Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/46aQ4nit2tvOE3LvyMTZVFlsFI4.roa
File: 46aQ4nit2tvOE3LvyMTZVFlsFI4.roa (raw, json)
Hash identifier: 1vaDnOzNR4/IIETaOdipSpQJKcuEpQYR3zgrZyJUqPo=
Subject key identifier: E3:A6:90:E2:78:AD:DA:DB:CE:13:72:EF:C8:C4:D9:54:59:6C:14:8E
Certificate issuer: /CN=412ec7428c151c604ef393a0ba4979f50902012c
Certificate serial: 013F009A
Authority key identifier: 41:2E:C7:42:8C:15:1C:60:4E:F3:93:A0:BA:49:79:F5:09:02:01:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QS7HQowVHGBO85Ogukl59QkCASw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/46aQ4nit2tvOE3LvyMTZVFlsFI4.roa
Signing time: Sat 01 Jan 2022 05:53:06 +0000
ROA not before: Sat 01 Jan 2022 05:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 45.80.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20906138 (0x13f009a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ec7428c151c604ef393a0ba4979f50902012c
Validity
Not Before: Jan 1 05:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3a690e278addadbce1372efc8c4d954596c148e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:98:93:89:5a:a8:0f:ce:89:48:47:4c:ad:
59:f4:a4:5a:b2:d3:7f:55:11:aa:ea:3f:b0:29:52:
0a:ab:35:bb:7c:3e:30:d2:1c:8d:6b:60:88:ad:96:
00:bf:5c:07:af:b7:4a:f8:fc:a7:bf:e6:0c:3a:9a:
d4:53:9d:81:5f:a1:2a:a0:98:4f:f5:cf:56:92:3a:
dc:9c:50:c5:50:4f:7c:1c:a5:e1:07:48:64:60:b1:
32:44:95:77:4a:da:85:43:0f:09:f4:88:02:b4:08:
81:99:47:97:27:c6:2b:13:57:e1:4e:0e:1b:bc:75:
c9:7b:52:b9:b9:b8:9d:92:f6:57:e5:24:14:ec:cb:
59:ca:73:88:20:53:3c:2f:03:2d:49:16:b0:10:e9:
d1:3b:df:ca:6e:28:f7:9a:4c:7d:ca:5b:c5:2f:5c:
d8:72:02:3f:a5:7f:7b:3a:b9:fc:08:ec:a2:03:e5:
46:82:d3:92:16:e1:f6:63:eb:d4:23:9e:09:8a:83:
9d:e0:b7:ff:ec:a3:7f:59:ba:73:9c:aa:54:28:10:
57:d1:e8:86:d4:f1:03:2b:62:41:de:90:d6:9c:7d:
7b:63:ad:c6:72:80:6f:a4:d7:3a:0a:e5:6a:ca:d5:
0d:96:d5:0f:86:8d:b0:4a:6c:ee:86:c1:4b:e7:67:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:90:E2:78:AD:DA:DB:CE:13:72:EF:C8:C4:D9:54:59:6C:14:8E
X509v3 Authority Key Identifier:
keyid:41:2E:C7:42:8C:15:1C:60:4E:F3:93:A0:BA:49:79:F5:09:02:01:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QS7HQowVHGBO85Ogukl59QkCASw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/46aQ4nit2tvOE3LvyMTZVFlsFI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/QS7HQowVHGBO85Ogukl59QkCASw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.224.0/22
Signature Algorithm: sha256WithRSAEncryption
63:2c:11:e7:a9:30:63:01:6f:3a:df:9b:29:a3:10:5d:20:14:
d7:c9:19:b2:a5:52:c8:b2:49:d6:06:00:36:54:5e:0d:dd:1d:
26:e1:21:58:3e:77:a8:83:59:86:44:8f:54:a9:7e:b5:5a:ba:
c5:37:2c:f2:10:64:d4:cf:69:b4:fa:04:e6:68:dc:4a:08:d5:
61:a2:53:99:36:54:aa:a7:54:7c:48:52:1a:6a:00:f5:64:63:
15:af:c1:25:3d:42:03:88:3b:73:15:10:6b:5f:b9:69:22:46:
8e:8d:5a:27:07:b1:de:27:5b:59:b8:23:69:fe:90:a6:ba:67:
1e:57:d5:18:54:d6:8b:72:ee:96:33:d9:8d:4f:bc:33:a7:f8:
a6:87:70:f4:d4:68:13:03:e8:3a:8b:96:62:a7:65:61:c7:95:
d5:15:94:9a:7f:6c:fc:63:b8:7a:fe:34:c4:08:99:18:21:c9:
48:f0:3c:36:3f:1c:f9:6b:cc:86:41:7c:7a:6a:55:af:f8:7a:
fd:e7:fd:b6:12:12:a0:fe:30:29:a6:75:b1:65:d8:e2:8a:be:
82:a6:b7:42:e1:f8:09:53:b7:0a:cf:7c:50:59:42:9e:b0:be:
04:af:72:cb:94:04:ae:00:4c:26:2e:8c:90:e6:eb:f4:86:c6:
26:8f:5a:f9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAT8AmjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MTJlYzc0MjhjMTUxYzYwNGVmMzkzYTBiYTQ5NzlmNTA5MDIwMTJjMB4XDTIyMDEw
MTA1NTMwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTNhNjkwZTI3OGFk
ZGFkYmNlMTM3MmVmYzhjNGQ5NTQ1OTZjMTQ4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQMmJOJWqgPzolIR0ytWfSkWrLTf1URquo/sClSCqs1u3w+
MNIcjWtgiK2WAL9cB6+3Svj8p7/mDDqa1FOdgV+hKqCYT/XPVpI63JxQxVBPfByl
4QdIZGCxMkSVd0rahUMPCfSIArQIgZlHlyfGKxNX4U4OG7x1yXtSubm4nZL2V+Uk
FOzLWcpziCBTPC8DLUkWsBDp0Tvfym4o95pMfcpbxS9c2HICP6V/ezq5/AjsogPl
RoLTkhbh9mPr1COeCYqDneC3/+yjf1m6c5yqVCgQV9HohtTxAytiQd6Q1px9e2Ot
xnKAb6TXOgrlasrVDZbVD4aNsEps7obBS+dnKy8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTjppDieK3a284Tcu/IxNlUWWwUjjAfBgNVHSMEGDAWgBRBLsdCjBUcYE7z
k6C6SXn1CQIBLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FTN0hRb3dWSEdCTzg1T2d1a2w1OVFrQ0FTdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODUvY2UyYWExLTA2ODctNGE2YS04MTA1LTExZTQ1N2I2MTNmMS8x
LzQ2YVE0bml0MnR2T0UzTHZ5TVRaVkZsc0ZJNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUv
Y2UyYWExLTA2ODctNGE2YS04MTA1LTExZTQ1N2I2MTNmMS8xL1FTN0hRb3dWSEdC
Tzg1T2d1a2w1OVFrQ0FTdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1Q4DANBgkqhkiG9w0BAQsFAAOC
AQEAYywR56kwYwFvOt+bKaMQXSAU18kZsqVSyLJJ1gYANlReDd0dJuEhWD53qINZ
hkSPVKl+tVq6xTcs8hBk1M9ptPoE5mjcSgjVYaJTmTZUqqdUfEhSGmoA9WRjFa/B
JT1CA4g7cxUQa1+5aSJGjo1aJwex3idbWbgjaf6QprpnHlfVGFTWi3LuljPZjU+8
M6f4podw9NRoEwPoOouWYqdlYceV1RWUmn9s/GO4ev40xAiZGCHJSPA8Nj8c+WvM
hkF8empVr/h6/ef9thISoP4wKaZ1sWXY4oq+gqa3QuH4CVO3Cs98UFlCnrC+BK9y
y5QErgBMJi6MkObr9IbGJo9a+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:32 2024 by rpki-client on console-fra.rpki-client.org