Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/FRJty2sUf59UN2he9VFzUys9SrY.roa
File: FRJty2sUf59UN2he9VFzUys9SrY.roa (raw, json)
Hash identifier: E+fleffw8OO0rPZHKPj/G+ajY/KkTAKR76KV428i+u4=
Subject key identifier: 15:12:6D:CB:6B:14:7F:9F:54:37:68:5E:F5:51:73:53:2B:3D:4A:B6
Certificate issuer: /CN=b361c46090869fbdfee22436ce8a94393aa1be64
Certificate serial: 018C20A1CC8918C955AC1DDD913DC7C470A7
Authority key identifier: B3:61:C4:60:90:86:9F:BD:FE:E2:24:36:CE:8A:94:39:3A:A1:BE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2HEYJCGn73-4iQ2zoqUOTqhvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/FRJty2sUf59UN2he9VFzUys9SrY.roa
Signing time: Thu 30 Nov 2023 14:28:43 +0000
ROA not before: Thu 30 Nov 2023 14:28:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206576
IP address blocks: 45.137.44.0/22 maxlen: 22
45.137.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:a1:cc:89:18:c9:55:ac:1d:dd:91:3d:c7:c4:70:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b361c46090869fbdfee22436ce8a94393aa1be64
Validity
Not Before: Nov 30 14:28:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15126dcb6b147f9f5437685ef55173532b3d4ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:b6:4d:a4:22:96:0d:fb:ea:16:a6:b2:67:
97:13:8a:c4:d6:6e:17:5d:92:d5:7c:85:71:8c:4d:
de:27:27:73:91:b3:81:45:f0:14:a8:f2:1f:a9:8a:
69:44:d6:54:56:8a:cf:3e:ac:cd:3b:9c:e0:c7:58:
5e:fd:61:e4:96:ac:43:ab:d4:29:4f:ca:ab:c4:38:
42:a4:1b:88:dc:82:d9:11:43:77:8a:dd:82:d6:eb:
c5:6d:96:12:df:2a:24:56:1c:fd:b9:9d:1b:72:90:
ba:b7:69:9d:1c:18:b8:7b:c9:9e:ee:e8:d9:29:2f:
7b:d0:1c:50:54:16:da:ad:95:b9:39:07:fb:9d:d8:
1f:80:4b:c3:f8:ed:ab:7e:7d:f8:67:83:cb:d8:56:
86:d7:58:f0:db:71:d4:bd:a3:39:7d:86:b2:0a:53:
64:1c:af:5f:ce:1d:d1:45:58:84:05:d3:60:31:0c:
39:a3:23:c3:8b:86:47:44:58:13:13:99:04:53:87:
c1:f6:75:b6:e1:33:36:ba:92:cf:28:7e:49:5f:d4:
1f:2d:5e:22:27:0e:62:6b:4c:fa:dd:db:6e:d8:24:
6b:82:42:0c:5c:1e:f3:33:1b:02:06:a6:c2:06:1d:
16:eb:36:e9:7b:7a:6a:44:48:74:93:34:4a:d7:fb:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:6D:CB:6B:14:7F:9F:54:37:68:5E:F5:51:73:53:2B:3D:4A:B6
X509v3 Authority Key Identifier:
keyid:B3:61:C4:60:90:86:9F:BD:FE:E2:24:36:CE:8A:94:39:3A:A1:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2HEYJCGn73-4iQ2zoqUOTqhvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/FRJty2sUf59UN2he9VFzUys9SrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/909082-d7d4-4801-aafe-fdeb615a8429/1/s2HEYJCGn73-4iQ2zoqUOTqhvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.44.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b6:8e:94:05:38:84:7b:64:d4:c6:1d:4f:8a:d7:64:55:d4:
c7:08:f4:5f:4a:a1:b6:bc:da:bd:cc:bd:1a:fe:89:ce:80:f2:
f3:10:68:70:99:08:72:0c:48:1e:f1:ff:34:95:e4:1e:29:c9:
22:f1:17:0c:19:e4:e7:6f:ab:e6:6d:88:19:6f:4d:47:14:45:
87:7f:c5:6f:ad:71:a4:19:2f:3c:d4:63:d4:62:67:c7:0b:e7:
84:56:fa:cd:b5:92:50:11:7a:3c:01:46:36:ef:f1:6b:01:ff:
04:54:d0:25:6b:81:b8:d2:69:b6:c3:b9:20:b9:0e:cc:ac:4a:
6d:38:86:ad:51:2a:c8:b7:d7:48:5c:6b:5b:e0:03:42:ed:7a:
09:1e:02:50:65:f2:4d:75:d4:ba:5d:ae:b1:2b:a3:7d:da:53:
6d:ab:3b:22:ac:f3:07:e8:e8:e5:d7:d1:c8:08:5e:67:11:01:
72:f9:75:b0:7d:c0:15:88:5d:e9:67:e3:01:7d:f4:d6:1c:7b:
32:a0:b0:03:e4:f7:f3:47:57:b0:7c:fd:38:91:7b:ca:d7:c2:
36:e3:67:a4:aa:cb:98:dc:20:75:77:88:34:4b:62:e6:ed:db:
3d:7d:71:94:b4:20:97:39:b7:b1:83:de:84:ab:ba:3c:a9:c6:
d7:20:f2:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwgocyJGMlVrB3dkT3HxHCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNjFjNDYwOTA4NjlmYmRmZWUyMjQzNmNlOGE5NDM5M2Fh
MWJlNjQwHhcNMjMxMTMwMTQyODQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTEyNmRjYjZiMTQ3ZjlmNTQzNzY4NWVmNTUxNzM1MzJiM2Q0YWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7C2TaQilg376hamsmeXE4rE1m4X
XZLVfIVxjE3eJydzkbOBRfAUqPIfqYppRNZUVorPPqzNO5zgx1he/WHklqxDq9Qp
T8qrxDhCpBuI3ILZEUN3it2C1uvFbZYS3yokVhz9uZ0bcpC6t2mdHBi4e8me7ujZ
KS970BxQVBbarZW5OQf7ndgfgEvD+O2rfn34Z4PL2FaG11jw23HUvaM5fYayClNk
HK9fzh3RRViEBdNgMQw5oyPDi4ZHRFgTE5kEU4fB9nW24TM2upLPKH5JX9QfLV4i
Jw5ia0z63dtu2CRrgkIMXB7zMxsCBqbCBh0W6zbpe3pqREh0kzRK1/ua/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBUSbctrFH+fVDdoXvVRc1MrPUq2MB8GA1UdIwQY
MBaAFLNhxGCQhp+9/uIkNs6KlDk6ob5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczJIRVlKQ0duNzMtNGlRMnpvcVVPVHFodm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MDkwODItZDdkNC00ODAxLWFhZmUt
ZmRlYjYxNWE4NDI5LzEvRlJKdHkyc1VmNTlVTjJoZTlWRnpVeXM5U3JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85MDkwODItZDdkNC00ODAxLWFhZmUtZmRlYjYxNWE4NDI5
LzEvczJIRVlKQ0duNzMtNGlRMnpvcVVPVHFodm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYksMA0G
CSqGSIb3DQEBCwUAA4IBAQBkto6UBTiEe2TUxh1PitdkVdTHCPRfSqG2vNq9zL0a
/onOgPLzEGhwmQhyDEge8f80leQeKcki8RcMGeTnb6vmbYgZb01HFEWHf8VvrXGk
GS881GPUYmfHC+eEVvrNtZJQEXo8AUY27/FrAf8EVNAla4G40mm2w7kguQ7MrEpt
OIatUSrIt9dIXGtb4ANC7XoJHgJQZfJNddS6Xa6xK6N92lNtqzsirPMH6Ojl19HI
CF5nEQFy+XWwfcAViF3pZ+MBffTWHHsyoLAD5PfzR1ewfP04kXvK18I242ekqsuY
3CB1d4g0S2Lm7ds9fXGUtCCXObexg96Eq7o8qcbXIPKm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:30 2024 by rpki-client on console-fra.rpki-client.org