Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/xEYLm84DXDmkXtzjVbmFlPd5uGE.roa
File: xEYLm84DXDmkXtzjVbmFlPd5uGE.roa (raw, json)
Hash identifier: Buy9uKYmTDrj4gwA88rL40rfEMKcoJnUd6uevFjz8PQ=
Subject key identifier: C4:46:0B:9B:CE:03:5C:39:A4:5E:DC:E3:55:B9:85:94:F7:79:B8:61
Certificate issuer: /CN=37529d57a6db1ec827cbae446ad39f39d1a519da
Certificate serial: 0183A309B6D150E8707B99A6ED90665081B0
Authority key identifier: 37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/xEYLm84DXDmkXtzjVbmFlPd5uGE.roa
Signing time: Tue 04 Oct 2022 12:47:46 +0000
ROA not before: Tue 04 Oct 2022 12:47:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.129.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:09:b6:d1:50:e8:70:7b:99:a6:ed:90:66:50:81:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37529d57a6db1ec827cbae446ad39f39d1a519da
Validity
Not Before: Oct 4 12:47:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4460b9bce035c39a45edce355b98594f779b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:5b:4c:ce:77:92:9b:3b:f9:8d:ff:3c:53:
94:34:cc:78:27:c6:cc:92:2e:23:b1:3b:dd:29:ec:
be:ae:ef:5b:cb:44:09:2c:26:35:2d:14:ec:22:10:
a1:3c:f9:28:0e:d3:ec:9f:ca:76:b3:ec:47:6e:fd:
54:93:8b:4d:a4:7c:fd:43:7c:6e:97:a1:9d:72:8e:
18:8f:c9:9e:e0:dc:ac:3d:58:f8:9c:75:8c:65:58:
d6:ea:92:f6:fd:15:f5:43:fe:37:4d:86:8f:d2:31:
6f:28:d5:bb:b4:76:1c:53:4f:42:60:f6:24:51:a4:
a7:9b:4c:4d:80:ec:9a:fe:7e:40:ba:45:26:ec:70:
45:05:e8:1e:6d:59:11:61:1c:8d:14:de:b3:87:b4:
fd:5f:fc:1e:d6:87:46:21:8d:c6:f5:d3:e9:fb:1d:
7e:c1:1f:3c:5f:04:a2:91:28:e6:e5:2c:7d:f6:b5:
a3:8d:1e:c0:6e:6b:5f:a5:a1:aa:0e:66:70:af:ba:
93:7f:ca:87:8a:9b:d3:3f:42:e6:07:e8:8d:3d:9b:
4a:91:03:4f:78:08:e8:dc:35:fc:4b:16:44:d4:26:
02:7f:71:1a:07:cc:14:52:aa:86:a5:b4:55:ef:ee:
aa:c4:9e:52:89:9e:81:51:9f:71:f7:71:3e:69:f6:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:0B:9B:CE:03:5C:39:A4:5E:DC:E3:55:B9:85:94:F7:79:B8:61
X509v3 Authority Key Identifier:
keyid:37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/xEYLm84DXDmkXtzjVbmFlPd5uGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.84.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:92:9f:58:78:c2:76:a3:af:12:02:83:f2:1b:f7:8e:31:7b:
63:02:36:60:98:55:1a:f8:54:90:af:8c:c3:ec:89:81:6a:92:
0f:7a:e9:d5:8f:52:8b:9f:54:98:c3:b1:63:b9:1d:f1:ba:3d:
29:27:1c:3a:a6:a0:57:48:6e:4b:2a:ba:28:d6:9a:60:d5:00:
87:25:ed:b9:0f:d6:1c:9a:bc:55:c0:70:cd:5a:fa:ff:a2:9c:
64:de:42:c6:1b:c9:9a:fc:85:ab:b8:17:4d:50:d3:35:b3:75:
c2:e2:1a:1a:e2:04:f1:7c:db:c6:0f:a2:1b:16:64:0b:67:6f:
d6:e5:e9:a5:05:61:8e:43:0f:ae:0f:f8:d9:50:b7:ad:2d:c5:
a3:25:e1:04:7f:14:fd:98:1c:26:b7:e9:b2:5b:81:de:a2:76:
b3:02:ee:94:95:ea:82:bd:b0:7b:6d:10:41:49:ff:4e:43:1f:
d3:4b:dc:88:c4:f5:05:64:24:79:ea:53:d1:ba:65:e3:6a:a5:
75:87:23:1b:eb:c0:d2:23:72:d3:64:73:2a:7d:36:27:44:45:
77:1a:62:97:24:bb:9d:43:ce:8f:28:b9:e8:c6:98:f6:ac:e4:
4c:3b:ca:0d:61:5a:5b:61:10:c4:89:b1:fd:1b:72:c5:05:fe:
49:90:5c:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOjCbbRUOhwe5mm7ZBmUIGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTI5ZDU3YTZkYjFlYzgyN2NiYWU0NDZhZDM5ZjM5ZDFh
NTE5ZGEwHhcNMjIxMDA0MTI0NzQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDQ2MGI5YmNlMDM1YzM5YTQ1ZWRjZTM1NWI5ODU5NGY3NzliODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr5bTM53kps7+Y3/PFOUNMx4J8bM
ki4jsTvdKey+ru9by0QJLCY1LRTsIhChPPkoDtPsn8p2s+xHbv1Uk4tNpHz9Q3xu
l6Gdco4Yj8me4NysPVj4nHWMZVjW6pL2/RX1Q/43TYaP0jFvKNW7tHYcU09CYPYk
UaSnm0xNgOya/n5AukUm7HBFBegebVkRYRyNFN6zh7T9X/we1odGIY3G9dPp+x1+
wR88XwSikSjm5Sx99rWjjR7AbmtfpaGqDmZwr7qTf8qHipvTP0LmB+iNPZtKkQNP
eAjo3DX8SxZE1CYCf3EaB8wUUqqGpbRV7+6qxJ5SiZ6BUZ9x93E+afbMkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRGC5vOA1w5pF7c41W5hZT3ebhhMB8GA1UdIwQY
MBaAFDdSnVem2x7IJ8uuRGrTnznRpRnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFLZFY2YmJIc2dueTY1RWF0T2ZPZEdsR2RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81YjJmZDQtZjVjNS00ZTBjLTk4ZTgt
ZTE3MDczZDM2MjNkLzEveEVZTG04NERYRG1rWHR6alZibUZsUGQ1dUdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81YjJmZDQtZjVjNS00ZTBjLTk4ZTgtZTE3MDczZDM2MjNk
LzEvTjFLZFY2YmJIc2dueTY1RWF0T2ZPZEdsR2RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYFUMA0G
CSqGSIb3DQEBCwUAA4IBAQB/kp9YeMJ2o68SAoPyG/eOMXtjAjZgmFUa+FSQr4zD
7ImBapIPeunVj1KLn1SYw7FjuR3xuj0pJxw6pqBXSG5LKroo1ppg1QCHJe25D9Yc
mrxVwHDNWvr/opxk3kLGG8ma/IWruBdNUNM1s3XC4hoa4gTxfNvGD6IbFmQLZ2/W
5emlBWGOQw+uD/jZULetLcWjJeEEfxT9mBwmt+myW4HeonazAu6UleqCvbB7bRBB
Sf9OQx/TS9yIxPUFZCR56lPRumXjaqV1hyMb68DSI3LTZHMqfTYnREV3GmKXJLud
Q86PKLnoxpj2rORMO8oNYVpbYRDEibH9G3LFBf5JkFyo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org