Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/tssTeFRV_YxSiBlPQkQYFttZLbg.roa
File: tssTeFRV_YxSiBlPQkQYFttZLbg.roa (raw, json)
Hash identifier: mQsxOh1xQRkfyzNnXvtEF/iciB6ourG3A8DsQIqKgJU=
Subject key identifier: B6:CB:13:78:54:55:FD:8C:52:88:19:4F:42:44:18:16:DB:59:2D:B8
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 0834DDE0
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/tssTeFRV_YxSiBlPQkQYFttZLbg.roa
Signing time: Wed 20 Apr 2022 14:20:15 +0000
ROA not before: Wed 20 Apr 2022 14:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208608
IP address blocks: 45.128.17.0/24 maxlen: 24
45.128.16.0/24 maxlen: 24
45.128.16.0/22 maxlen: 24
45.128.19.0/24 maxlen: 24
45.128.18.0/24 maxlen: 24
2a0e:3bc0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137682400 (0x834dde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Apr 20 14:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6cb13785455fd8c5288194f42441816db592db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:91:f1:28:6f:8c:53:42:61:04:78:02:78:
4e:59:28:c2:a2:72:9d:cf:73:cd:a0:84:5a:4e:31:
2d:71:d2:02:aa:8e:cc:05:ac:5a:d2:b4:e2:5b:65:
c0:8a:af:b4:cc:4b:2a:e0:8c:8d:e1:24:59:cc:88:
2d:d9:1c:f9:37:d3:5b:39:64:33:06:b9:4c:a3:e5:
7e:a6:e1:33:48:3e:6f:94:9a:82:20:c6:0e:bf:a0:
1c:c6:de:fa:4d:74:4f:62:e3:31:98:29:60:9b:9e:
4a:46:c2:81:14:2d:8b:0f:00:42:d3:03:10:9b:09:
8f:83:3b:66:52:84:ec:0b:02:22:1c:28:cd:9d:4f:
42:cb:c4:09:c9:84:11:48:3b:3f:1f:67:fa:74:ec:
b6:bd:52:29:a8:99:cd:2a:e5:c2:77:a4:dd:93:c2:
12:73:42:fd:cf:43:2c:60:b4:f2:6e:fb:ca:76:7f:
36:80:cb:65:6a:8f:c4:c0:89:56:9f:db:f7:ba:d1:
3e:0e:ef:47:12:55:a7:4e:2c:da:a1:af:f7:7d:d7:
51:ac:a9:2d:61:59:82:8c:cc:c9:51:b3:4c:af:c0:
aa:93:87:a6:eb:ec:70:0b:04:96:ed:73:4a:71:07:
ad:28:f8:ee:a5:7d:96:1e:5c:a8:44:be:07:e1:57:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:13:78:54:55:FD:8C:52:88:19:4F:42:44:18:16:DB:59:2D:B8
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/tssTeFRV_YxSiBlPQkQYFttZLbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.16.0/22
IPv6:
2a0e:3bc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
01:0f:bd:c9:8f:33:c0:b6:de:d0:26:39:15:0a:a5:82:d9:38:
be:18:43:02:e8:de:3e:63:04:1e:52:a3:98:31:58:c5:5d:3d:
18:47:db:8d:5b:cc:6b:1d:59:55:8a:c6:6e:5e:49:54:d5:04:
3a:4e:77:d2:62:f0:3a:32:b0:67:3d:83:c9:7c:4f:15:96:75:
52:42:83:6b:4a:c4:16:90:1e:a7:82:fd:84:42:6c:3d:54:40:
c6:fb:bc:0e:ef:4c:6e:46:92:66:79:d8:d7:83:c4:d7:a6:9c:
97:2d:59:44:b8:0c:b6:6f:ab:d7:53:3b:8d:01:6f:4d:82:a7:
21:c5:16:99:78:4c:ac:29:0f:8a:a2:ae:7a:5b:84:8c:7f:cf:
73:62:34:03:4b:ce:d4:00:ab:2a:9c:16:7f:e5:c2:22:ad:5b:
54:ff:ce:af:a7:ed:ce:c3:88:46:25:b0:da:c7:90:a4:a7:ee:
2b:5b:ef:a2:e7:e3:44:ea:a8:58:c3:1d:0a:52:5c:3a:b6:7f:
8a:21:75:de:a8:2f:8e:a0:7e:09:28:22:04:69:39:c3:5c:28:
7c:4e:ef:2b:f0:9b:6f:d7:a6:c2:e5:bf:f6:cb:7f:d4:dc:51:
30:aa:a7:f0:13:47:32:12:cb:41:3a:7f:aa:ab:74:0a:85:e4:
5c:30:48:51
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECDTd4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZGI4NTNiODYxOTczZmM1MDZlNjQ3MTRjY2E3OTZkMTVjY2FjZTUxMB4XDTIyMDQy
MDE0MjAxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZjYjEzNzg1NDU1
ZmQ4YzUyODgxOTRmNDI0NDE4MTZkYjU5MmRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCpkfEob4xTQmEEeAJ4TlkowqJync9zzaCEWk4xLXHSAqqO
zAWsWtK04ltlwIqvtMxLKuCMjeEkWcyILdkc+TfTWzlkMwa5TKPlfqbhM0g+b5Sa
giDGDr+gHMbe+k10T2LjMZgpYJueSkbCgRQtiw8AQtMDEJsJj4M7ZlKE7AsCIhwo
zZ1PQsvECcmEEUg7Px9n+nTstr1SKaiZzSrlwnek3ZPCEnNC/c9DLGC08m77ynZ/
NoDLZWqPxMCJVp/b97rRPg7vRxJVp04s2qGv933XUaypLWFZgozMyVGzTK/AqpOH
puvscAsElu1zSnEHrSj47qV9lh5cqES+B+FXpDcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS2yxN4VFX9jFKIGU9CRBgW21ktuDAfBgNVHSMEGDAWgBQduFO4YZc/xQbm
RxTMp5bRXMrOUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hiaFR1R0dYUDhVRzVrY1V6S2VXMFZ6S3psRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjMvYzFiNTQ4LTUzNDQtNDgzMy1hZWMyLWYyYTNmYjBlNzBkMy8x
L3Rzc1RlRlJWX1l4U2lCbFBRa1FZRnR0WkxiZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMv
YzFiNTQ4LTUzNDQtNDgzMy1hZWMyLWYyYTNmYjBlNzBkMy8xL0hiaFR1R0dYUDhV
RzVrY1V6S2VXMFZ6S3psRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAi2AEDAPBAIAAjAJAwcAKg47wAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQABD73JjzPAtt7QJjkVCqWC2Ti+GEMC6N4+YwQe
UqOYMVjFXT0YR9uNW8xrHVlVisZuXklU1QQ6TnfSYvA6MrBnPYPJfE8VlnVSQoNr
SsQWkB6ngv2EQmw9VEDG+7wO70xuRpJmedjXg8TXppyXLVlEuAy2b6vXUzuNAW9N
gqchxRaZeEysKQ+Koq56W4SMf89zYjQDS87UAKsqnBZ/5cIirVtU/86vp+3Ow4hG
JbDax5Ckp+4rW++i5+NE6qhYwx0KUlw6tn+KIXXeqC+OoH4JKCIEaTnDXCh8Tu8r
8Jtv16bC5b/2y3/U3FEwqqfwE0cyEstBOn+qq3QKheRcMEhR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:33 2024 by rpki-client on console-ams.rpki-client.org