Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Ji1CDOIG72GG3vGFQwcmKzE4cF8.roa
File: Ji1CDOIG72GG3vGFQwcmKzE4cF8.roa (raw, json)
Hash identifier: kNfCeysmf7c85p1ke0PmcminwMAh7pvHkyhPkRgMobc=
Subject key identifier: 26:2D:42:0C:E2:06:EF:61:86:DE:F1:85:43:07:26:2B:31:38:70:5F
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 05B8BDD9
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Ji1CDOIG72GG3vGFQwcmKzE4cF8.roa
Signing time: Sat 01 Jan 2022 02:57:38 +0000
ROA not before: Sat 01 Jan 2022 02:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133115
IP address blocks: 45.88.14.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95993305 (0x5b8bdd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Jan 1 02:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=262d420ce206ef6186def1854307262b3138705f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:6d:58:83:e6:6f:c6:58:ad:c6:ea:7b:be:
bd:fc:6c:48:58:d6:d8:0b:88:3d:75:f7:2b:fe:4f:
4b:d3:1d:48:c6:55:0e:a2:a8:06:66:a1:2a:7c:72:
05:24:f0:c5:6e:3b:fd:3c:1b:56:52:9c:0c:f8:2b:
69:ff:87:09:57:94:3c:55:64:1e:d0:a2:34:8f:94:
cf:98:a1:15:d7:78:4c:1b:df:29:91:ac:ee:03:5c:
66:8a:c9:e0:bb:27:a6:a2:1b:49:bf:4e:56:53:59:
12:28:a6:ff:4d:c4:d9:37:01:74:11:14:ca:15:b6:
4f:3b:93:f6:91:09:9c:99:cd:dc:98:46:34:27:22:
18:12:60:71:4c:df:be:90:4d:8a:49:08:06:93:b7:
dd:69:0b:f2:98:18:e0:34:11:c1:40:4d:e3:c9:d9:
47:9b:05:fa:05:86:07:4f:da:56:04:86:bf:d5:8a:
ae:f6:7c:a1:71:00:d0:a8:91:86:9a:30:57:8f:bb:
18:1e:7e:53:10:cc:da:40:89:3b:74:34:ec:de:3b:
99:35:e0:eb:23:11:04:70:4a:32:cd:31:cf:b0:e8:
ea:63:a2:6a:f8:5a:05:77:4e:c9:2d:fc:eb:fb:37:
9d:58:fd:3a:db:fd:d2:32:6e:32:96:85:cc:17:8b:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2D:42:0C:E2:06:EF:61:86:DE:F1:85:43:07:26:2B:31:38:70:5F
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/Ji1CDOIG72GG3vGFQwcmKzE4cF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0-45.88.14.255
Signature Algorithm: sha256WithRSAEncryption
bc:01:f4:bb:f7:fe:06:ab:ea:24:b1:e8:f6:7b:71:0a:dc:da:
cc:c5:97:0e:bc:bb:c5:fe:a3:73:00:6d:97:48:e8:65:af:56:
89:06:df:a8:b2:8a:4e:a4:02:f8:84:97:d4:03:85:7f:f9:d3:
47:9e:f9:41:3d:03:10:cb:93:74:4f:7f:58:82:54:de:d9:c9:
70:45:ff:da:a1:a6:e1:35:aa:c1:55:a0:06:5e:41:d5:31:a0:
95:ca:a6:6a:1e:d3:3e:63:1a:08:7a:55:67:a3:01:fd:4a:78:
2b:ab:35:1a:00:28:4f:56:40:b0:1b:e6:0b:53:7c:0a:42:10:
eb:12:87:27:ee:b6:91:65:81:a3:75:94:52:e6:c7:fe:fe:2b:
89:2f:b8:ae:9e:44:1f:b1:31:b6:9f:b0:b2:b9:a3:a1:98:14:
23:f6:d5:15:8d:98:2b:ff:c6:11:d3:24:b1:8e:c7:5b:d8:8a:
da:da:51:f1:fd:e4:79:fb:e8:81:8c:8c:f0:d1:6e:04:4e:6e:
36:50:19:66:29:6a:76:97:ae:31:84:5f:f9:f9:87:67:34:5f:
b3:42:40:03:46:48:3c:5a:ae:82:56:49:b6:93:d6:38:ea:0a:
5f:cc:5a:06:5b:78:46:42:23:c7:fd:3b:0f:70:22:cc:a1:46:
0c:92:69:68
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBbi92TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGJhNWI3NDRlOGRmNTAzZDk0ZjQxZmIyOTAyNDI4OWM2ZmE1ZTViMB4XDTIyMDEw
MTAyNTczOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjYyZDQyMGNlMjA2
ZWY2MTg2ZGVmMTg1NDMwNzI2MmIzMTM4NzA1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANDUbViD5m/GWK3G6nu+vfxsSFjW2AuIPXX3K/5PS9MdSMZV
DqKoBmahKnxyBSTwxW47/TwbVlKcDPgraf+HCVeUPFVkHtCiNI+Uz5ihFdd4TBvf
KZGs7gNcZorJ4LsnpqIbSb9OVlNZEiim/03E2TcBdBEUyhW2TzuT9pEJnJnN3JhG
NCciGBJgcUzfvpBNikkIBpO33WkL8pgY4DQRwUBN48nZR5sF+gWGB0/aVgSGv9WK
rvZ8oXEA0KiRhpowV4+7GB5+UxDM2kCJO3Q07N47mTXg6yMRBHBKMs0xz7Do6mOi
avhaBXdOyS386/s3nVj9Otv90jJuMpaFzBeLvnUCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQmLUIM4gbvYYbe8YVDByYrMThwXzAfBgNVHSMEGDAWgBRQult0To31A9lP
QfspAkKJxvpeWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VMcGJkRTZOOVFQWlQwSDdLUUpDaWNiNlhscy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvN2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8x
L0ppMUNET0lHNzJHRzN2R0ZRd2NtS3pFNGNGOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
N2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8xL1VMcGJkRTZOOVFQ
WlQwSDdLUUpDaWNiNlhscy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQCLVgMAwQALVgOMA0GCSqGSIb3
DQEBCwUAA4IBAQC8AfS79/4Gq+oksej2e3EK3NrMxZcOvLvF/qNzAG2XSOhlr1aJ
Bt+osopOpAL4hJfUA4V/+dNHnvlBPQMQy5N0T39YglTe2clwRf/aoabhNarBVaAG
XkHVMaCVyqZqHtM+YxoIelVnowH9SngrqzUaAChPVkCwG+YLU3wKQhDrEocn7raR
ZYGjdZRS5sf+/iuJL7iunkQfsTG2n7CyuaOhmBQj9tUVjZgr/8YR0ySxjsdb2Ira
2lHx/eR5++iBjIzw0W4ETm42UBlmKWp2l64xhF/5+YdnNF+zQkADRkg8Wq6CVkm2
k9Y46gpfzFoGW3hGQiPH/TsPcCLMoUYMkmlo
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org