Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/__BzSnAbFYSPCn13fygqkEuR_74.roa
File: __BzSnAbFYSPCn13fygqkEuR_74.roa (raw, json)
Hash identifier: 1iaUsuYj1v8tWz3ZDABy0hrFdUOFpDEkxGOZ59zzOmo=
Subject key identifier: FF:F0:73:4A:70:1B:15:84:8F:0A:7D:77:7F:28:2A:90:4B:91:FF:BE
Certificate issuer: /CN=ec47fecce0961ab0d1f8573296a2274217ac38d2
Certificate serial: 077E87EB
Authority key identifier: EC:47:FE:CC:E0:96:1A:B0:D1:F8:57:32:96:A2:27:42:17:AC:38:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Ef-zOCWGrDR-FcylqInQhesONI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/__BzSnAbFYSPCn13fygqkEuR_74.roa
Signing time: Sat 01 Jan 2022 07:53:13 +0000
ROA not before: Sat 01 Jan 2022 07:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57866
IP address blocks: 45.149.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125732843 (0x77e87eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec47fecce0961ab0d1f8573296a2274217ac38d2
Validity
Not Before: Jan 1 07:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fff0734a701b15848f0a7d777f282a904b91ffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:a0:ab:9a:c5:0c:df:ba:1f:41:fa:0d:58:
18:98:08:25:2f:33:95:d9:2b:43:04:cf:51:c1:c0:
4f:d5:28:d7:e8:0b:4f:db:5a:25:ad:89:b2:f6:c6:
72:9d:68:b9:d9:c2:8f:1e:bf:9c:97:9b:e7:e7:d2:
4e:0d:de:5c:4c:af:d2:33:06:98:62:e6:2b:f7:36:
3e:74:7c:83:7b:59:9d:b3:5d:13:26:43:39:e3:1a:
db:32:8a:96:94:22:b1:b3:c0:8b:cc:48:57:e5:d1:
cc:2a:c1:cb:03:f2:87:3a:1a:1b:d3:d5:33:54:52:
f3:7e:64:b2:da:83:90:9c:89:5a:71:73:17:9d:1f:
b5:8f:23:40:79:21:91:19:d2:ab:42:80:ec:59:e2:
96:93:94:0a:0a:21:b8:56:93:a5:d7:1d:34:d6:05:
f2:43:b1:ba:0f:a6:05:76:ba:85:4d:23:90:fe:f5:
4c:60:8c:7a:bd:0b:b4:e1:7b:82:9c:7f:55:25:47:
c9:bd:c1:97:3a:70:39:5f:83:05:3a:e7:5a:78:ea:
e4:a7:ca:59:df:1c:eb:af:37:bc:28:8d:fb:90:fa:
20:99:45:d4:92:60:10:4a:33:86:77:db:8c:f3:30:
0d:df:15:29:5a:62:e7:38:48:20:a6:23:db:5a:de:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:73:4A:70:1B:15:84:8F:0A:7D:77:7F:28:2A:90:4B:91:FF:BE
X509v3 Authority Key Identifier:
keyid:EC:47:FE:CC:E0:96:1A:B0:D1:F8:57:32:96:A2:27:42:17:AC:38:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Ef-zOCWGrDR-FcylqInQhesONI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/__BzSnAbFYSPCn13fygqkEuR_74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2e4872-1903-4213-9561-4c55e4699ab9/1/7Ef-zOCWGrDR-FcylqInQhesONI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:a0:21:67:86:4d:23:31:f5:b2:70:82:90:56:bf:43:e7:ff:
cd:f9:30:b2:fb:0d:cc:97:97:74:e0:97:82:c0:1f:60:07:0b:
8d:67:a5:5e:a7:ae:46:c4:d8:ee:ef:ef:15:0c:53:e0:ff:ec:
9a:74:cc:4b:81:a2:85:07:99:67:8a:54:6a:54:24:c9:e7:e4:
72:7a:b7:2a:9a:aa:4e:12:38:d4:61:e1:a3:a0:eb:4f:63:98:
fd:e0:75:2a:5c:6b:72:86:bb:1b:e3:cc:a7:33:d0:4b:7a:7c:
f6:2f:97:3d:bc:4b:a6:cf:bf:4c:64:4c:06:4b:16:9a:09:02:
f8:d0:66:77:3e:90:08:50:f0:27:2a:46:df:35:7b:6f:4e:46:
4e:41:77:83:bd:0e:71:90:ba:f4:88:53:82:db:64:a0:32:08:
97:e3:43:b3:0c:ee:cc:b5:5a:d3:36:b2:6e:67:c8:ad:d1:a5:
24:49:c4:eb:3f:ca:b3:9a:df:29:ee:78:b5:08:2f:1e:0a:fc:
1f:19:83:76:e0:8f:49:91:8b:e2:16:2a:a5:6a:82:ee:2f:e6:
2b:ec:35:41:9b:35:01:a6:34:c3:90:6c:96:9d:d4:b5:c4:60:
06:e2:75:9a:e0:14:c8:05:64:f6:d1:6d:d6:52:e0:3f:38:f7:
80:da:f1:31
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB36H6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YzQ3ZmVjY2UwOTYxYWIwZDFmODU3MzI5NmEyMjc0MjE3YWMzOGQyMB4XDTIyMDEw
MTA3NTMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmZmMDczNGE3MDFi
MTU4NDhmMGE3ZDc3N2YyODJhOTA0YjkxZmZiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAONBoKuaxQzfuh9B+g1YGJgIJS8zldkrQwTPUcHAT9Uo1+gL
T9taJa2JsvbGcp1oudnCjx6/nJeb5+fSTg3eXEyv0jMGmGLmK/c2PnR8g3tZnbNd
EyZDOeMa2zKKlpQisbPAi8xIV+XRzCrBywPyhzoaG9PVM1RS835kstqDkJyJWnFz
F50ftY8jQHkhkRnSq0KA7FnilpOUCgohuFaTpdcdNNYF8kOxug+mBXa6hU0jkP71
TGCMer0LtOF7gpx/VSVHyb3BlzpwOV+DBTrnWnjq5KfKWd8c6683vCiN+5D6IJlF
1JJgEEozhnfbjPMwDd8VKVpi5zhIIKYj21reK+0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT/8HNKcBsVhI8KfXd/KCqQS5H/vjAfBgNVHSMEGDAWgBTsR/7M4JYasNH4
VzKWoidCF6w40jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdFZi16T0NXR3JEUi1GY3lscUluUWhlc09OSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjEvMmU0ODcyLTE5MDMtNDIxMy05NTYxLTRjNTVlNDY5OWFiOS8x
L19fQnpTbkFiRllTUENuMTNmeWdxa0V1Ul83NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEv
MmU0ODcyLTE5MDMtNDIxMy05NTYxLTRjNTVlNDY5OWFiOS8xLzdFZi16T0NXR3JE
Ui1GY3lscUluUWhlc09OSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2VCDANBgkqhkiG9w0BAQsFAAOC
AQEAp6AhZ4ZNIzH1snCCkFa/Q+f/zfkwsvsNzJeXdOCXgsAfYAcLjWelXqeuRsTY
7u/vFQxT4P/smnTMS4GihQeZZ4pUalQkyefkcnq3KpqqThI41GHho6DrT2OY/eB1
Klxrcoa7G+PMpzPQS3p89i+XPbxLps+/TGRMBksWmgkC+NBmdz6QCFDwJypG3zV7
b05GTkF3g70OcZC69IhTgttkoDIIl+NDswzuzLVa0zaybmfIrdGlJEnE6z/Ks5rf
Ke54tQgvHgr8HxmDduCPSZGL4hYqpWqC7i/mK+w1QZs1AaY0w5Bslp3UtcRgBuJ1
muAUyAVk9tFt1lLgPzj3gNrxMQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net