Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/N42keinReJ2FGXvwhZ4eF4Vt1Ew.roa
File: N42keinReJ2FGXvwhZ4eF4Vt1Ew.roa (raw, json)
Hash identifier: T3gTbmluD7q6nhsdtjBdIC9izt5XFb8NamqoCwQiOQ8=
Subject key identifier: 37:8D:A4:7A:29:D1:78:9D:85:19:7B:F0:85:9E:1E:17:85:6D:D4:4C
Certificate issuer: /CN=dd82de4f1304339fde527ba06033ca9e511171bd
Certificate serial: 01856D38780E8F1A5D796AC8D2152BD202F7
Authority key identifier: DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/N42keinReJ2FGXvwhZ4eF4Vt1Ew.roa
Signing time: Sun 01 Jan 2023 12:04:55 +0000
ROA not before: Sun 01 Jan 2023 12:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211903
IP address blocks: 45.94.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:78:0e:8f:1a:5d:79:6a:c8:d2:15:2b:d2:02:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd82de4f1304339fde527ba06033ca9e511171bd
Validity
Not Before: Jan 1 12:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=378da47a29d1789d85197bf0859e1e17856dd44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:b7:16:6e:b4:66:10:f8:ab:7f:3e:96:eb:
67:f8:29:f6:41:af:cf:ec:d5:52:b5:ea:f5:98:94:
57:6f:19:7f:ec:34:dc:cf:82:30:8b:93:0d:59:a1:
32:79:f3:70:c2:8f:ce:49:4b:79:7f:3b:0a:44:e6:
66:33:d8:f2:43:8b:3d:fd:4f:c9:2e:4a:40:c0:90:
f0:0d:f0:26:16:85:99:4c:cb:4e:ce:8c:82:14:62:
95:c9:8e:f1:1d:2e:2d:d3:b5:0d:c3:8f:e8:c9:18:
d2:2d:87:db:4e:52:9a:f1:28:30:8d:95:7c:68:9b:
51:b8:6f:35:ca:7d:e1:fc:c3:b2:31:5f:52:9a:5b:
e3:86:9f:51:ba:51:70:ac:f4:12:3c:16:27:50:6f:
2b:52:e3:a9:72:d7:36:03:46:72:be:90:1c:6d:bb:
f6:7e:a2:5a:55:7c:38:9d:02:0c:1a:58:00:17:65:
a6:65:a0:b4:ba:fe:70:00:6b:2e:25:88:4b:d1:e9:
9f:d2:a8:30:24:99:83:3c:09:70:20:28:19:4d:c8:
47:b8:33:96:1b:9c:42:79:88:30:f8:55:f0:7d:c1:
d3:d6:d7:e3:b6:6d:3f:9d:99:ef:fb:66:32:80:4d:
e0:2e:61:de:81:f7:e4:54:85:16:73:1d:08:54:66:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8D:A4:7A:29:D1:78:9D:85:19:7B:F0:85:9E:1E:17:85:6D:D4:4C
X509v3 Authority Key Identifier:
keyid:DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/N42keinReJ2FGXvwhZ4eF4Vt1Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.253.0/24
Signature Algorithm: sha256WithRSAEncryption
11:91:b3:4e:48:e5:5b:7b:f6:e8:af:66:0b:36:4a:35:f4:a4:
58:b1:d4:a0:25:dd:03:dc:90:4b:f7:e0:14:ac:10:9b:99:56:
e3:e2:05:cb:de:d3:6c:db:25:03:57:1d:ff:07:31:a7:2a:f7:
87:5c:a1:c1:11:f6:95:2d:50:8a:b9:1f:66:de:2f:68:12:c3:
c1:26:f0:df:ef:f1:ac:3f:ee:ef:7e:e4:99:a6:d5:40:8e:4f:
a0:7f:5f:a5:60:1f:ef:fb:2b:da:c9:4a:db:b2:66:e0:e7:b3:
6f:8f:32:25:33:e4:8a:03:1d:ac:49:27:91:a4:6b:03:28:01:
23:0e:c3:00:ec:f9:9e:0e:ad:a9:86:19:51:40:d4:e4:9e:8b:
31:ac:08:1e:b4:ab:a9:c4:e5:2b:29:e0:fa:10:a4:70:c1:74:
a7:1b:50:c5:98:57:25:74:c0:55:3c:e8:cf:a5:a0:5a:68:14:
20:88:76:e0:6f:1b:6a:f0:9c:3e:ca:61:c2:0c:da:0d:94:d1:
ae:c3:a1:59:b7:76:c8:cb:57:a1:5e:74:b2:7a:a4:47:ba:73:
6c:43:59:17:16:6c:5a:78:b5:77:07:ef:6e:1f:5c:c2:88:b9:
e4:e1:7b:1a:9f:a2:98:78:7f:27:ea:e2:c3:70:10:38:84:9b:
ee:a9:f4:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtOHgOjxpdeWrI0hUr0gL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkODJkZTRmMTMwNDMzOWZkZTUyN2JhMDYwMzNjYTllNTEx
MTcxYmQwHhcNMjMwMTAxMTIwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzhkYTQ3YTI5ZDE3ODlkODUxOTdiZjA4NTllMWUxNzg1NmRkNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlui3Fm60ZhD4q38+lutn+Cn2Qa/P
7NVSter1mJRXbxl/7DTcz4Iwi5MNWaEyefNwwo/OSUt5fzsKROZmM9jyQ4s9/U/J
LkpAwJDwDfAmFoWZTMtOzoyCFGKVyY7xHS4t07UNw4/oyRjSLYfbTlKa8SgwjZV8
aJtRuG81yn3h/MOyMV9Smlvjhp9RulFwrPQSPBYnUG8rUuOpctc2A0ZyvpAcbbv2
fqJaVXw4nQIMGlgAF2WmZaC0uv5wAGsuJYhL0emf0qgwJJmDPAlwICgZTchHuDOW
G5xCeYgw+FXwfcHT1tfjtm0/nZnv+2YygE3gLmHegffkVIUWcx0IVGZtLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDeNpHop0XidhRl78IWeHheFbdRMMB8GA1UdIwQY
MBaAFN2C3k8TBDOf3lJ7oGAzyp5REXG9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lMZVR4TUVNNV9lVW51Z1lEUEtubEVSY2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOGJiMWItZDZmZC00OWExLTk2NTMt
ZmYxNTdiZWYwNjIxLzEvTjQya2VpblJlSjJGR1h2d2haNGVGNFZ0MUV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mOGJiMWItZDZmZC00OWExLTk2NTMtZmYxNTdiZWYwNjIx
LzEvM1lMZVR4TUVNNV9lVW51Z1lEUEtubEVSY2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV79MA0G
CSqGSIb3DQEBCwUAA4IBAQARkbNOSOVbe/bor2YLNko19KRYsdSgJd0D3JBL9+AU
rBCbmVbj4gXL3tNs2yUDVx3/BzGnKveHXKHBEfaVLVCKuR9m3i9oEsPBJvDf7/Gs
P+7vfuSZptVAjk+gf1+lYB/v+yvayUrbsmbg57NvjzIlM+SKAx2sSSeRpGsDKAEj
DsMA7PmeDq2phhlRQNTknosxrAgetKupxOUrKeD6EKRwwXSnG1DFmFcldMBVPOjP
paBaaBQgiHbgbxtq8Jw+ymHCDNoNlNGuw6FZt3bIy1ehXnSyeqRHunNsQ1kXFmxa
eLV3B+9uH1zCiLnk4Xsan6KYeH8n6uLDcBA4hJvuqfSS
-----END CERTIFICATE-----
Generated at Wed Nov 29 15:03:54 2023 by rpki-client on console-fra.rpki-client.org