Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/vulNLWaHPml8snhr1S3gjJJkzCc.roa
File: vulNLWaHPml8snhr1S3gjJJkzCc.roa (raw, json)
Hash identifier: heN8e+XiMtwM4ZS6/RZ7wYLd5CDId9cxb0ujtkJGdG8=
Subject key identifier: BE:E9:4D:2D:66:87:3E:69:7C:B2:78:6B:D5:2D:E0:8C:92:64:CC:27
Certificate issuer: /CN=f86074d2b355c5761984a1d14271cf4599516eaf
Certificate serial: 018755B62A26907EDB58F29476FC057DB78B
Authority key identifier: F8:60:74:D2:B3:55:C5:76:19:84:A1:D1:42:71:CF:45:99:51:6E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GB00rNVxXYZhKHRQnHPRZlRbq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/vulNLWaHPml8snhr1S3gjJJkzCc.roa
Signing time: Thu 06 Apr 2023 08:36:54 +0000
ROA not before: Thu 06 Apr 2023 08:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58293
IP address blocks: 45.11.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:b6:2a:26:90:7e:db:58:f2:94:76:fc:05:7d:b7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86074d2b355c5761984a1d14271cf4599516eaf
Validity
Not Before: Apr 6 08:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bee94d2d66873e697cb2786bd52de08c9264cc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dc:f8:fc:d4:b2:48:07:6c:91:c9:a1:33:d3:
a8:b2:f2:36:79:1f:4e:a3:04:4d:7f:36:3f:19:1c:
df:b0:6f:7e:17:3b:49:e3:f6:e8:53:45:72:fc:f0:
10:43:5f:4a:2d:a5:34:80:f7:69:d9:53:0c:be:32:
23:f0:b9:f1:81:d2:8f:59:56:94:cc:cd:ca:24:d6:
4a:62:7f:2c:40:47:59:91:9a:29:a2:10:f3:e9:81:
ec:67:7c:55:19:67:15:d5:87:bd:a2:4b:5e:c3:fa:
69:3b:77:32:f3:77:e7:61:2b:4f:38:5e:3f:fa:b2:
d2:a6:31:eb:92:9b:73:1b:5c:b4:c1:b8:24:d7:08:
43:ea:46:a8:6e:73:c0:9e:63:11:90:3f:7f:f1:a8:
5f:c0:f4:64:cd:86:1f:25:10:99:35:ba:54:49:a4:
9a:87:97:26:0e:bb:6a:1d:97:5d:a5:fd:9c:c0:c6:
21:4d:37:2a:f3:84:ea:2e:08:c3:2d:7d:bc:4a:23:
0e:14:a4:04:49:e4:fd:24:a4:6a:c5:5b:08:08:d5:
27:91:02:11:7d:70:b6:8b:6c:81:14:79:fe:bc:12:
24:4b:6e:98:13:cd:f8:e4:e8:6f:cc:00:b1:df:b5:
ac:1d:94:98:9c:5d:4e:79:b8:ba:07:1c:60:07:87:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E9:4D:2D:66:87:3E:69:7C:B2:78:6B:D5:2D:E0:8C:92:64:CC:27
X509v3 Authority Key Identifier:
keyid:F8:60:74:D2:B3:55:C5:76:19:84:A1:D1:42:71:CF:45:99:51:6E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GB00rNVxXYZhKHRQnHPRZlRbq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/vulNLWaHPml8snhr1S3gjJJkzCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/1-GB00rNVxXYZhKHRQnHPRZlRbq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:11:cb:41:09:39:1d:cf:4d:d4:6c:7d:85:0b:f6:c1:c5:6b:
55:20:e0:23:64:44:6c:6c:f3:2b:91:5c:66:b4:64:5c:e0:16:
01:b6:04:99:b6:9a:51:af:e0:82:cd:d8:99:f9:21:54:5f:ae:
cc:ac:fa:00:2e:2a:e6:02:df:bf:3f:d7:84:29:10:cd:4f:29:
ed:d6:cc:67:da:d3:2a:6a:a9:07:89:f8:82:48:b4:45:77:19:
18:f4:89:f8:48:11:d4:3b:ac:ce:a7:fb:60:e5:1f:68:27:a2:
7b:ee:67:ac:01:59:6f:9a:5e:7f:96:b8:95:ab:ee:f3:2b:0a:
11:50:55:31:ba:4a:5a:6a:b1:60:f8:dd:81:89:3b:1d:ee:fa:
8d:6a:f6:11:cd:91:26:ac:e2:17:ff:85:98:c6:41:95:ff:65:
85:2a:b0:a5:1b:6a:77:cd:1d:5a:9c:ea:61:ea:88:0e:18:12:
c0:25:74:2c:c2:c9:b3:fe:ef:dd:2e:19:3d:f8:34:d6:0b:72:
8b:c9:0b:69:a6:f8:df:51:ad:43:e8:79:ea:47:19:95:0a:ca:
c7:f0:78:27:62:6e:f4:6a:6f:6d:62:8c:0c:70:07:87:10:ba:
e8:b5:ed:48:16:0f:44:7a:e3:df:4c:a7:9d:fe:cc:4b:84:a0:
8d:8f:8b:6e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYdVtiomkH7bWPKUdvwFfbeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjA3NGQyYjM1NWM1NzYxOTg0YTFkMTQyNzFjZjQ1OTk1
MTZlYWYwHhcNMjMwNDA2MDgzNjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWU5NGQyZDY2ODczZTY5N2NiMjc4NmJkNTJkZTA4YzkyNjRjYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtz4/NSySAdskcmhM9OosvI2eR9O
owRNfzY/GRzfsG9+FztJ4/boU0Vy/PAQQ19KLaU0gPdp2VMMvjIj8LnxgdKPWVaU
zM3KJNZKYn8sQEdZkZopohDz6YHsZ3xVGWcV1Ye9oktew/ppO3cy83fnYStPOF4/
+rLSpjHrkptzG1y0wbgk1whD6kaobnPAnmMRkD9/8ahfwPRkzYYfJRCZNbpUSaSa
h5cmDrtqHZddpf2cwMYhTTcq84TqLgjDLX28SiMOFKQESeT9JKRqxVsICNUnkQIR
fXC2i2yBFHn+vBIkS26YE8345OhvzACx37WsHZSYnF1Oebi6BxxgB4eikwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFL7pTS1mhz5pfLJ4a9Ut4IySZMwnMB8GA1UdIwQY
MBaAFPhgdNKzVcV2GYSh0UJxz0WZUW6vMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HQjAwck5WeFhZWmhLSFJRbkhQUlpsUmJxOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNmM5OTliLTkwYTMtNDY0Ni1iMWFk
LTQyZTA4NWE4ODVjNS8xL3Z1bE5MV2FIUG1sOHNuaHIxUzNnakpKa3pDYy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGIvNmM5OTliLTkwYTMtNDY0Ni1iMWFkLTQyZTA4NWE4ODVj
NS8xLzEtR0IwMHJOVnhYWVpoS0hSUW5IUFJabFJicTguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItC8gw
DQYJKoZIhvcNAQELBQADggEBAI4Ry0EJOR3PTdRsfYUL9sHFa1Ug4CNkRGxs8yuR
XGa0ZFzgFgG2BJm2mlGv4ILN2Jn5IVRfrsys+gAuKuYC378/14QpEM1PKe3WzGfa
0ypqqQeJ+IJItEV3GRj0ifhIEdQ7rM6n+2DlH2gnonvuZ6wBWW+aXn+WuJWr7vMr
ChFQVTG6SlpqsWD43YGJOx3u+o1q9hHNkSas4hf/hZjGQZX/ZYUqsKUbanfNHVqc
6mHqiA4YEsAldCzCybP+790uGT34NNYLcovJC2mm+N9RrUPoeepHGZUKysfweCdi
bvRqb21ijAxwB4cQuui17UgWD0R6499Mp53+zEuEoI2Pi24=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:44 2024 by rpki-client on console-ams.rpki-client.org