Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/XIQi72bHearV46prhY-M7rj1Pjo.roa
File: XIQi72bHearV46prhY-M7rj1Pjo.roa (raw, json)
Hash identifier: UJGhTV2mBbOvxQ35I4R0vdPeRmP0dFd2MTBA2UamxyU=
Subject key identifier: 5C:84:22:EF:66:C7:79:AA:D5:E3:AA:6B:85:8F:8C:EE:B8:F5:3E:3A
Certificate issuer: /CN=0e4645e41faea8d82643d1a4a2dc4db2604f2f7b
Certificate serial: 01856ED4AD72B24F260E6D1B35A7C742F246
Authority key identifier: 0E:46:45:E4:1F:AE:A8:D8:26:43:D1:A4:A2:DC:4D:B2:60:4F:2F:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkZF5B-uqNgmQ9GkotxNsmBPL3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/XIQi72bHearV46prhY-M7rj1Pjo.roa
Signing time: Sun 01 Jan 2023 19:35:09 +0000
ROA not before: Sun 01 Jan 2023 19:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20845
IP address blocks: 45.156.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ad:72:b2:4f:26:0e:6d:1b:35:a7:c7:42:f2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e4645e41faea8d82643d1a4a2dc4db2604f2f7b
Validity
Not Before: Jan 1 19:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c8422ef66c779aad5e3aa6b858f8ceeb8f53e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:4f:c6:71:8e:b8:5f:55:43:63:01:e1:91:
8d:7b:bd:9c:b0:df:8d:0a:34:07:34:fb:37:1b:11:
3b:d1:db:c2:aa:e4:c2:71:88:56:58:0b:a2:f9:d5:
c9:a3:e3:c2:bf:ad:eb:1d:cf:da:d1:ae:51:ff:72:
bc:af:fe:12:6e:ab:f4:d0:6b:41:c6:26:00:52:e2:
33:b3:0d:57:42:01:e3:1a:47:84:8a:ce:5c:98:25:
4a:3c:29:d6:d9:47:15:ce:a8:91:fb:e8:8f:5f:dc:
63:dd:88:70:94:72:2d:08:c0:0c:a6:d6:30:65:e8:
5a:c1:5b:b2:a3:66:8a:2e:11:64:b5:e9:74:91:f2:
74:6a:ed:7e:b0:72:2c:02:4f:1d:94:88:dd:55:6b:
e0:ce:47:06:19:24:76:a9:63:9a:fd:7a:51:b7:76:
8e:b8:9c:a5:1c:fb:c1:78:20:b5:85:9f:15:7c:4f:
73:a3:4d:20:0c:02:7c:ba:2a:8c:ee:f8:2b:62:48:
5a:64:b0:9d:ae:16:69:b8:9e:a2:91:80:1c:97:f7:
27:31:1d:40:da:89:7e:78:fd:4f:16:9a:50:fe:29:
3b:c7:cb:13:ec:12:57:f8:68:25:f7:ea:88:04:19:
82:8c:1e:ca:b1:a1:ce:d8:8a:39:0c:17:68:0e:b6:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:22:EF:66:C7:79:AA:D5:E3:AA:6B:85:8F:8C:EE:B8:F5:3E:3A
X509v3 Authority Key Identifier:
keyid:0E:46:45:E4:1F:AE:A8:D8:26:43:D1:A4:A2:DC:4D:B2:60:4F:2F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkZF5B-uqNgmQ9GkotxNsmBPL3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/XIQi72bHearV46prhY-M7rj1Pjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/DkZF5B-uqNgmQ9GkotxNsmBPL3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.128.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ac:82:00:89:da:5c:27:c9:c5:4d:a5:da:34:da:3f:c9:3f:
b6:61:ff:1e:5d:59:18:b9:42:91:d4:80:e2:06:c2:a8:2b:b9:
76:50:b6:c4:9c:a4:c0:c0:bf:6f:09:e9:2a:6c:d7:0c:e6:16:
c0:9e:53:90:90:02:55:8f:fc:ae:1e:cc:77:2e:10:e1:f2:ce:
72:3d:67:cd:10:8f:2a:9d:65:ba:7e:ec:69:39:f5:3a:db:10:
d3:23:10:8d:ec:96:eb:b7:a4:c7:ad:49:71:8c:ed:c7:72:e5:
47:ae:52:c8:38:47:c1:e6:bf:0c:d9:a1:70:fb:58:34:64:97:
82:aa:9e:3d:fc:93:0f:5c:43:8c:8e:64:e1:c0:87:90:0b:cd:
ef:24:73:a8:7d:e1:be:82:86:c2:be:d2:94:fd:91:17:a3:70:
73:3e:27:39:4f:e4:c4:31:d9:ff:a5:51:de:79:0e:ee:ac:8e:
67:7c:01:68:29:32:cb:74:84:4a:ce:d8:60:ef:c6:70:0b:ec:
07:57:43:55:32:2c:ab:29:bc:3f:f5:28:d6:c4:a7:67:9e:1c:
70:d1:44:54:c6:b0:fc:57:d1:8c:4c:03:ca:df:ad:90:89:93:
2a:0f:f5:ba:6e:d9:95:2e:3c:31:0d:f5:9d:4e:29:db:d8:68:
f1:04:4a:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1K1ysk8mDm0bNafHQvJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDY0NWU0MWZhZWE4ZDgyNjQzZDFhNGEyZGM0ZGIyNjA0
ZjJmN2IwHhcNMjMwMTAxMTkzNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yzg0MjJlZjY2Yzc3OWFhZDVlM2FhNmI4NThmOGNlZWI4ZjUzZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmhPxnGOuF9VQ2MB4ZGNe72csN+N
CjQHNPs3GxE70dvCquTCcYhWWAui+dXJo+PCv63rHc/a0a5R/3K8r/4Sbqv00GtB
xiYAUuIzsw1XQgHjGkeEis5cmCVKPCnW2UcVzqiR++iPX9xj3YhwlHItCMAMptYw
ZehawVuyo2aKLhFktel0kfJ0au1+sHIsAk8dlIjdVWvgzkcGGSR2qWOa/XpRt3aO
uJylHPvBeCC1hZ8VfE9zo00gDAJ8uiqM7vgrYkhaZLCdrhZpuJ6ikYAcl/cnMR1A
2ol+eP1PFppQ/ik7x8sT7BJX+Ggl9+qIBBmCjB7KsaHO2Io5DBdoDrbM4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFyEIu9mx3mq1eOqa4WPjO649T46MB8GA1UdIwQY
MBaAFA5GReQfrqjYJkPRpKLcTbJgTy97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtaRjVCLXVxTmdtUTlHa290eE5zbUJQTDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81MjU2ZjItNTkwYi00OTU2LTkxYjAt
OTQzYWQyOGRkNjJiLzEvWElRaTcyYkhlYXJWNDZwcmhZLU03cmoxUGpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81MjU2ZjItNTkwYi00OTU2LTkxYjAtOTQzYWQyOGRkNjJi
LzEvRGtaRjVCLXVxTmdtUTlHa290eE5zbUJQTDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZyAMA0G
CSqGSIb3DQEBCwUAA4IBAQBlrIIAidpcJ8nFTaXaNNo/yT+2Yf8eXVkYuUKR1IDi
BsKoK7l2ULbEnKTAwL9vCekqbNcM5hbAnlOQkAJVj/yuHsx3LhDh8s5yPWfNEI8q
nWW6fuxpOfU62xDTIxCN7Jbrt6THrUlxjO3HcuVHrlLIOEfB5r8M2aFw+1g0ZJeC
qp49/JMPXEOMjmThwIeQC83vJHOofeG+gobCvtKU/ZEXo3BzPic5T+TEMdn/pVHe
eQ7urI5nfAFoKTLLdIRKzthg78ZwC+wHV0NVMiyrKbw/9SjWxKdnnhxw0URUxrD8
V9GMTAPK362QiZMqD/W6btmVLjwxDfWdTinb2GjxBEqQ
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:31 2023 by rpki-client on console.sobornost.net