Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/XlcJyxUrMWcRunhn6yvGrxWGONE.roa
File: XlcJyxUrMWcRunhn6yvGrxWGONE.roa (raw, json)
Hash identifier: lHFw8kvX+pgEFtsoS+Bw2CGXs18hZLsDrTAuuVcK4r0=
Subject key identifier: 5E:57:09:CB:15:2B:31:67:11:BA:78:67:EB:2B:C6:AF:15:86:38:D1
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 012204C5
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/XlcJyxUrMWcRunhn6yvGrxWGONE.roa
Signing time: Sat 01 Jan 2022 05:59:26 +0000
ROA not before: Sat 01 Jan 2022 05:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397373
IP address blocks: 45.85.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19006661 (0x12204c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 1 05:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e5709cb152b316711ba7867eb2bc6af158638d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:2f:1a:7f:35:eb:9b:1b:1c:54:0c:fd:a5:
da:04:03:5c:cf:1b:fe:47:22:53:a7:04:0a:73:02:
1c:50:cc:0d:2b:bd:27:3f:9d:f2:ee:c4:c0:c5:84:
3f:50:3f:ad:ba:ea:9c:18:be:79:42:98:66:b3:39:
07:9d:c6:0f:7e:a9:74:3b:74:74:8a:b2:f6:5f:8a:
53:76:ef:36:12:71:47:03:e0:07:58:e9:84:40:7b:
d4:bb:ad:f4:17:bc:40:43:4b:c8:5a:58:70:80:bf:
1c:67:cd:be:ec:60:17:2a:c7:2c:c6:f2:11:bd:12:
90:cf:b1:3b:9e:97:e8:ea:d1:ab:12:e7:a8:51:3e:
e0:53:dc:41:80:e7:cb:84:37:c0:bc:f7:71:eb:10:
1d:bb:52:9b:a0:e6:8f:f8:e6:09:04:c4:27:e6:b6:
54:d1:b8:1b:8d:64:f2:7a:7e:14:1a:b6:d1:9c:26:
87:c4:9f:3c:87:20:50:bf:6b:40:b2:d0:e2:ec:fa:
6c:02:6f:7e:c7:a7:3f:a2:1c:ab:26:62:ee:9b:8a:
26:49:f7:ce:d6:14:04:e6:c0:8c:bf:05:b3:ff:0d:
24:cc:df:d2:52:5a:07:dc:ca:7f:2e:d2:06:77:cf:
f2:36:b3:68:de:56:9b:c1:e7:28:89:5b:b3:4e:a0:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:57:09:CB:15:2B:31:67:11:BA:78:67:EB:2B:C6:AF:15:86:38:D1
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/XlcJyxUrMWcRunhn6yvGrxWGONE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
91:75:8c:ca:cf:fa:ca:cc:f9:f9:37:70:80:61:31:08:73:11:
75:b3:19:47:36:24:72:e1:5b:85:e1:11:99:2d:75:1d:ac:dc:
d3:ac:28:a0:84:69:60:1b:dd:9c:16:7b:5d:ab:02:fc:46:5b:
43:c4:6b:9b:24:3b:6e:88:a1:fd:ee:ab:b5:57:df:fa:d3:b5:
08:d0:eb:8f:28:52:52:45:fb:bf:3a:74:ff:68:d6:15:9c:cd:
56:b9:94:19:e7:ce:19:54:45:46:e0:b2:1b:1c:e4:d5:68:cd:
43:21:d9:00:75:df:1f:4c:fe:cd:95:67:92:15:2c:a3:35:5c:
1e:fa:6a:5f:43:d6:0c:3e:de:c6:dd:92:7f:8a:da:34:c3:e3:
dd:59:b1:47:b4:49:fa:0c:e1:6f:42:15:94:cd:dc:d1:e4:a2:
c0:03:e3:3a:81:a6:7a:3b:a8:36:7d:07:5e:a4:7c:67:11:c0:
24:9c:5b:9d:6f:76:f2:94:3d:c2:7c:e4:41:a1:cc:a2:4d:f3:
b4:c0:a3:65:86:53:08:13:58:9d:7a:db:a9:2b:32:3a:35:98:
68:f9:3a:5d:33:62:3f:3f:ba:b1:0d:63:92:0c:37:07:6e:7c:
1f:59:43:4f:da:b3:b3:35:c6:28:2d:05:b4:7b:76:6f:90:8f:
73:ff:b6:15
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASIExTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
Y2E2NDNiYjM5OWM2ZDg3YWRjNGM3Y2JhNWQyYjcyZmJkMDBkMDQ2MB4XDTIyMDEw
MTA1NTkyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWU1NzA5Y2IxNTJi
MzE2NzExYmE3ODY3ZWIyYmM2YWYxNTg2MzhkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANZLLxp/NeubGxxUDP2l2gQDXM8b/kciU6cECnMCHFDMDSu9
Jz+d8u7EwMWEP1A/rbrqnBi+eUKYZrM5B53GD36pdDt0dIqy9l+KU3bvNhJxRwPg
B1jphEB71Lut9Be8QENLyFpYcIC/HGfNvuxgFyrHLMbyEb0SkM+xO56X6OrRqxLn
qFE+4FPcQYDny4Q3wLz3cesQHbtSm6Dmj/jmCQTEJ+a2VNG4G41k8np+FBq20Zwm
h8SfPIcgUL9rQLLQ4uz6bAJvfsenP6IcqyZi7puKJkn3ztYUBObAjL8Fs/8NJMzf
0lJaB9zKfy7SBnfP8jazaN5Wm8HnKIlbs06gdosCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBReVwnLFSsxZxG6eGfrK8avFYY40TAfBgNVHSMEGDAWgBR8pkO7OZxth63E
x8ul0rcvvQDQRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZLWkR1em1jYllldHhNZkxwZEszTDcwQTBFWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTYvYzAzMDFkLTU4MDEtNGFjNi1iNTAzLTQ0ZWE2NDcyMWM5ZS8x
L1hsY0p5eFVyTVdjUnVuaG42eXZHcnhXR09ORS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYv
YzAzMDFkLTU4MDEtNGFjNi1iNTAzLTQ0ZWE2NDcyMWM5ZS8xL2ZLWkR1em1jYlll
dHhNZkxwZEszTDcwQTBFWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1VbDANBgkqhkiG9w0BAQsFAAOC
AQEAkXWMys/6ysz5+TdwgGExCHMRdbMZRzYkcuFbheERmS11Hazc06wooIRpYBvd
nBZ7XasC/EZbQ8RrmyQ7boih/e6rtVff+tO1CNDrjyhSUkX7vzp0/2jWFZzNVrmU
GefOGVRFRuCyGxzk1WjNQyHZAHXfH0z+zZVnkhUsozVcHvpqX0PWDD7ext2Sf4ra
NMPj3VmxR7RJ+gzhb0IVlM3c0eSiwAPjOoGmejuoNn0HXqR8ZxHAJJxbnW928pQ9
wnzkQaHMok3ztMCjZYZTCBNYnXrbqSsyOjWYaPk6XTNiPz+6sQ1jkgw3B258H1lD
T9qzszXGKC0FtHt2b5CPc/+2FQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:06 2025 by rpki-client