Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/QOxMzNy_yw7WPwwOJXqig0BnPVI.roa
File: QOxMzNy_yw7WPwwOJXqig0BnPVI.roa (raw, json)
Hash identifier: NnLL0dWvrYxyxqfydBRZgmvlgLk/BGfeKHjX0tOCn34=
Subject key identifier: 40:EC:4C:CC:DC:BF:CB:0E:D6:3F:0C:0E:25:7A:A2:83:40:67:3D:52
Certificate issuer: /CN=425e132c37f05117dab94af1869a7149c6408d80
Certificate serial: 01FD63E3
Authority key identifier: 42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/QOxMzNy_yw7WPwwOJXqig0BnPVI.roa
Signing time: Mon 21 Mar 2022 15:55:11 +0000
ROA not before: Mon 21 Mar 2022 15:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.81.57.0/24 maxlen: 24
45.81.56.0/22 maxlen: 24
45.81.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33383395 (0x1fd63e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425e132c37f05117dab94af1869a7149c6408d80
Validity
Not Before: Mar 21 15:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40ec4cccdcbfcb0ed63f0c0e257aa28340673d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:8b:78:2d:ba:1a:2b:34:f2:c8:ed:cb:9f:
ed:1f:9a:ff:60:eb:18:0e:08:07:39:ac:6f:8f:4d:
68:82:8c:85:b9:be:e8:24:39:f0:d2:10:8c:05:fc:
33:69:30:31:44:6e:7d:39:09:c9:c8:f8:b7:b4:c4:
fa:16:7f:0b:7b:83:8a:2e:d5:b3:0e:ce:cb:37:b2:
0e:7b:cb:f4:f2:63:e9:b3:75:d9:5b:6d:4e:7a:29:
41:86:34:4e:31:68:5b:7e:e5:b9:1d:c2:78:b7:60:
55:37:be:ed:84:bc:70:f3:a5:f9:cf:fa:92:0d:4d:
5b:2f:64:4a:46:06:d2:85:3d:e2:28:7d:4b:0d:03:
93:66:d8:3a:23:c4:73:ce:3c:7a:83:67:49:6a:8d:
64:8a:dc:fd:d0:36:16:d3:7b:9b:71:3d:14:84:dd:
24:a2:21:4c:bb:a7:8a:9e:18:c3:9b:79:b7:16:ca:
5b:12:48:86:5d:b3:73:ab:31:82:8b:36:c7:58:aa:
5f:62:ad:85:a2:37:d6:66:dc:29:7c:68:cb:f0:cb:
eb:8e:73:e0:6b:36:b7:fe:ac:13:2d:6e:8c:cb:88:
f0:61:7b:de:a2:82:c2:ee:7d:93:c5:de:4f:7e:e8:
d2:3f:ad:bd:8d:3f:44:f4:cb:4c:97:04:4d:8e:c0:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EC:4C:CC:DC:BF:CB:0E:D6:3F:0C:0E:25:7A:A2:83:40:67:3D:52
X509v3 Authority Key Identifier:
keyid:42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/QOxMzNy_yw7WPwwOJXqig0BnPVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.56.0/22
Signature Algorithm: sha256WithRSAEncryption
14:f7:2d:a9:61:cc:f4:e3:c7:be:a5:d0:fc:d2:39:03:2b:22:
96:01:d5:95:2a:ea:42:51:32:aa:ab:0e:13:b5:25:5a:b2:98:
34:22:f8:f8:81:d4:ec:80:61:58:12:dd:58:64:43:7c:51:e3:
46:e3:ff:4e:03:f2:96:92:37:2a:48:47:e1:12:65:3e:a1:72:
9c:34:c7:cd:4b:39:91:65:ca:c6:ef:92:87:d5:70:b5:24:39:
f8:5c:34:6a:70:7f:47:9e:d0:e2:32:f6:30:b6:97:fe:e0:a1:
e2:86:2a:86:f2:00:2b:fd:14:0d:de:f8:d5:6c:cb:4a:fd:bf:
3a:3d:a4:e0:ba:60:27:f9:a7:7d:3e:ea:c9:d1:82:41:e6:6b:
ce:a4:97:53:f0:9f:4a:9b:cb:fb:c9:7f:e3:00:be:8a:90:4f:
31:7c:f8:a2:fc:4f:dc:c1:41:42:ae:65:1b:1d:93:ad:0f:3f:
79:53:3e:29:4b:d2:62:f9:83:ab:94:12:11:b8:cc:b8:d5:e9:
ef:db:36:66:1b:1f:06:ed:6c:17:d2:d7:a2:9e:3b:f0:ec:c0:
38:fd:18:de:bc:df:5a:f4:35:45:dc:a0:6d:03:06:5d:ec:7b:
2d:b8:d6:46:36:34:9f:41:41:12:75:df:70:87:1f:4b:e0:99:
11:2d:f9:ac
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAf1j4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MjVlMTMyYzM3ZjA1MTE3ZGFiOTRhZjE4NjlhNzE0OWM2NDA4ZDgwMB4XDTIyMDMy
MTE1NTUxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDBlYzRjY2NkY2Jm
Y2IwZWQ2M2YwYzBlMjU3YWEyODM0MDY3M2Q1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMvsi3gtuhorNPLI7cuf7R+a/2DrGA4IBzmsb49NaIKMhbm+
6CQ58NIQjAX8M2kwMURufTkJycj4t7TE+hZ/C3uDii7Vsw7OyzeyDnvL9PJj6bN1
2VttTnopQYY0TjFoW37luR3CeLdgVTe+7YS8cPOl+c/6kg1NWy9kSkYG0oU94ih9
Sw0Dk2bYOiPEc848eoNnSWqNZIrc/dA2FtN7m3E9FITdJKIhTLunip4Yw5t5txbK
WxJIhl2zc6sxgos2x1iqX2KthaI31mbcKXxoy/DL645z4Gs2t/6sEy1ujMuI8GF7
3qKCwu59k8XeT37o0j+tvY0/RPTLTJcETY7AUvkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRA7EzM3L/LDtY/DA4leqKDQGc9UjAfBgNVHSMEGDAWgBRCXhMsN/BRF9q5
SvGGmnFJxkCNgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FsNFRMRGZ3VVJmYXVVcnhocHB4U2NaQWpZQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvNjk4MTdkLTQyZTgtNDVhMS05ZDU0LTNhZGE0ZDRhZWQ1YS8x
L1FPeE16TnlfeXc3V1B3d09KWHFpZzBCblBWSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
Njk4MTdkLTQyZTgtNDVhMS05ZDU0LTNhZGE0ZDRhZWQ1YS8xL1FsNFRMRGZ3VVJm
YXVVcnhocHB4U2NaQWpZQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1RODANBgkqhkiG9w0BAQsFAAOC
AQEAFPctqWHM9OPHvqXQ/NI5AysilgHVlSrqQlEyqqsOE7UlWrKYNCL4+IHU7IBh
WBLdWGRDfFHjRuP/TgPylpI3KkhH4RJlPqFynDTHzUs5kWXKxu+Sh9VwtSQ5+Fw0
anB/R57Q4jL2MLaX/uCh4oYqhvIAK/0UDd741WzLSv2/Oj2k4LpgJ/mnfT7qydGC
QeZrzqSXU/CfSpvL+8l/4wC+ipBPMXz4ovxP3MFBQq5lGx2TrQ8/eVM+KUvSYvmD
q5QSEbjMuNXp79s2ZhsfBu1sF9LXop478OzAOP0Y3rzfWvQ1RdygbQMGXex7LbjW
RjY0n0FBEnXfcIcfS+CZES35rA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org