39:2c:9a:f2:7e:0a:2f:67:bf:e8:75:7b:a8:79:
ab:94:24:fc:a4:e4:76:bf:7c:37:ea:5d:b3:13:15:
ee:fb:29:ad:15:84:91:e8:1e:bc:45:c1:36:09:e2:
78:9f:7b:63:bd:55:9d:2e:36:44:e5:25:91:6a:8e:
d2:08:79:04:ec:d3:fd:3e:8c:33:b3:bf:fc:66:b7:
f6:11:c9:e6:68:92:f3:4b:10:33:04:ff:75:ea:38:
98:b5:4f:ea:4c:c8:6c:8d:de:b8:17:fd:6f:9c:a7:
c3:b4:c9:37:48:08:9b:dc:07:2c:99:63:97:1f:e1:
37:d2:39:79:a5:26:c0:90:8e:02:0b:45:7d:a3:9a:
94:ea:ea:5d:9f:5e:d0:72:9b:25:bd:ac:3b:c6:cc:
95:8d:7d:0a:25:a0:8f:0d:d8:bf:30:1b:74:98:34:
86:37:29:1f:8c:31:12:25:31:34:96:2c:48:bb:12:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A2:A3:48:72:2D:F7:4E:7D:40:C8:5B:23:A4:A7:57:65:9C:18:71
X509v3 Authority Key Identifier:
keyid:BD:A6:8B:3F:F0:1C:DB:43:89:6F:93:C1:E9:0C:69:D9:93:4F:42:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaaLP_Ac20OJb5PB6Qxp2ZNPQo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b32547-b440-441e-b6ce-03cd5a1c207c/1/YKKjSHIt9059QMhbI6SnV2WcGHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b32547-b440-441e-b6ce-03cd5a1c207c/1/vaaLP_Ac20OJb5PB6Qxp2ZNPQo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.112.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:4b:3d:61:73:72:6b:c1:07:0e:47:3e:1e:6c:88:3a:22:34:
ba:e3:e5:44:6b:14:1c:b8:20:6e:98:22:13:9c:1e:15:e6:9a:
4c:f6:5c:e5:0f:eb:1c:61:97:25:8c:14:12:bb:f7:e6:75:68:
7c:3a:63:de:9c:75:e7:64:31:b1:fa:94:dd:5b:e3:e2:af:fd:
d1:dd:a3:2a:81:ce:18:4b:74:ce:84:1a:56:99:4d:a6:48:95:
8c:2d:12:d7:fc:de:df:ee:14:63:3b:cd:8b:3c:f5:9d:28:c4:
de:c0:27:32:d1:88:fe:e1:7a:13:88:cb:9a:63:e5:76:fb:a6:
c6:a8:bc:1f:27:c3:a3:53:b2:51:ff:95:0d:3d:d4:f4:25:b0:
73:e5:f3:74:a3:4b:f4:ed:03:76:c5:1f:8b:12:35:02:bc:f7:
f6:83:fd:73:7b:04:d1:b9:0e:fb:65:a3:55:4f:d2:fc:4b:28:
09:82:83:43:37:83:87:1f:91:8a:24:85:b1:be:10:b3:35:68:
c2:fd:4c:54:8f:31:06:ec:0a:ab:e8:b2:84:24:10:31:79:af:
be:06:76:62:89:76:2a:1a:5d:3a:dc:80:eb:db:84:45:e8:30:
b7:78:6b:40:35:c0:2e:ed:8b:86:2c:8d:c4:be:57:58:7c:54:
fc:a9:4e:4b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAfUMJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZGE2OGIzZmYwMWNkYjQzODk2ZjkzYzFlOTBjNjlkOTkzNGY0MjhkMB4XDTIyMDEw
MTAzNTQxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjBhMmEzNDg3MjJk
Zjc0ZTdkNDBjODViMjNhNGE3NTc2NTljMTg3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKiTtKi1PalKlE4c8cC1MY4A1VOzTW2avBhnp6y+IzcgxXEk
JfQPeelLc6jShqgEjposUETMGy3hMon9DnVHxXRHF8FPs/dpyR1HHjksmvJ+Ci9n
v+h1e6h5q5Qk/KTkdr98N+pdsxMV7vsprRWEkegevEXBNgnieJ97Y71VnS42ROUl
kWqO0gh5BOzT/T6MM7O//Ga39hHJ5miS80sQMwT/deo4mLVP6kzIbI3euBf9b5yn
w7TJN0gIm9wHLJljlx/hN9I5eaUmwJCOAgtFfaOalOrqXZ9e0HKbJb2sO8bMlY19
CiWgjw3YvzAbdJg0hjcpH4wxEiUxNJYsSLsSk7sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRgoqNIci33Tn1AyFsjpKdXZZwYcTAfBgNVHSMEGDAWgBS9pos/8BzbQ4lv
k8HpDGnZk09CjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZhYUxQX0FjMjBPSmI1UEI2UXhwMlpOUFFvMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvYjMyNTQ3LWI0NDAtNDQxZS1iNmNlLTAzY2Q1YTFjMjA3Yy8x
L1lLS2pTSEl0OTA1OVFNaGJJNlNuVjJXY0dIRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
YjMyNTQ3LWI0NDAtNDQxZS1iNmNlLTAzY2Q1YTFjMjA3Yy8xL3ZhYUxQX0FjMjBP
SmI1UEI2UXhwMlpOUFFvMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2ScDANBgkqhkiG9w0BAQsFAAOC
AQEATEs9YXNya8EHDkc+HmyIOiI0uuPlRGsUHLggbpgiE5weFeaaTPZc5Q/rHGGX
JYwUErv35nVofDpj3px152QxsfqU3Vvj4q/90d2jKoHOGEt0zoQaVplNpkiVjC0S
1/ze3+4UYzvNizz1nSjE3sAnMtGI/uF6E4jLmmPldvumxqi8HyfDo1OyUf+VDT3U
9CWwc+XzdKNL9O0DdsUfixI1Arz39oP9c3sE0bkO+2WjVU/S/EsoCYKDQzeDhx+R
iiSFsb4QszVowv1MVI8xBuwKq+iyhCQQMXmvvgZ2Yol2KhpdOtyA69uERegwt3hr
QDXALu2LhiyNxL5XWHxU/KlOSw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:38 2023 by rpki-client on console-ams.rpki-client.org