Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/aAebUG7kOfzglGb6fPeEVxm-AsU.roa
File: aAebUG7kOfzglGb6fPeEVxm-AsU.roa (raw, json)
Hash identifier: naT1ZvBHLdEGyxYz7ngmZAN10FWIAUcaJltmEpxY/Bg=
Subject key identifier: 68:07:9B:50:6E:E4:39:FC:E0:94:66:FA:7C:F7:84:57:19:BE:02:C5
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 018570FBADDCF616D1ABF7FA03537D144858
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/aAebUG7kOfzglGb6fPeEVxm-AsU.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 194.36.84.0/24 maxlen: 24
45.155.126.0/24 maxlen: 24
194.36.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ad:dc:f6:16:d1:ab:f7:fa:03:53:7d:14:48:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68079b506ee439fce09466fa7cf7845719be02c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:08:41:07:f6:1e:d5:b6:bf:b1:51:bc:4f:69:
59:63:15:5d:4b:93:88:b4:b9:52:64:1e:6b:03:4c:
c3:de:db:84:81:31:76:27:02:1b:e5:43:b3:40:23:
e1:26:90:47:fe:09:da:34:9d:f7:12:45:47:a5:db:
c0:95:ff:0b:11:1b:12:f1:4e:80:ff:36:94:76:04:
e7:27:5b:a9:12:ba:5a:88:9e:96:88:73:14:c9:f4:
d5:92:2e:c5:55:e2:be:be:f6:d2:af:ba:43:2f:47:
61:95:cd:a7:5e:f0:a3:1b:f4:b2:0d:43:11:a8:34:
1f:f0:3f:0e:fd:60:af:40:10:8d:e8:b4:ec:fe:ff:
4d:f6:d5:0b:bf:ac:04:12:94:3e:dc:a5:dd:fb:a8:
78:07:f6:37:23:6d:05:ad:82:80:db:9a:08:d1:d6:
0b:21:ed:9e:92:f1:e7:78:ff:b6:99:89:25:1d:cb:
c7:96:a2:1f:7d:98:a4:57:fe:95:d8:45:e4:13:67:
ff:70:ca:07:e7:6d:4c:f6:1f:32:84:3e:45:e9:1c:
e6:ce:59:32:f8:ee:f8:4e:1e:f6:ad:f4:87:8f:ae:
63:b5:21:4a:97:99:9f:a2:59:0f:d3:8f:78:1e:c4:
29:48:af:16:7c:90:86:e7:2f:c3:a8:33:b8:ca:90:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:07:9B:50:6E:E4:39:FC:E0:94:66:FA:7C:F7:84:57:19:BE:02:C5
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/aAebUG7kOfzglGb6fPeEVxm-AsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.126.0/24
194.36.84.0/24
194.36.86.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:3d:0e:81:62:99:67:71:71:f7:b0:62:f4:69:10:b2:bd:7e:
c9:fd:10:65:45:64:cf:94:6a:7e:4b:7d:19:df:19:18:7e:94:
31:4c:b7:de:cb:8c:de:18:1b:2e:e5:a2:73:50:7b:fc:64:6f:
8e:cb:9a:b8:34:98:46:03:92:4a:93:0e:d3:90:f6:e4:93:a4:
6e:2a:37:7b:1e:00:e6:f3:ee:69:5f:69:58:72:c1:7d:3b:bb:
f1:9b:e8:a2:79:bd:ed:ac:79:54:76:9e:80:7c:62:1f:15:e4:
1e:82:be:fb:96:1b:b2:ce:02:0e:11:cc:49:d9:4d:57:1d:91:
35:e7:e6:68:c7:34:b6:9d:ba:f4:67:51:c8:c3:7b:8d:63:9b:
c4:cb:3f:60:6b:c7:30:e6:83:ef:8a:a0:cb:68:0d:a3:0c:0b:
e0:2e:d0:82:f3:d3:96:40:70:b4:a3:5d:95:9a:12:5a:dd:99:
e8:86:f8:99:56:44:be:e5:d5:23:45:ee:f0:02:88:75:16:35:
f7:9f:0a:5b:e5:3f:25:99:40:be:37:11:35:13:ce:d9:29:27:
64:92:bd:ce:07:f3:76:c0:40:e8:bb:10:69:2a:9c:6c:d4:b4:
60:fa:f9:10:72:85:b3:e4:9f:5b:84:25:e5:7a:9a:1f:e2:3e:
b7:31:72:af
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw+63c9hbRq/f6A1N9FEhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNTUyNjBjZWJmMmE3M2NhMTQ3MDlkOTZkMjRhNWZmM2Jj
YjVkYzQwHhcNMjMwMTAyMDUzNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODA3OWI1MDZlZTQzOWZjZTA5NDY2ZmE3Y2Y3ODQ1NzE5YmUwMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwhBB/Ye1ba/sVG8T2lZYxVdS5OI
tLlSZB5rA0zD3tuEgTF2JwIb5UOzQCPhJpBH/gnaNJ33EkVHpdvAlf8LERsS8U6A
/zaUdgTnJ1upErpaiJ6WiHMUyfTVki7FVeK+vvbSr7pDL0dhlc2nXvCjG/SyDUMR
qDQf8D8O/WCvQBCN6LTs/v9N9tULv6wEEpQ+3KXd+6h4B/Y3I20FrYKA25oI0dYL
Ie2ekvHneP+2mYklHcvHlqIffZikV/6V2EXkE2f/cMoH521M9h8yhD5F6Rzmzlky
+O74Th72rfSHj65jtSFKl5mfolkP0494HsQpSK8WfJCG5y/DqDO4ypAERwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGgHm1Bu5Dn84JRm+nz3hFcZvgLFMB8GA1UdIwQY
MBaAFF1VJgzr8qc8oUcJ2W0kpf87y13EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFZVbURPdnlwenloUnduWmJTU2xfenZMWGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83MGRiNmMtZDE2Mi00ZDQ5LTg4NDkt
ZDJhY2NkYTA4YmVlLzEvYUFlYlVHN2tPZnpnbEdiNmZQZUVWeG0tQXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83MGRiNmMtZDE2Mi00ZDQ5LTg4NDktZDJhY2NkYTA4YmVl
LzEvWFZVbURPdnlwenloUnduWmJTU2xfenZMWGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZt+AwQA
wiRUAwQAwiRWMA0GCSqGSIb3DQEBCwUAA4IBAQDHPQ6BYplncXH3sGL0aRCyvX7J
/RBlRWTPlGp+S30Z3xkYfpQxTLfey4zeGBsu5aJzUHv8ZG+Oy5q4NJhGA5JKkw7T
kPbkk6RuKjd7HgDm8+5pX2lYcsF9O7vxm+iieb3trHlUdp6AfGIfFeQegr77lhuy
zgIOEcxJ2U1XHZE15+ZoxzS2nbr0Z1HIw3uNY5vEyz9ga8cw5oPviqDLaA2jDAvg
LtCC89OWQHC0o12VmhJa3ZnohviZVkS+5dUjRe7wAoh1FjX3nwpb5T8lmUC+NxE1
E87ZKSdkkr3OB/N2wEDouxBpKpxs1LRg+vkQcoWz5J9bhCXlepof4j63MXKv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org