Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/qISz1SM82adp24-059p7FnmMBFo.roa
File: qISz1SM82adp24-059p7FnmMBFo.roa (raw, json)
Hash identifier: AF/aivDCGmqWrvtSCchIzPtMOwje7V4FFgL5mJyFdO4=
Subject key identifier: A8:84:B3:D5:23:3C:D9:A7:69:DB:8F:B4:E7:DA:7B:16:79:8C:04:5A
Certificate issuer: /CN=85972a0487d95cc1bfe1da6d1a27b89d1d3576d6
Certificate serial: 0304F1A9
Authority key identifier: 85:97:2A:04:87:D9:5C:C1:BF:E1:DA:6D:1A:27:B8:9D:1D:35:76:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZcqBIfZXMG_4dptGie4nR01dtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/qISz1SM82adp24-059p7FnmMBFo.roa
Signing time: Sat 01 Jan 2022 13:05:45 +0000
ROA not before: Sat 01 Jan 2022 13:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.95.232.0/24 maxlen: 24
45.95.233.0/24 maxlen: 24
45.95.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50655657 (0x304f1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85972a0487d95cc1bfe1da6d1a27b89d1d3576d6
Validity
Not Before: Jan 1 13:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a884b3d5233cd9a769db8fb4e7da7b16798c045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:c2:67:0c:32:d9:ac:8e:94:d2:f7:d0:b9:
63:cb:0f:4d:ea:84:a2:56:3d:71:a5:0a:b1:64:fd:
d6:35:66:dd:9b:6b:b0:59:dc:d2:67:c3:ff:af:0f:
82:36:e5:cf:ef:9e:cc:d5:f6:1b:13:0a:3f:21:3e:
dd:6b:24:01:b8:cd:0b:4e:61:b4:dc:9b:bc:ad:ab:
27:f0:d9:65:67:52:d1:71:15:76:d2:a3:0c:51:90:
d6:4e:45:6f:ac:ff:14:d8:9e:bd:6b:b4:44:2a:b5:
7b:ef:97:ed:fb:59:72:50:a7:8e:40:e2:6b:a3:90:
40:c7:02:d5:92:e8:87:96:d0:0a:42:a7:fc:6d:97:
77:88:9b:0a:b7:75:ce:cd:93:b8:aa:43:d6:b9:75:
1c:e0:3c:22:8e:59:38:f0:35:1b:09:51:05:d5:03:
c0:27:24:49:99:f6:c5:5b:ab:42:8a:86:a7:f3:00:
6b:a7:2f:fb:01:07:10:01:19:09:e0:40:6d:6f:b2:
03:73:31:40:d4:65:d8:30:d1:a0:c5:b9:f8:07:f9:
7f:f2:3c:14:10:f0:6c:54:0c:81:97:c2:ff:83:5a:
72:6f:d6:c4:cb:e7:c6:06:19:12:d2:86:96:97:ef:
79:dd:7a:03:fe:14:77:75:75:0f:f8:3c:11:22:2c:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:84:B3:D5:23:3C:D9:A7:69:DB:8F:B4:E7:DA:7B:16:79:8C:04:5A
X509v3 Authority Key Identifier:
keyid:85:97:2A:04:87:D9:5C:C1:BF:E1:DA:6D:1A:27:B8:9D:1D:35:76:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZcqBIfZXMG_4dptGie4nR01dtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/qISz1SM82adp24-059p7FnmMBFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/hZcqBIfZXMG_4dptGie4nR01dtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.232.0-45.95.234.255
Signature Algorithm: sha256WithRSAEncryption
38:f4:1b:bd:c0:70:27:8c:ae:4a:11:b2:3e:9f:56:d3:bd:60:
6a:4a:27:1c:d3:75:d4:77:70:c6:3f:86:e4:73:bc:30:b8:f8:
ad:90:04:44:03:95:11:55:ee:40:c2:ff:84:78:18:75:d2:a6:
b2:34:3c:5b:43:0c:42:cf:34:14:06:fe:e5:46:72:00:6c:22:
6b:50:5e:7a:f1:00:89:62:a6:2f:04:29:cb:6f:93:c8:d6:3c:
cd:fa:ef:09:a4:ce:26:80:41:4c:73:39:4e:d0:0d:57:3e:13:
09:ca:22:a8:0b:e6:37:91:ab:38:41:1e:ea:b5:e7:1e:cb:d5:
86:0b:83:65:3f:b7:83:f8:60:67:8f:d5:71:64:b1:fb:a2:94:
6e:b6:eb:f5:b4:6f:77:a8:50:8f:88:1d:df:84:09:a9:24:8c:
9f:4e:9c:17:f1:6a:72:ec:ef:ab:24:4e:36:f7:7d:57:9e:79:
4d:cd:b7:f9:1b:ae:49:db:b1:31:cb:9e:31:63:7a:48:50:44:
c2:18:58:36:e8:cc:2a:15:c1:75:b2:6e:db:28:5f:3f:7f:3e:
d2:f0:26:d0:08:a6:1d:0e:96:f4:1f:73:cc:61:8f:3c:0c:77:
19:e8:80:17:a6:8c:26:a4:8a:e5:86:a0:4a:30:c4:b7:25:da:
76:20:2b:9e
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEAwTxqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NTk3MmEwNDg3ZDk1Y2MxYmZlMWRhNmQxYTI3Yjg5ZDFkMzU3NmQ2MB4XDTIyMDEw
MTEzMDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTg4NGIzZDUyMzNj
ZDlhNzY5ZGI4ZmI0ZTdkYTdiMTY3OThjMDQ1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM+BwmcMMtmsjpTS99C5Y8sPTeqEolY9caUKsWT91jVm3Ztr
sFnc0mfD/68Pgjblz++ezNX2GxMKPyE+3WskAbjNC05htNybvK2rJ/DZZWdS0XEV
dtKjDFGQ1k5Fb6z/FNievWu0RCq1e++X7ftZclCnjkDia6OQQMcC1ZLoh5bQCkKn
/G2Xd4ibCrd1zs2TuKpD1rl1HOA8Io5ZOPA1GwlRBdUDwCckSZn2xVurQoqGp/MA
a6cv+wEHEAEZCeBAbW+yA3MxQNRl2DDRoMW5+Af5f/I8FBDwbFQMgZfC/4Nacm/W
xMvnxgYZEtKGlpfved16A/4Ud3V1D/g8ESIseJ0CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBSohLPVIzzZp2nbj7Tn2nsWeYwEWjAfBgNVHSMEGDAWgBSFlyoEh9lcwb/h
2m0aJ7idHTV21jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2haY3FCSWZaWE1HXzRkcHRHaWU0blIwMWR0WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvNzI5MDM0LTBjZWEtNDRmOC05ZjMwLTBkNWViM2Q2MDllYS8x
L3FJU3oxU004MmFkcDI0LTA1OXA3Rm5tTUJGby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
NzI5MDM0LTBjZWEtNDRmOC05ZjMwLTBkNWViM2Q2MDllYS8xL2haY3FCSWZaWE1H
XzRkcHRHaWU0blIwMWR0WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQDLV/oAwQALV/qMA0GCSqGSIb3
DQEBCwUAA4IBAQA49Bu9wHAnjK5KEbI+n1bTvWBqSicc03XUd3DGP4bkc7wwuPit
kAREA5URVe5Awv+EeBh10qayNDxbQwxCzzQUBv7lRnIAbCJrUF568QCJYqYvBCnL
b5PI1jzN+u8JpM4mgEFMczlO0A1XPhMJyiKoC+Y3kas4QR7qtecey9WGC4NlP7eD
+GBnj9VxZLH7opRutuv1tG93qFCPiB3fhAmpJIyfTpwX8Wpy7O+rJE42931XnnlN
zbf5G65J27Exy54xY3pIUETCGFg26MwqFcF1sm7bKF8/fz7S8CbQCKYdDpb0H3PM
YY88DHcZ6IAXpowmpIrlhqBKMMS3Jdp2ICue
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:55 2024 by rpki-client on console-fra.rpki-client.org