Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/qT5TN2JyYazgXXsOiVarp9yjirA.roa
File: qT5TN2JyYazgXXsOiVarp9yjirA.roa (raw, json)
Hash identifier: l9+G9/dWXcOk14FBvFVc1s7A+WoAa/3i7hrIrtmPdbw=
Subject key identifier: A9:3E:53:37:62:72:61:AC:E0:5D:7B:0E:89:56:AB:A7:DC:A3:8A:B0
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019368E30A1EEC2EC6C8C2B8570EEF989B47
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/qT5TN2JyYazgXXsOiVarp9yjirA.roa
Signing time: Tue 26 Nov 2024 14:32:09 +0000
ROA not before: Tue 26 Nov 2024 14:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6775
IP address blocks: 45.143.188.0/22 maxlen: 22
2a12:f380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:e3:0a:1e:ec:2e:c6:c8:c2:b8:57:0e:ef:98:9b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Nov 26 14:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a93e5337627261ace05d7b0e8956aba7dca38ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:c5:a3:6d:91:3d:5c:7f:7b:b7:05:e2:2e:
e7:c3:28:22:65:6b:da:e7:12:36:6a:bd:c3:77:80:
1c:9d:a4:b6:68:d6:42:de:bf:29:a6:02:98:13:ac:
19:0a:e4:09:fe:89:73:de:c0:12:da:40:7f:0b:a8:
14:c3:70:3c:cf:38:e1:aa:ce:8a:19:fd:76:05:01:
8d:df:24:63:85:c8:cc:6f:21:50:08:1b:43:55:c5:
8b:48:98:bc:4b:75:9b:35:78:8a:c3:08:fb:ca:39:
5e:15:9f:20:61:a1:74:a1:5b:c7:b4:00:27:4c:6d:
9d:29:16:40:37:03:b3:72:75:ff:f0:1e:aa:24:1a:
5c:39:f2:4e:8f:01:d8:13:93:3a:dc:63:37:01:e7:
a2:ad:f7:77:c9:a9:36:e2:67:52:8b:9d:db:2f:d8:
94:fc:8a:46:53:d7:08:0c:7d:33:0c:39:49:aa:16:
5f:26:93:65:2c:8c:48:2e:c7:35:9d:d5:de:7e:e2:
7e:1c:cc:74:5e:3f:6d:ba:83:03:cd:d3:54:c0:1b:
c9:b0:df:79:62:a8:97:e5:fe:cd:ac:43:98:63:f3:
bf:ae:45:af:07:ef:50:e2:bb:95:13:5d:7b:97:34:
52:b9:bf:8d:a1:1c:50:d6:33:b8:8e:3f:6c:fc:6f:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:53:37:62:72:61:AC:E0:5D:7B:0E:89:56:AB:A7:DC:A3:8A:B0
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/qT5TN2JyYazgXXsOiVarp9yjirA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.188.0/22
IPv6:
2a12:f380::/29
Signature Algorithm: sha256WithRSAEncryption
4a:7c:bb:e1:10:17:42:5f:17:8a:c3:31:30:fd:22:11:8b:6d:
12:15:44:13:03:d5:17:b6:ff:37:9e:a8:80:bd:9e:90:07:d0:
59:be:44:45:e5:fe:d1:24:02:c8:64:06:20:87:ec:b9:81:fc:
9b:b2:c2:16:9d:6c:69:85:68:30:80:59:c1:f2:9f:3a:4e:05:
2a:54:3c:30:39:30:9f:71:6c:a8:83:7a:3c:21:bb:5e:65:3d:
8a:fc:1d:09:1b:3e:79:74:d5:ff:b2:e8:b7:80:03:ff:b4:a5:
0f:06:7d:b1:f4:1d:bd:27:d1:6f:a3:5f:50:4e:b7:fa:49:d3:
33:c6:fc:e6:72:15:f7:29:79:b2:58:57:b4:9b:04:09:5d:54:
98:5a:d1:23:41:32:a6:bd:31:dc:b1:a6:f6:7f:57:23:40:23:
63:20:cb:23:5f:d6:d7:2f:06:b2:48:5b:96:b7:27:6b:5a:e7:
60:94:32:74:00:d4:0b:17:a8:1a:b9:b8:a3:46:06:f1:98:6a:
2f:b1:6e:5a:cd:ee:1b:cc:77:9d:77:d4:8f:f3:79:a1:49:fb:
93:42:d7:22:1a:f4:82:5c:95:8a:c8:f7:a1:c4:55:80:0c:b8:
99:29:ce:28:ba:68:fb:1e:31:a8:2f:f7:a4:c8:9c:21:9b:c6:
7d:c7:86:f3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZNo4woe7C7GyMK4Vw7vmJtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1
N2NjZjMwHhcNMjQxMTI2MTQzMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTNlNTMzNzYyNzI2MWFjZTA1ZDdiMGU4OTU2YWJhN2RjYTM4YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqXFo22RPVx/e7cF4i7nwygiZWva
5xI2ar3Dd4AcnaS2aNZC3r8ppgKYE6wZCuQJ/olz3sAS2kB/C6gUw3A8zzjhqs6K
Gf12BQGN3yRjhcjMbyFQCBtDVcWLSJi8S3WbNXiKwwj7yjleFZ8gYaF0oVvHtAAn
TG2dKRZANwOzcnX/8B6qJBpcOfJOjwHYE5M63GM3Aeeirfd3yak24mdSi53bL9iU
/IpGU9cIDH0zDDlJqhZfJpNlLIxILsc1ndXefuJ+HMx0Xj9tuoMDzdNUwBvJsN95
YqiX5f7NrEOYY/O/rkWvB+9Q4ruVE117lzRSub+NoRxQ1jO4jj9s/G/OKwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKk+UzdicmGs4F17DolWq6fco4qwMB8GA1UdIwQY
MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt
YzVkZDM4NTdhNGQyLzEvcVQ1VE4ySnlZYXpnWFhzT2lWYXJwOXlqaXJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy
LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLY+8MA0E
AgACMAcDBQMqEvOAMA0GCSqGSIb3DQEBCwUAA4IBAQBKfLvhEBdCXxeKwzEw/SIR
i20SFUQTA9UXtv83nqiAvZ6QB9BZvkRF5f7RJALIZAYgh+y5gfybssIWnWxphWgw
gFnB8p86TgUqVDwwOTCfcWyog3o8IbteZT2K/B0JGz55dNX/sui3gAP/tKUPBn2x
9B29J9Fvo19QTrf6SdMzxvzmchX3KXmyWFe0mwQJXVSYWtEjQTKmvTHcsab2f1cj
QCNjIMsjX9bXLwaySFuWtydrWudglDJ0ANQLF6gaubijRgbxmGovsW5aze4bzHed
d9SP83mhSfuTQtciGvSCXJWKyPehxFWADLiZKc4oumj7HjGoL/ekyJwhm8Z9x4bz
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net