Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d297ec-5648-466c-852f-9f7bcbef2f5c/1/yOwgKRYqOpwn99n50m14Ksda_xA.roa
File: yOwgKRYqOpwn99n50m14Ksda_xA.roa (raw, json)
Hash identifier: 3Y5JAWCi/POHbHL9T/d//qKDM6Hj+mFncFamGlS/2ig=
Subject key identifier: C8:EC:20:29:16:2A:3A:9C:27:F7:D9:F9:D2:6D:78:2A:C7:5A:FF:10
Certificate issuer: /CN=26602012c9fd87c673727dbd95b9d9911b26a270
Certificate serial: 076BF9FD
Authority key identifier: 26:60:20:12:C9:FD:87:C6:73:72:7D:BD:95:B9:D9:91:1B:26:A2:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmAgEsn9h8Zzcn29lbnZkRsmonA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d297ec-5648-466c-852f-9f7bcbef2f5c/1/yOwgKRYqOpwn99n50m14Ksda_xA.roa
Signing time: Sat 01 Jan 2022 13:59:48 +0000
ROA not before: Sat 01 Jan 2022 13:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205199
IP address blocks: 45.150.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124516861 (0x76bf9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26602012c9fd87c673727dbd95b9d9911b26a270
Validity
Not Before: Jan 1 13:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8ec2029162a3a9c27f7d9f9d26d782ac75aff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:51:95:39:45:75:e9:0b:01:26:01:f7:ba:
ce:0e:0f:00:74:c3:e7:3a:b1:5e:ec:52:bf:53:b4:
8a:68:4b:43:d4:1f:5a:e0:58:ca:e8:ac:02:d6:d6:
a5:8c:ac:43:85:60:e7:6f:87:b2:93:30:d4:02:9f:
bc:b1:b0:cc:6b:05:d1:8f:ce:32:36:75:0e:eb:15:
7e:5d:08:16:cb:7c:de:d3:e0:1f:21:59:a5:04:82:
d3:df:b7:da:3a:bf:e8:0c:3d:d1:52:ae:5e:c6:91:
ff:4e:00:fb:7b:aa:74:78:0c:c1:b0:14:5d:eb:01:
bc:55:b0:2e:57:0e:0e:c7:8c:08:56:32:84:2f:36:
57:db:59:a6:2a:67:a0:1e:85:f8:61:0d:59:02:2e:
eb:d0:39:d7:bd:4f:0c:7a:8d:f4:df:36:d2:59:3e:
55:4d:c8:b8:ba:05:de:c3:e6:98:bf:f9:bd:84:60:
8c:45:d4:70:ca:f4:2a:9e:b4:fd:c7:f7:fa:20:f4:
02:d7:5d:2f:33:9f:68:5c:36:45:e7:4e:1e:81:72:
37:9d:05:b7:76:3d:1e:0e:f3:1c:9d:76:d4:7f:4f:
2f:27:8d:17:1d:d7:85:7e:7c:76:81:7b:19:77:e8:
62:42:e9:4b:c5:b6:d2:52:fd:cd:8a:ae:ef:45:71:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EC:20:29:16:2A:3A:9C:27:F7:D9:F9:D2:6D:78:2A:C7:5A:FF:10
X509v3 Authority Key Identifier:
keyid:26:60:20:12:C9:FD:87:C6:73:72:7D:BD:95:B9:D9:91:1B:26:A2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmAgEsn9h8Zzcn29lbnZkRsmonA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d297ec-5648-466c-852f-9f7bcbef2f5c/1/yOwgKRYqOpwn99n50m14Ksda_xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d297ec-5648-466c-852f-9f7bcbef2f5c/1/JmAgEsn9h8Zzcn29lbnZkRsmonA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.160.0/22
Signature Algorithm: sha256WithRSAEncryption
47:15:bd:b7:f7:a0:8b:06:5d:c3:d1:25:62:c5:a9:11:ab:84:
de:65:86:76:77:b2:a8:42:b2:d1:03:ed:e1:8e:f2:83:7e:d4:
56:62:ef:85:9e:93:81:6c:21:7a:47:bc:a1:0f:7f:ee:28:fb:
7e:22:89:0b:2f:d5:65:1c:e4:6a:fb:4a:fb:f6:57:95:7f:59:
63:76:34:32:fe:8e:4b:cb:03:18:01:4b:46:4d:46:7d:13:02:
b9:65:8b:c5:cc:a8:d3:4d:90:35:1c:31:86:06:48:14:5f:39:
9a:1e:86:39:f7:1e:10:b3:79:39:33:fc:e1:d3:1e:92:c7:dd:
2a:8a:3a:47:b2:84:7c:b2:29:90:2f:e0:dc:96:0d:a7:ed:b2:
35:c7:0a:6d:56:c6:0b:c3:6a:a0:af:bc:84:f1:52:10:2f:b1:
f5:7b:7c:ca:7a:64:83:31:41:e8:fa:3a:3b:a1:46:24:4b:aa:
13:3e:30:90:44:e6:13:c6:ff:5a:f3:da:e4:f3:76:73:39:c4:
f3:13:4b:f7:9e:20:1b:40:fc:87:b9:f8:63:07:6b:3d:4a:f0:
e5:0e:18:11:08:9f:ec:7a:9c:58:37:38:6f:1a:eb:7a:ba:01:
43:2a:12:dd:e9:e3:11:cf:ca:8e:78:f6:bf:31:d6:74:42:bd:
35:78:11:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB2v5/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjYwMjAxMmM5ZmQ4N2M2NzM3MjdkYmQ5NWI5ZDk5MTFiMjZhMjcwMB4XDTIyMDEw
MTEzNTk0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzhlYzIwMjkxNjJh
M2E5YzI3ZjdkOWY5ZDI2ZDc4MmFjNzVhZmYxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANTjUZU5RXXpCwEmAfe6zg4PAHTD5zqxXuxSv1O0imhLQ9Qf
WuBYyuisAtbWpYysQ4Vg52+HspMw1AKfvLGwzGsF0Y/OMjZ1DusVfl0IFst83tPg
HyFZpQSC09+32jq/6Aw90VKuXsaR/04A+3uqdHgMwbAUXesBvFWwLlcODseMCFYy
hC82V9tZpipnoB6F+GENWQIu69A5171PDHqN9N820lk+VU3IuLoF3sPmmL/5vYRg
jEXUcMr0Kp60/cf3+iD0AtddLzOfaFw2RedOHoFyN50Ft3Y9Hg7zHJ121H9PLyeN
Fx3XhX58doF7GXfoYkLpS8W20lL9zYqu70VxAn8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTI7CApFio6nCf32fnSbXgqx1r/EDAfBgNVHSMEGDAWgBQmYCASyf2HxnNy
fb2VudmRGyaicDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ptQWdFc245aDhaemNuMjlsYm5aa1JzbW9uQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvZDI5N2VjLTU2NDgtNDY2Yy04NTJmLTlmN2JjYmVmMmY1Yy8x
L3lPd2dLUllxT3B3bjk5bjUwbTE0S3NkYV94QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
ZDI5N2VjLTU2NDgtNDY2Yy04NTJmLTlmN2JjYmVmMmY1Yy8xL0ptQWdFc245aDha
emNuMjlsYm5aa1JzbW9uQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2WoDANBgkqhkiG9w0BAQsFAAOC
AQEARxW9t/egiwZdw9ElYsWpEauE3mWGdneyqEKy0QPt4Y7yg37UVmLvhZ6TgWwh
eke8oQ9/7ij7fiKJCy/VZRzkavtK+/ZXlX9ZY3Y0Mv6OS8sDGAFLRk1GfRMCuWWL
xcyo002QNRwxhgZIFF85mh6GOfceELN5OTP84dMeksfdKoo6R7KEfLIpkC/g3JYN
p+2yNccKbVbGC8NqoK+8hPFSEC+x9Xt8ynpkgzFB6Po6O6FGJEuqEz4wkETmE8b/
WvPa5PN2cznE8xNL954gG0D8h7n4YwdrPUrw5Q4YEQif7HqcWDc4bxrreroBQyoS
3enjEc/Kjnj2vzHWdEK9NXgRsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:52 2024 by rpki-client on console-ams.rpki-client.org