Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/RqoOGBqLaMwkqYVikEl48DH_ZiY.roa
File: RqoOGBqLaMwkqYVikEl48DH_ZiY.roa (raw, json)
Hash identifier: Va6mO2gun6UOcY/qv7YL+rJg3VJ95A6eAanEiealPX0=
Subject key identifier: 46:AA:0E:18:1A:8B:68:CC:24:A9:85:62:90:49:78:F0:31:FF:66:26
Certificate issuer: /CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Certificate serial: 0184FB7EC7142072035E4C8E535F1E66EC54
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/RqoOGBqLaMwkqYVikEl48DH_ZiY.roa
Signing time: Sat 10 Dec 2022 10:05:00 +0000
ROA not before: Sat 10 Dec 2022 10:05:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202539
IP address blocks: 45.12.200.0/24 maxlen: 24
2a0e:bf00::/32 maxlen: 48
2a0e:bf01::/32 maxlen: 32
2001:67c:1160::/48 maxlen: 48
2a0e:bf01:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fb:7e:c7:14:20:72:03:5e:4c:8e:53:5f:1e:66:ec:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Validity
Not Before: Dec 10 10:05:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46aa0e181a8b68cc24a98562904978f031ff6626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:87:a8:4b:3c:25:8f:e8:37:06:c9:2d:0a:04:
a3:fa:14:6a:74:7e:c7:60:d1:84:13:1e:63:73:ab:
b6:1a:04:22:0a:77:95:ae:18:c7:b4:46:b3:7b:74:
14:15:2b:97:fe:10:8a:b3:e3:78:af:b2:7c:96:ce:
f2:35:f3:6d:ad:57:f1:47:d5:45:bc:e0:0f:ef:01:
a9:2f:5d:70:85:02:ce:70:18:87:78:8a:67:a9:bb:
51:37:69:df:47:16:9c:80:d3:67:a4:36:69:59:1e:
89:61:d2:03:94:8c:b9:6d:0e:8c:ce:2e:f5:08:d5:
0c:a7:d4:0f:1c:93:62:b1:4a:f1:d3:af:61:47:39:
cf:29:62:5c:17:b0:e0:9e:cb:c4:df:6b:fd:cf:15:
1a:68:07:75:aa:9a:a4:ab:77:82:24:22:a9:49:52:
05:9b:1c:66:42:32:73:2b:7a:c7:40:a1:9a:67:1a:
9e:53:12:31:a8:d6:a4:d6:b1:6c:7e:2d:8d:63:87:
4f:b8:f6:fe:44:b3:b2:92:11:41:d6:8f:e0:28:dc:
3c:64:53:1f:34:a3:07:03:9c:b8:d2:a1:c0:35:9b:
ea:d5:c6:32:20:2b:b4:9d:35:cb:d0:46:b2:ad:3a:
5f:d9:28:57:1a:f2:af:de:48:d8:7e:2e:58:01:99:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:0E:18:1A:8B:68:CC:24:A9:85:62:90:49:78:F0:31:FF:66:26
X509v3 Authority Key Identifier:
keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/RqoOGBqLaMwkqYVikEl48DH_ZiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.200.0/24
IPv6:
2001:67c:1160::/48
2a0e:bf00::/31
Signature Algorithm: sha256WithRSAEncryption
7c:0c:ee:30:61:ff:e7:10:09:a8:fe:83:8e:a4:20:0c:52:08:
7d:c6:83:ac:41:20:14:50:12:23:69:3f:bf:f0:9b:58:d6:3f:
21:d3:65:3f:3a:49:ba:53:06:05:04:42:55:5c:64:ee:ca:23:
84:7a:91:87:5a:40:41:91:2a:51:dd:da:0e:3b:8f:61:13:d1:
cd:5e:aa:72:49:0e:59:34:65:aa:6c:29:07:9e:99:0b:2a:b0:
51:3b:59:72:d2:21:2c:df:09:af:79:1d:b6:e7:7d:94:96:ad:
fa:e2:9a:c4:56:46:6f:d3:3d:2c:61:74:9e:01:90:8c:7f:64:
2f:ea:22:04:b0:33:af:7c:8d:55:90:e4:e7:6a:b9:7c:4e:29:
8f:b2:ac:27:ff:2e:9f:fb:24:b5:a0:90:92:8f:a2:e1:6b:c1:
2e:8e:e5:bd:cb:cd:d7:70:fe:dd:a3:2e:15:e1:ec:cf:b5:94:
65:7d:0d:a6:f0:2b:cd:ed:d6:f2:ab:7a:59:c4:42:a3:ac:0a:
9f:43:4d:a1:a0:1a:a6:84:06:e4:94:ce:1e:c3:c5:90:59:8f:
7c:24:05:eb:a9:73:26:4b:ff:65:83:91:75:27:a6:5f:25:ad:
65:0a:6b:1d:88:32:e5:32:2e:43:c0:61:49:e6:4b:ff:6e:7c:
d9:d0:fa:77
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYT7fscUIHIDXkyOU18eZuxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOTRjNGIxZDMzYmEzMDk0ZWMzODhmN2E3M2Q4ZDM5Y2Q5
NTA4NjEwHhcNMjIxMjEwMTAwNTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmFhMGUxODFhOGI2OGNjMjRhOTg1NjI5MDQ5NzhmMDMxZmY2NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoeoSzwlj+g3BsktCgSj+hRqdH7H
YNGEEx5jc6u2GgQiCneVrhjHtEaze3QUFSuX/hCKs+N4r7J8ls7yNfNtrVfxR9VF
vOAP7wGpL11whQLOcBiHeIpnqbtRN2nfRxacgNNnpDZpWR6JYdIDlIy5bQ6Mzi71
CNUMp9QPHJNisUrx069hRznPKWJcF7DgnsvE32v9zxUaaAd1qpqkq3eCJCKpSVIF
mxxmQjJzK3rHQKGaZxqeUxIxqNak1rFsfi2NY4dPuPb+RLOykhFB1o/gKNw8ZFMf
NKMHA5y40qHANZvq1cYyICu0nTXL0EayrTpf2ShXGvKv3kjYfi5YAZlHawIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEaqDhgai2jMJKmFYpBJePAx/2YmMB8GA1UdIwQY
MBaAFP+UxLHTO6MJTsOI96c9jTnNlQhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzVURXNkTTdvd2xPdzRqM3B6Mk5PYzJWQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xNzdmMjktYzRlYi00MTFmLTk1ZmYt
NWUxMDJkMTk3NzQyLzEvUnFvT0dCcUxhTXdrcVlWaWtFbDQ4REhfWmlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xNzdmMjktYzRlYi00MTFmLTk1ZmYtNWUxMDJkMTk3NzQy
LzEvXzVURXNkTTdvd2xPdzRqM3B6Mk5PYzJWQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQALQzIMBYE
AgACMBADBwAgAQZ8EWADBQEqDr8AMA0GCSqGSIb3DQEBCwUAA4IBAQB8DO4wYf/n
EAmo/oOOpCAMUgh9xoOsQSAUUBIjaT+/8JtY1j8h02U/Okm6UwYFBEJVXGTuyiOE
epGHWkBBkSpR3doOO49hE9HNXqpySQ5ZNGWqbCkHnpkLKrBRO1ly0iEs3wmveR22
532Ulq364prEVkZv0z0sYXSeAZCMf2Qv6iIEsDOvfI1VkOTnarl8TimPsqwn/y6f
+yS1oJCSj6Lha8EujuW9y83XcP7doy4V4ezPtZRlfQ2m8CvN7dbyq3pZxEKjrAqf
Q02hoBqmhAbklM4ew8WQWY98JAXrqXMmS/9lg5F1J6ZfJa1lCmsdiDLlMi5DwGFJ
5kv/bnzZ0Pp3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:35 2024 by rpki-client on console-ams.rpki-client.org