Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/NFXqldbaoierDNpfaEBJpDpFlw4.roa
File: NFXqldbaoierDNpfaEBJpDpFlw4.roa (raw, json)
Hash identifier: t98o3BFKRj1ZVkYkLqFmWjhm4hegvSYJGjvUaoRqNQE=
Subject key identifier: 34:55:EA:95:D6:DA:A2:27:AB:0C:DA:5F:68:40:49:A4:3A:45:97:0E
Certificate issuer: /CN=0e4645e41faea8d82643d1a4a2dc4db2604f2f7b
Certificate serial: 026EF3D4
Authority key identifier: 0E:46:45:E4:1F:AE:A8:D8:26:43:D1:A4:A2:DC:4D:B2:60:4F:2F:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkZF5B-uqNgmQ9GkotxNsmBPL3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/NFXqldbaoierDNpfaEBJpDpFlw4.roa
Signing time: Sat 01 Jan 2022 15:03:53 +0000
ROA not before: Sat 01 Jan 2022 15:03:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20845
IP address blocks: 45.156.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40825812 (0x26ef3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e4645e41faea8d82643d1a4a2dc4db2604f2f7b
Validity
Not Before: Jan 1 15:03:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3455ea95d6daa227ab0cda5f684049a43a45970e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:b7:15:f9:f4:3f:bf:4f:e5:8a:05:18:6e:
1b:45:86:4d:09:22:03:7f:c4:0f:53:ef:5c:59:56:
75:3e:1f:21:d3:0e:0d:a0:76:a8:74:45:a7:ae:ed:
de:5b:a4:fe:9e:4a:72:72:35:3a:8e:e6:3a:7c:79:
0f:ca:4f:1c:d0:e1:07:96:cb:61:a4:24:ff:15:d6:
3f:b2:b7:22:0e:7e:8f:37:70:e2:08:da:55:63:04:
f8:63:c8:c7:00:e6:85:f2:c1:3a:84:46:d8:43:e0:
54:6e:c2:fa:f3:28:a5:8a:9f:96:e4:14:ff:93:b1:
dc:8f:f3:2e:c8:ac:b8:d9:37:b4:21:04:75:6d:c7:
73:74:1a:eb:b0:ea:ae:d9:16:e6:cd:a9:3c:1f:78:
45:7a:ec:66:05:fc:08:14:b3:09:83:12:4e:fc:87:
ab:da:f0:85:dc:de:f6:2a:2b:2a:f4:d8:3d:03:57:
51:f3:2f:69:84:c1:83:30:a2:5f:52:52:b2:bf:4b:
df:7b:03:6d:24:79:23:68:48:c1:6c:b5:06:5b:45:
f1:24:1c:a9:b2:3b:2c:55:4b:42:75:7c:d8:34:ab:
23:b5:10:65:d5:4f:cc:89:0e:b7:c4:88:72:13:38:
53:bd:7d:16:d2:66:9d:2c:47:f6:97:8e:43:1e:21:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:55:EA:95:D6:DA:A2:27:AB:0C:DA:5F:68:40:49:A4:3A:45:97:0E
X509v3 Authority Key Identifier:
keyid:0E:46:45:E4:1F:AE:A8:D8:26:43:D1:A4:A2:DC:4D:B2:60:4F:2F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkZF5B-uqNgmQ9GkotxNsmBPL3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/NFXqldbaoierDNpfaEBJpDpFlw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/DkZF5B-uqNgmQ9GkotxNsmBPL3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.128.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a6:11:5d:8e:ed:f2:98:07:c5:0c:be:47:aa:47:aa:99:a2:
ea:73:0a:07:c4:84:2e:96:90:b7:c5:3a:35:2c:d9:8e:8c:5b:
5e:f1:71:88:74:6c:a4:09:16:a5:39:3b:e3:5b:29:5b:cc:8a:
04:f1:b3:75:10:87:c5:cc:8b:7d:50:af:cd:5d:ce:ec:0e:58:
54:c4:25:6c:44:b0:34:4d:30:70:5b:13:2f:2a:70:1a:e6:27:
b0:8c:61:3b:a9:7d:2a:06:9d:79:2a:b7:70:a9:c8:fe:bc:8a:
2f:34:64:d4:f5:52:fc:0c:af:41:72:6f:76:8c:67:0b:55:f0:
00:3d:00:a2:c4:d1:0a:c5:5b:0d:13:a5:dd:36:d4:04:84:f9:
f8:b0:08:a4:96:a7:10:63:07:b5:31:16:e7:ba:66:07:18:26:
dd:67:bb:c7:08:34:03:b0:b0:68:9f:c1:fa:7e:d1:14:78:bf:
c9:58:94:90:80:a5:7c:60:1d:ec:f8:cb:05:80:56:65:84:f8:
60:5f:f3:16:0a:81:a3:1c:4d:a8:2c:38:c8:bc:bd:65:91:5a:
98:d0:82:9f:df:b7:6d:cd:fe:01:fb:4f:66:ee:8e:d0:a7:2f:
23:a8:42:a1:47:1d:f9:05:0c:7a:2e:01:ca:d7:a7:fc:de:06:
03:80:44:45
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAm7z1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZTQ2NDVlNDFmYWVhOGQ4MjY0M2QxYTRhMmRjNGRiMjYwNGYyZjdiMB4XDTIyMDEw
MTE1MDM1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzQ1NWVhOTVkNmRh
YTIyN2FiMGNkYTVmNjg0MDQ5YTQzYTQ1OTcwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMaRtxX59D+/T+WKBRhuG0WGTQkiA3/ED1PvXFlWdT4fIdMO
DaB2qHRFp67t3luk/p5KcnI1Oo7mOnx5D8pPHNDhB5bLYaQk/xXWP7K3Ig5+jzdw
4gjaVWME+GPIxwDmhfLBOoRG2EPgVG7C+vMopYqfluQU/5Ox3I/zLsisuNk3tCEE
dW3Hc3Qa67DqrtkW5s2pPB94RXrsZgX8CBSzCYMSTvyHq9rwhdze9iorKvTYPQNX
UfMvaYTBgzCiX1JSsr9L33sDbSR5I2hIwWy1BltF8SQcqbI7LFVLQnV82DSrI7UQ
ZdVPzIkOt8SIchM4U719FtJmnSxH9peOQx4hdU8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ0VeqV1tqiJ6sM2l9oQEmkOkWXDjAfBgNVHSMEGDAWgBQORkXkH66o2CZD
0aSi3E2yYE8vezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RrWkY1Qi11cU5nbVE5R2tvdHhOc21CUEwzcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvNTI1NmYyLTU5MGItNDk1Ni05MWIwLTk0M2FkMjhkZDYyYi8x
L05GWHFsZGJhb2llckROcGZhRUJKcERwRmx3NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
NTI1NmYyLTU5MGItNDk1Ni05MWIwLTk0M2FkMjhkZDYyYi8xL0RrWkY1Qi11cU5n
bVE5R2tvdHhOc21CUEwzcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2cgDANBgkqhkiG9w0BAQsFAAOC
AQEAJKYRXY7t8pgHxQy+R6pHqpmi6nMKB8SELpaQt8U6NSzZjoxbXvFxiHRspAkW
pTk741spW8yKBPGzdRCHxcyLfVCvzV3O7A5YVMQlbESwNE0wcFsTLypwGuYnsIxh
O6l9KgadeSq3cKnI/ryKLzRk1PVS/AyvQXJvdoxnC1XwAD0AosTRCsVbDROl3TbU
BIT5+LAIpJanEGMHtTEW57pmBxgm3We7xwg0A7CwaJ/B+n7RFHi/yViUkIClfGAd
7PjLBYBWZYT4YF/zFgqBoxxNqCw4yLy9ZZFamNCCn9+3bc3+AftPZu6O0KcvI6hC
oUcd+QUMei4Byten/N4GA4BERQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:31 2023 by rpki-client on console.sobornost.net