Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/ZfI2CSYEo7BgIllOe4V-INZxEyQ.roa
File: ZfI2CSYEo7BgIllOe4V-INZxEyQ.roa (raw, json)
Hash identifier: 0fT6fZ8h+LP/DptrJBIKc4xzC/jhy+WATg7rpcQkwj0=
Subject key identifier: 65:F2:36:09:26:04:A3:B0:60:22:59:4E:7B:85:7E:20:D6:71:13:24
Certificate issuer: /CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Certificate serial: 0181ED186D3CC37340378236621A6F0DC12B
Authority key identifier: 37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/ZfI2CSYEo7BgIllOe4V-INZxEyQ.roa
Signing time: Mon 11 Jul 2022 11:50:09 +0000
ROA not before: Mon 11 Jul 2022 11:50:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.128.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:18:6d:3c:c3:73:40:37:82:36:62:1a:6f:0d:c1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Validity
Not Before: Jul 11 11:50:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65f236092604a3b06022594e7b857e20d6711324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:78:8e:2c:2e:91:f4:cc:38:23:76:5c:9f:cc:
ca:2b:28:6f:50:c1:c9:5d:d9:79:dd:33:50:53:5b:
4b:15:75:86:1f:87:a8:bc:71:5e:75:3e:0e:3e:28:
06:4c:d9:7f:d1:7a:5c:8d:bc:ed:a0:88:5b:ea:71:
99:bd:1e:b2:84:65:40:6b:9f:f3:be:23:f4:b4:36:
e6:1e:60:09:ad:fa:5e:02:80:ea:da:b1:d3:e9:71:
af:67:0d:8b:f5:2c:ab:b9:6d:e4:8c:46:09:0e:a9:
70:a5:1c:3f:39:7e:e2:24:60:4c:85:41:b5:d4:ab:
16:0d:8e:ac:32:be:1f:8a:8b:a4:9b:d9:20:01:1b:
66:cf:a3:1e:02:cc:16:57:41:4d:95:7d:9a:13:82:
e9:3f:5a:c2:98:f4:4e:84:56:3c:16:91:17:30:6f:
95:32:a8:72:e5:0b:76:41:96:72:3c:d4:6d:6a:4b:
35:fe:80:f8:ae:36:21:62:a0:84:c9:b1:84:61:f1:
1d:ac:37:63:98:12:7b:76:48:38:b9:76:f0:be:2e:
12:5f:23:27:69:6e:9d:a5:63:4c:7a:60:f0:7a:51:
65:a7:d4:b6:7b:4a:fc:3a:2a:1d:b9:c4:bf:6d:18:
37:a3:15:2d:f4:63:1b:6d:a6:cc:0c:05:36:2c:b6:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F2:36:09:26:04:A3:B0:60:22:59:4E:7B:85:7E:20:D6:71:13:24
X509v3 Authority Key Identifier:
keyid:37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/ZfI2CSYEo7BgIllOe4V-INZxEyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/N6i1oYlcUIggUJXC96Xv6R1TnkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.232.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ad:96:fb:35:46:7b:75:46:24:0c:71:81:68:aa:d6:20:ef:
47:2e:a2:af:4d:65:e2:af:e9:8c:fb:c6:e1:1b:9c:55:32:ee:
4f:75:20:1e:05:31:a6:f3:16:b3:58:f4:fa:67:72:f0:a5:1c:
c8:d4:1d:ea:cc:06:7a:59:c4:9e:87:e0:22:28:51:9e:c6:6d:
f8:30:48:8d:68:8d:17:93:44:ca:7e:90:65:4e:b3:05:0f:cb:
47:07:6a:61:64:89:c5:ca:b3:01:47:04:bd:e4:40:11:96:d8:
86:95:c9:ed:22:86:c6:66:31:92:a2:15:b3:b3:92:4f:4d:bd:
33:24:33:e5:74:7c:b2:1e:3f:45:ca:2c:f1:89:ed:7e:fb:6a:
e2:b9:7b:e4:45:fb:40:12:db:4d:6b:f7:49:be:4f:4a:68:2a:
66:c9:05:f0:f8:9f:2c:aa:3e:83:f3:3e:87:fa:38:e7:5e:35:
47:ba:00:12:c5:a3:1d:d3:2f:a8:ca:70:c7:01:69:0a:66:09:
58:ad:e8:ef:7c:bd:99:c5:5b:c4:7f:4b:d2:0f:6e:27:84:21:
ff:f3:c6:65:ad:71:e6:ce:10:6d:5b:56:52:5f:cf:2c:f5:0a:
e6:40:33:3e:36:79:58:f2:80:a2:e8:6f:8c:be:35:76:f8:81:
a6:d0:42:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHtGG08w3NAN4I2YhpvDcErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YThiNWExODk1YzUwODgyMDUwOTVjMmY3YTVlZmU5MWQ1
MzllNDUwHhcNMjIwNzExMTE1MDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWYyMzYwOTI2MDRhM2IwNjAyMjU5NGU3Yjg1N2UyMGQ2NzExMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHiOLC6R9Mw4I3Zcn8zKKyhvUMHJ
Xdl53TNQU1tLFXWGH4eovHFedT4OPigGTNl/0XpcjbztoIhb6nGZvR6yhGVAa5/z
viP0tDbmHmAJrfpeAoDq2rHT6XGvZw2L9SyruW3kjEYJDqlwpRw/OX7iJGBMhUG1
1KsWDY6sMr4fioukm9kgARtmz6MeAswWV0FNlX2aE4LpP1rCmPROhFY8FpEXMG+V
Mqhy5Qt2QZZyPNRtaks1/oD4rjYhYqCEybGEYfEdrDdjmBJ7dkg4uXbwvi4SXyMn
aW6dpWNMemDwelFlp9S2e0r8OioducS/bRg3oxUt9GMbbabMDAU2LLYZwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXyNgkmBKOwYCJZTnuFfiDWcRMkMB8GA1UdIwQY
MBaAFDeotaGJXFCIIFCVwvel7+kdU55FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZpMW9ZbGNVSWdnVUpYQzk2WHY2UjFUbmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNTc4MzktNWI4MS00ZGY0LTg4ZjAt
MTQ5ZDhhOGUxZmNkLzEvWmZJMkNTWUVvN0JnSWxsT2U0Vi1JTlp4RXlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jNTc4MzktNWI4MS00ZGY0LTg4ZjAtMTQ5ZDhhOGUxZmNk
LzEvTjZpMW9ZbGNVSWdnVUpYQzk2WHY2UjFUbmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYDoMA0G
CSqGSIb3DQEBCwUAA4IBAQAWrZb7NUZ7dUYkDHGBaKrWIO9HLqKvTWXir+mM+8bh
G5xVMu5PdSAeBTGm8xazWPT6Z3LwpRzI1B3qzAZ6WcSeh+AiKFGexm34MEiNaI0X
k0TKfpBlTrMFD8tHB2phZInFyrMBRwS95EARltiGlcntIobGZjGSohWzs5JPTb0z
JDPldHyyHj9Fyizxie1++2riuXvkRftAEttNa/dJvk9KaCpmyQXw+J8sqj6D8z6H
+jjnXjVHugASxaMd0y+oynDHAWkKZglYrejvfL2ZxVvEf0vSD24nhCH/88ZlrXHm
zhBtW1ZSX88s9QrmQDM+NnlY8oCi6G+MvjV2+IGm0EIK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:24 2024 by rpki-client on console-ams.rpki-client.org