Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/2ruysi_-PVL52wBS4JW6jNrGCBQ.roa
File: 2ruysi_-PVL52wBS4JW6jNrGCBQ.roa (raw, json)
Hash identifier: l2tjUTgay28EhMaqeIP1VQCGCZk1hs6Rb6Vzmn+2YGg=
Subject key identifier: DA:BB:B2:B2:2F:FE:3D:52:F9:DB:00:52:E0:95:BA:8C:DA:C6:08:14
Certificate issuer: /CN=558935af0465d52bf6a8f19999b94ec5e9a8b7c3
Certificate serial: 018460C9BAC4C95BCDC70119FE4A7B9BD48D
Authority key identifier: 55:89:35:AF:04:65:D5:2B:F6:A8:F1:99:99:B9:4E:C5:E9:A8:B7:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYk1rwRl1Sv2qPGZmblOxemot8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/2ruysi_-PVL52wBS4JW6jNrGCBQ.roa
Signing time: Thu 10 Nov 2022 09:05:44 +0000
ROA not before: Thu 10 Nov 2022 09:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 45.143.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:c9:ba:c4:c9:5b:cd:c7:01:19:fe:4a:7b:9b:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558935af0465d52bf6a8f19999b94ec5e9a8b7c3
Validity
Not Before: Nov 10 09:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dabbb2b22ffe3d52f9db0052e095ba8cdac60814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:e7:3a:fe:b9:09:0b:d8:5f:7b:31:4f:b1:
9e:d5:f1:ac:d9:d1:d0:af:f1:e3:ef:cc:23:a8:28:
67:29:88:90:ec:a2:85:ca:81:14:ac:b1:05:64:eb:
63:64:96:67:f2:d9:c8:9c:53:92:0f:16:22:21:9f:
0d:b3:06:f8:02:79:8f:da:aa:b6:74:82:0a:0b:d0:
f4:f1:92:6f:4d:1e:31:0f:94:1a:d7:ae:9b:fb:d7:
3f:b1:4b:71:fd:43:c7:45:0a:71:f4:98:71:c2:f3:
25:c4:93:a1:d7:0e:de:c1:a2:ce:51:50:f4:a7:cc:
a5:aa:b3:50:b2:38:56:c0:c5:c9:37:15:5b:e4:d2:
b1:d3:8a:10:b2:b9:78:91:9b:7b:54:19:08:fa:c7:
71:eb:69:7b:fa:c4:3c:8a:24:21:ec:71:30:ce:7b:
6e:5e:19:4e:be:74:10:cb:58:0b:e2:c1:96:28:16:
b6:99:8d:f5:d5:d6:95:f1:eb:f4:12:8e:b2:60:24:
35:b9:c5:e1:f4:19:86:c4:2e:7f:15:e1:9e:37:a1:
7d:9d:b9:33:36:94:74:6b:63:66:19:90:62:96:92:
4e:e6:3b:54:ec:98:a0:8c:5e:7c:59:3d:9d:29:5a:
03:bc:8a:0e:42:52:1f:37:61:9a:c9:0e:13:b6:42:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BB:B2:B2:2F:FE:3D:52:F9:DB:00:52:E0:95:BA:8C:DA:C6:08:14
X509v3 Authority Key Identifier:
keyid:55:89:35:AF:04:65:D5:2B:F6:A8:F1:99:99:B9:4E:C5:E9:A8:B7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYk1rwRl1Sv2qPGZmblOxemot8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/2ruysi_-PVL52wBS4JW6jNrGCBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/VYk1rwRl1Sv2qPGZmblOxemot8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.152.0/22
Signature Algorithm: sha256WithRSAEncryption
24:0a:1c:06:df:90:37:26:38:31:ba:a4:93:88:13:cc:ff:c2:
89:d0:3b:62:7a:a7:a8:a3:86:d1:35:73:3a:a1:95:0d:1e:10:
e6:fa:7d:45:01:5e:a7:95:f7:76:93:4e:d1:83:a7:ac:ff:c4:
71:d3:72:f9:15:2b:9e:fc:ed:9f:02:ad:d7:1a:09:1a:18:7c:
3c:be:5b:88:f0:f8:37:82:52:3d:7c:89:e1:5e:fa:75:8a:7c:
68:64:ca:ed:82:e3:57:8f:1c:1d:93:80:6d:91:ca:22:8a:42:
73:cc:64:f1:7a:f7:fa:b4:e2:ac:5a:7e:ad:45:2b:9f:a1:4c:
81:28:08:d7:48:74:51:b8:bc:71:18:6f:8f:c2:95:e7:a7:2d:
48:b2:1c:cb:a0:8b:d0:e8:db:07:9c:70:08:c7:8e:20:28:01:
40:41:45:71:fc:b3:4d:4d:19:ba:5d:c7:b0:1a:ff:4a:0c:36:
f3:ad:01:93:f8:a5:67:b6:76:4f:bc:78:08:bb:fa:48:8e:79:
2d:1a:eb:22:2d:e3:6c:f7:49:69:1c:fd:59:de:6c:a5:b2:b6:
d0:c9:be:af:b4:cc:3e:ff:af:00:35:89:1a:af:1a:e1:d2:de:
14:e0:1c:4d:61:e6:62:73:1c:04:49:dc:28:24:93:1e:ce:33:
b9:eb:de:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRgybrEyVvNxwEZ/kp7m9SNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODkzNWFmMDQ2NWQ1MmJmNmE4ZjE5OTk5Yjk0ZWM1ZTlh
OGI3YzMwHhcNMjIxMTEwMDkwNTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWJiYjJiMjJmZmUzZDUyZjlkYjAwNTJlMDk1YmE4Y2RhYzYwODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUrnOv65CQvYX3sxT7Ge1fGs2dHQ
r/Hj78wjqChnKYiQ7KKFyoEUrLEFZOtjZJZn8tnInFOSDxYiIZ8Nswb4AnmP2qq2
dIIKC9D08ZJvTR4xD5Qa166b+9c/sUtx/UPHRQpx9JhxwvMlxJOh1w7ewaLOUVD0
p8ylqrNQsjhWwMXJNxVb5NKx04oQsrl4kZt7VBkI+sdx62l7+sQ8iiQh7HEwzntu
XhlOvnQQy1gL4sGWKBa2mY311daV8ev0Eo6yYCQ1ucXh9BmGxC5/FeGeN6F9nbkz
NpR0a2NmGZBilpJO5jtU7JigjF58WT2dKVoDvIoOQlIfN2GayQ4TtkJC5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNq7srIv/j1S+dsAUuCVuozaxggUMB8GA1UdIwQY
MBaAFFWJNa8EZdUr9qjxmZm5TsXpqLfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllrMXJ3UmwxU3YycVBHWm1ibE94ZW1vdDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xMzM1NzYtYWRlZC00Y2QzLWIwYTEt
ZTQ3OTNmYWNkNzYxLzEvMnJ1eXNpXy1QVkw1MndCUzRKVzZqTnJHQ0JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xMzM1NzYtYWRlZC00Y2QzLWIwYTEtZTQ3OTNmYWNkNzYx
LzEvVllrMXJ3UmwxU3YycVBHWm1ibE94ZW1vdDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY+YMA0G
CSqGSIb3DQEBCwUAA4IBAQAkChwG35A3JjgxuqSTiBPM/8KJ0Dtieqeoo4bRNXM6
oZUNHhDm+n1FAV6nlfd2k07Rg6es/8Rx03L5FSue/O2fAq3XGgkaGHw8vluI8Pg3
glI9fInhXvp1inxoZMrtguNXjxwdk4BtkcoiikJzzGTxevf6tOKsWn6tRSufoUyB
KAjXSHRRuLxxGG+PwpXnpy1IshzLoIvQ6NsHnHAIx44gKAFAQUVx/LNNTRm6Xcew
Gv9KDDbzrQGT+KVntnZPvHgIu/pIjnktGusiLeNs90lpHP1Z3mylsrbQyb6vtMw+
/68ANYkarxrh0t4U4BxNYeZicxwESdwoJJMezjO5696u
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:15 2024 by rpki-client on console-ams.rpki-client.org