Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b83c0a-7038-4346-9bce-90b15133f505/1/Dz_uz9cLqqC3wDt0meKxYqjw4Ok.roa
File: Dz_uz9cLqqC3wDt0meKxYqjw4Ok.roa (raw, json)
Hash identifier: aR1pQ77rzmbjGh4L2olFBCjEui5iQJauMpL0dTFFJqo=
Subject key identifier: 0F:3F:EE:CF:D7:0B:AA:A0:B7:C0:3B:74:99:E2:B1:62:A8:F0:E0:E9
Certificate issuer: /CN=ab6c7e3bf396cef06054ccb2d59b4bda20acb1b4
Certificate serial: 08945B72
Authority key identifier: AB:6C:7E:3B:F3:96:CE:F0:60:54:CC:B2:D5:9B:4B:DA:20:AC:B1:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2x-O_OWzvBgVMyy1ZtL2iCssbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b83c0a-7038-4346-9bce-90b15133f505/1/Dz_uz9cLqqC3wDt0meKxYqjw4Ok.roa
Signing time: Sat 01 Jan 2022 13:59:02 +0000
ROA not before: Sat 01 Jan 2022 13:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197077
IP address blocks: 45.13.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143940466 (0x8945b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6c7e3bf396cef06054ccb2d59b4bda20acb1b4
Validity
Not Before: Jan 1 13:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f3feecfd70baaa0b7c03b7499e2b162a8f0e0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:1b:e5:3b:bf:f8:17:83:08:aa:01:9e:45:
77:2c:30:fb:af:7b:7d:3e:4f:49:d4:bc:00:7b:b2:
c3:6e:1c:72:b6:e9:eb:75:58:3b:3e:44:59:bb:39:
d9:3e:d1:16:2b:ca:a9:e6:d0:07:c0:ee:ff:ab:08:
42:c8:30:1d:8e:e9:15:f9:50:2a:41:de:99:4b:cd:
6c:20:63:f3:37:20:89:68:30:1d:da:d5:ed:fc:7f:
61:46:62:7d:9c:64:d1:08:38:84:b3:f2:60:cf:c4:
5b:65:d6:12:6d:e8:62:6c:e7:d8:a9:60:84:61:21:
59:0f:ab:ff:1e:7b:8a:23:89:7b:9e:4f:45:21:aa:
81:b8:82:be:73:e6:dc:9e:2b:33:a0:15:dd:a7:f1:
ae:be:e0:8f:6c:2b:ff:94:97:51:50:e9:ce:d3:e2:
d2:44:9c:0e:00:d7:f0:89:d2:43:0d:e5:ee:79:d2:
fc:6b:80:b4:06:88:35:45:99:66:de:41:b3:a2:bd:
c5:7c:cd:0c:3f:0c:d5:30:47:34:45:92:a5:8a:90:
42:1a:e6:57:9f:26:b7:1d:84:e5:d4:f8:b8:1e:b3:
0c:b9:7f:84:e3:66:f1:c7:77:23:e8:92:c5:3f:b4:
7b:ad:2d:41:fa:08:60:c5:07:56:31:b5:c6:97:e3:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3F:EE:CF:D7:0B:AA:A0:B7:C0:3B:74:99:E2:B1:62:A8:F0:E0:E9
X509v3 Authority Key Identifier:
keyid:AB:6C:7E:3B:F3:96:CE:F0:60:54:CC:B2:D5:9B:4B:DA:20:AC:B1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2x-O_OWzvBgVMyy1ZtL2iCssbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b83c0a-7038-4346-9bce-90b15133f505/1/Dz_uz9cLqqC3wDt0meKxYqjw4Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b83c0a-7038-4346-9bce-90b15133f505/1/q2x-O_OWzvBgVMyy1ZtL2iCssbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.200.0/22
Signature Algorithm: sha256WithRSAEncryption
03:c0:b5:f8:7d:d1:af:14:8b:fa:ec:e3:6c:11:10:ab:be:b4:
2e:91:38:50:51:03:a5:7b:5d:a7:b9:4a:9f:82:b5:a0:2e:c9:
15:b6:c3:37:fd:83:19:93:3e:cf:de:74:01:4e:8c:b4:31:8e:
d0:91:7b:7a:e9:bb:d4:e8:be:9a:18:77:3a:18:2d:8b:32:5c:
19:df:6e:5a:9a:8d:a1:fb:ca:9a:4b:de:4e:ed:eb:1f:85:91:
ef:ed:c9:89:d3:b0:3e:20:07:d1:0f:66:7f:78:38:fb:6d:5d:
5d:f3:72:85:c5:16:5a:9b:7b:5c:aa:c9:0c:36:7d:c6:68:7e:
32:0d:42:ad:2e:df:49:0b:c9:81:62:9f:07:ed:92:79:0c:d4:
b9:08:bb:75:6a:cd:11:8d:8c:81:be:98:71:e1:fd:f9:6b:72:
af:e9:e3:73:45:60:ff:6a:6d:40:e8:18:0d:4a:58:00:5e:3a:
74:de:5b:99:e9:da:4b:4e:03:10:51:67:d9:48:1d:49:88:dd:
87:b6:cb:9d:b3:9f:28:9f:b3:80:ba:a3:5a:fc:88:dd:df:e2:
c8:49:b7:2f:f4:35:dd:1c:7e:44:08:6c:48:60:71:f9:4c:86:
b0:eb:6d:de:f5:39:f5:9b:cc:b2:2b:d3:d0:51:70:d4:f6:77:
9a:f9:b9:d6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECJRbcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjZjN2UzYmYzOTZjZWYwNjA1NGNjYjJkNTliNGJkYTIwYWNiMWI0MB4XDTIyMDEw
MTEzNTkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGYzZmVlY2ZkNzBi
YWFhMGI3YzAzYjc0OTllMmIxNjJhOGYwZTBlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUFG+U7v/gXgwiqAZ5Fdyww+697fT5PSdS8AHuyw24ccrbp
63VYOz5EWbs52T7RFivKqebQB8Du/6sIQsgwHY7pFflQKkHemUvNbCBj8zcgiWgw
HdrV7fx/YUZifZxk0Qg4hLPyYM/EW2XWEm3oYmzn2KlghGEhWQ+r/x57iiOJe55P
RSGqgbiCvnPm3J4rM6AV3afxrr7gj2wr/5SXUVDpztPi0kScDgDX8InSQw3l7nnS
/GuAtAaINUWZZt5Bs6K9xXzNDD8M1TBHNEWSpYqQQhrmV58mtx2E5dT4uB6zDLl/
hONm8cd3I+iSxT+0e60tQfoIYMUHVjG1xpfjhW8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQPP+7P1wuqoLfAO3SZ4rFiqPDg6TAfBgNVHSMEGDAWgBSrbH4785bO8GBU
zLLVm0vaIKyxtDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3EyeC1PX09XenZCZ1ZNeXkxWnRMMmlDc3NiUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvYjgzYzBhLTcwMzgtNDM0Ni05YmNlLTkwYjE1MTMzZjUwNS8x
L0R6X3V6OWNMcXFDM3dEdDBtZUt4WXFqdzRPay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
YjgzYzBhLTcwMzgtNDM0Ni05YmNlLTkwYjE1MTMzZjUwNS8xL3EyeC1PX09XenZC
Z1ZNeXkxWnRMMmlDc3NiUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0NyDANBgkqhkiG9w0BAQsFAAOC
AQEAA8C1+H3RrxSL+uzjbBEQq760LpE4UFEDpXtdp7lKn4K1oC7JFbbDN/2DGZM+
z950AU6MtDGO0JF7eum71Oi+mhh3OhgtizJcGd9uWpqNofvKmkveTu3rH4WR7+3J
idOwPiAH0Q9mf3g4+21dXfNyhcUWWpt7XKrJDDZ9xmh+Mg1CrS7fSQvJgWKfB+2S
eQzUuQi7dWrNEY2Mgb6YceH9+Wtyr+njc0Vg/2ptQOgYDUpYAF46dN5bmenaS04D
EFFn2UgdSYjdh7bLnbOfKJ+zgLqjWvyI3d/iyEm3L/Q13Rx+RAhsSGBx+UyGsOtt
3vU59ZvMsivT0FFw1PZ3mvm51g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net