Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/2WQslAaqsGlX_1DNPdB0MOaA-bk.roa
File: 2WQslAaqsGlX_1DNPdB0MOaA-bk.roa (raw, json)
Hash identifier: VNuCZ06sL0pkIJy3Izi2+AtMfaZReq9OpAo1woJsYxQ=
Subject key identifier: D9:64:2C:94:06:AA:B0:69:57:FF:50:CD:3D:D0:74:30:E6:80:F9:B9
Certificate issuer: /CN=948d4652abb103aa81f587fd2d130149265edbb7
Certificate serial: 0259D343
Authority key identifier: 94:8D:46:52:AB:B1:03:AA:81:F5:87:FD:2D:13:01:49:26:5E:DB:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1GUquxA6qB9Yf9LRMBSSZe27c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/2WQslAaqsGlX_1DNPdB0MOaA-bk.roa
Signing time: Sat 01 Jan 2022 14:58:19 +0000
ROA not before: Sat 01 Jan 2022 14:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.136.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39441219 (0x259d343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d4652abb103aa81f587fd2d130149265edbb7
Validity
Not Before: Jan 1 14:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9642c9406aab06957ff50cd3dd07430e680f9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:03:d8:88:3b:7e:ba:0b:8f:5a:6d:5f:bf:
36:d0:b5:c0:ac:ad:9e:0d:3f:25:d1:da:4f:c8:c0:
8a:33:86:87:75:42:79:72:f5:a3:ab:40:10:09:13:
35:9d:4a:6d:83:c8:93:b9:f8:74:6b:3b:89:2b:ce:
e4:0c:56:b5:af:f0:e4:f1:47:10:08:3a:2f:e3:c7:
7f:6f:ac:13:1a:96:38:d7:33:79:65:be:f3:b6:46:
38:01:1c:26:be:7c:9a:3f:8b:4c:f6:51:ab:a8:4d:
16:39:1a:69:aa:77:27:ab:6b:f8:26:80:1a:37:3b:
39:8e:ba:80:4c:c0:59:5c:34:09:de:1b:bc:ed:2e:
9a:42:a4:8c:16:37:4a:4b:43:fe:c2:67:c0:15:d7:
19:87:b2:a9:d7:11:44:01:d4:48:56:07:27:ea:8d:
e1:bc:58:d6:1d:53:dc:a9:d5:68:b7:3f:5d:cb:8b:
cb:00:df:a1:da:37:40:1f:b7:d3:f7:23:1b:1c:20:
73:25:8e:6d:2a:61:c5:9f:25:2a:9a:2d:d5:c4:d6:
74:f0:13:68:6f:53:9a:2d:c6:b7:ef:9c:f5:8c:be:
df:1c:83:72:65:2d:8d:ae:39:8e:b2:7d:eb:29:2e:
bc:48:e3:3d:8e:00:c6:71:e9:1a:c7:80:ab:e3:3b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:64:2C:94:06:AA:B0:69:57:FF:50:CD:3D:D0:74:30:E6:80:F9:B9
X509v3 Authority Key Identifier:
keyid:94:8D:46:52:AB:B1:03:AA:81:F5:87:FD:2D:13:01:49:26:5E:DB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1GUquxA6qB9Yf9LRMBSSZe27c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/2WQslAaqsGlX_1DNPdB0MOaA-bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/61a86a-3d9e-4d6d-a722-cd438fc18d05/1/lI1GUquxA6qB9Yf9LRMBSSZe27c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:89:a7:6e:1c:ed:71:c0:e5:ef:fa:09:b9:1a:19:d8:e2:a0:
73:b0:4a:af:58:a4:a8:25:88:bb:c0:67:cc:f2:eb:54:da:ff:
b7:16:bc:1f:02:6f:f9:4b:06:9f:51:0d:10:b4:31:d5:33:47:
ad:a7:7e:b2:cf:6a:40:ba:ef:e3:2b:1b:47:61:44:e1:9f:93:
9c:cf:65:e3:06:1e:81:e7:2b:ec:61:cc:b5:ef:e3:85:e6:fb:
a8:7f:0c:a5:6c:4e:5b:12:7d:a3:e9:a0:12:d8:4a:fb:19:9f:
3e:17:a2:83:f4:03:cf:e3:dc:85:7b:bb:e2:42:5d:db:cd:d9:
bc:d8:1a:5a:d4:9c:f2:26:fb:1c:4c:cb:01:f6:f1:af:ea:47:
e9:f5:74:59:ce:f0:d3:22:cc:58:20:17:76:29:cd:a3:e4:37:
38:e8:3f:ab:10:2b:4c:50:3d:03:d6:e2:26:43:50:2a:59:67:
97:eb:18:61:0d:08:c8:a9:dc:a3:c2:12:9f:d4:f0:f6:45:53:
f0:af:a1:e0:e6:c3:2b:90:7b:22:e5:7e:00:d8:af:57:2d:bc:
8d:ad:28:f2:69:08:c8:af:5d:7b:28:6e:f9:2b:6c:ad:d0:c9:
11:a7:06:31:63:dc:b4:8f:1c:20:2a:c0:2e:7a:71:26:9a:aa:
46:60:dc:1c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAlnTQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NDhkNDY1MmFiYjEwM2FhODFmNTg3ZmQyZDEzMDE0OTI2NWVkYmI3MB4XDTIyMDEw
MTE0NTgxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk2NDJjOTQwNmFh
YjA2OTU3ZmY1MGNkM2RkMDc0MzBlNjgwZjliOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM+bA9iIO366C49abV+/NtC1wKytng0/JdHaT8jAijOGh3VC
eXL1o6tAEAkTNZ1KbYPIk7n4dGs7iSvO5AxWta/w5PFHEAg6L+PHf2+sExqWONcz
eWW+87ZGOAEcJr58mj+LTPZRq6hNFjkaaap3J6tr+CaAGjc7OY66gEzAWVw0Cd4b
vO0umkKkjBY3SktD/sJnwBXXGYeyqdcRRAHUSFYHJ+qN4bxY1h1T3KnVaLc/XcuL
ywDfodo3QB+30/cjGxwgcyWObSphxZ8lKpot1cTWdPATaG9Tmi3Gt++c9Yy+3xyD
cmUtja45jrJ96ykuvEjjPY4AxnHpGseAq+M7GPECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTZZCyUBqqwaVf/UM090HQw5oD5uTAfBgNVHSMEGDAWgBSUjUZSq7EDqoH1
h/0tEwFJJl7btzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xJMUdVcXV4QTZxQjlZZjlMUk1CU1NaZTI3Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvNjFhODZhLTNkOWUtNGQ2ZC1hNzIyLWNkNDM4ZmMxOGQwNS8x
LzJXUXNsQWFxc0dsWF8xRE5QZEIwTU9hQS1iay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
NjFhODZhLTNkOWUtNGQ2ZC1hNzIyLWNkNDM4ZmMxOGQwNS8xL2xJMUdVcXV4QTZx
QjlZZjlMUk1CU1NaZTI3Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2IGDANBgkqhkiG9w0BAQsFAAOC
AQEAnomnbhztccDl7/oJuRoZ2OKgc7BKr1ikqCWIu8BnzPLrVNr/txa8HwJv+UsG
n1ENELQx1TNHrad+ss9qQLrv4ysbR2FE4Z+TnM9l4wYegecr7GHMte/jheb7qH8M
pWxOWxJ9o+mgEthK+xmfPheig/QDz+PchXu74kJd283ZvNgaWtSc8ib7HEzLAfbx
r+pH6fV0Wc7w0yLMWCAXdinNo+Q3OOg/qxArTFA9A9biJkNQKllnl+sYYQ0IyKnc
o8ISn9Tw9kVT8K+h4ObDK5B7IuV+ANivVy28ja0o8mkIyK9deyhu+StsrdDJEacG
MWPctI8cICrALnpxJpqqRmDcHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:55 2024 by rpki-client on console-ams.rpki-client.org