Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/cDKkOoYUop7_Kvq7O666BNjznO4.roa
File: cDKkOoYUop7_Kvq7O666BNjznO4.roa (raw, json)
Hash identifier: 3Z1hYL6pAEQeCgYYFg6qTfDf7lcxkgFS4V9NG+C4oDA=
Subject key identifier: 70:32:A4:3A:86:14:A2:9E:FF:2A:FA:BB:3B:AE:BA:04:D8:F3:9C:EE
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01922EBFB5980BE79E3877F193A0D51F0069
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/cDKkOoYUop7_Kvq7O666BNjznO4.roa
Signing time: Thu 26 Sep 2024 14:32:48 +0000
ROA not before: Thu 26 Sep 2024 14:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 45.112.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:bf:b5:98:0b:e7:9e:38:77:f1:93:a0:d5:1f:00:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Sep 26 14:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7032a43a8614a29eff2afabb3baeba04d8f39cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:e8:ef:c5:22:73:c1:42:f2:3e:a1:fc:3f:
49:14:2d:e2:10:59:9e:94:49:c9:d2:58:18:d1:6a:
92:15:83:d5:48:99:0e:70:54:3f:f0:c2:d9:f3:0c:
65:c8:20:b9:fd:11:23:ea:d5:29:fe:91:42:6c:b8:
6d:d6:41:14:15:94:f4:00:d2:d9:f6:79:f9:10:6b:
b0:e6:99:d4:89:84:e4:1d:79:14:5c:1f:ce:7c:46:
07:9b:1c:6d:7e:f4:b0:24:c5:e1:38:4e:81:6f:61:
cc:df:40:01:6b:91:87:22:0f:df:55:63:69:ca:97:
07:67:40:ac:26:b4:07:1e:96:7f:a1:dd:fc:1b:d5:
e4:02:b8:24:71:ca:04:57:81:5a:b5:f7:40:09:b9:
dd:d5:1c:e8:47:eb:a8:48:1f:98:12:87:e8:72:9d:
14:10:b2:05:72:48:86:60:d0:b9:09:3b:a2:43:ef:
f7:ec:68:7c:b2:69:4e:ee:7e:f6:be:e2:32:86:4d:
2c:d1:56:ea:6c:15:a8:07:f2:57:61:e4:d4:cf:da:
5a:2b:f0:4b:3f:0a:5d:7a:ae:4c:87:08:78:a5:6c:
34:fa:dd:0a:a3:91:5a:35:2d:db:8f:45:da:bb:95:
5a:18:b2:02:51:2d:59:f4:64:ee:a4:9e:3d:6c:5a:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:A4:3A:86:14:A2:9E:FF:2A:FA:BB:3B:AE:BA:04:D8:F3:9C:EE
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/cDKkOoYUop7_Kvq7O666BNjznO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a3:13:51:b0:92:70:ae:43:9c:6b:41:dc:43:b2:f8:38:16:
25:4d:dc:60:ba:e6:ed:e0:49:82:32:35:d7:63:c0:26:b4:9c:
89:d5:02:3a:17:89:c6:79:84:00:98:ee:13:f8:ae:7f:dd:25:
af:b1:6a:53:10:17:77:a0:84:a0:dd:72:35:f2:f6:2e:87:68:
38:b3:d4:95:ea:87:37:8d:63:74:36:e2:76:75:02:ef:7a:3c:
ca:32:0e:2b:04:1b:1f:33:55:f4:36:5d:9e:f0:0f:42:b1:7c:
5f:a7:be:8c:c1:3e:56:16:43:f8:f1:b8:fa:83:76:f5:39:a5:
1a:a2:0e:77:79:14:60:1d:d5:c3:62:ca:49:c8:16:a3:6c:c3:
d4:b2:31:07:f9:7c:79:37:37:42:4c:5b:b9:a1:23:7e:07:16:
dd:57:9f:e8:ef:61:bb:f6:c2:1a:0e:01:39:2f:87:93:36:17:
58:9d:34:90:ed:2d:1a:f7:40:9c:fd:3a:89:97:ef:c5:e2:e6:
3b:94:e4:6e:a6:47:1d:97:93:27:b2:80:fa:83:13:9b:47:9e:
65:31:90:cd:5e:4b:5f:27:f5:16:e8:1d:cb:95:22:00:b1:87:
24:d7:65:4a:1a:d5:51:2e:7f:0a:fa:15:1b:ad:82:ff:07:56:
2e:f9:b3:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIuv7WYC+eeOHfxk6DVHwBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh
ZjZkYzQwHhcNMjQwOTI2MTQzMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDMyYTQzYTg2MTRhMjllZmYyYWZhYmIzYmFlYmEwNGQ4ZjM5Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfDo78Uic8FC8j6h/D9JFC3iEFme
lEnJ0lgY0WqSFYPVSJkOcFQ/8MLZ8wxlyCC5/REj6tUp/pFCbLht1kEUFZT0ANLZ
9nn5EGuw5pnUiYTkHXkUXB/OfEYHmxxtfvSwJMXhOE6Bb2HM30ABa5GHIg/fVWNp
ypcHZ0CsJrQHHpZ/od38G9XkArgkccoEV4FatfdACbnd1RzoR+uoSB+YEofocp0U
ELIFckiGYNC5CTuiQ+/37Gh8smlO7n72vuIyhk0s0VbqbBWoB/JXYeTUz9paK/BL
Pwpdeq5Mhwh4pWw0+t0Ko5FaNS3bj0Xau5VaGLICUS1Z9GTupJ49bFqbewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHAypDqGFKKe/yr6uzuuugTY85zuMB8GA1UdIwQY
MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt
ZTUyNmE5NDA5ZmI4LzEvY0RLa09vWVVvcDdfS3ZxN082NjZCTmp6bk80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4
LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXDCMA0G
CSqGSIb3DQEBCwUAA4IBAQCKoxNRsJJwrkOca0HcQ7L4OBYlTdxguubt4EmCMjXX
Y8AmtJyJ1QI6F4nGeYQAmO4T+K5/3SWvsWpTEBd3oISg3XI18vYuh2g4s9SV6oc3
jWN0NuJ2dQLvejzKMg4rBBsfM1X0Nl2e8A9CsXxfp76MwT5WFkP48bj6g3b1OaUa
og53eRRgHdXDYspJyBajbMPUsjEH+Xx5NzdCTFu5oSN+BxbdV5/o72G79sIaDgE5
L4eTNhdYnTSQ7S0a90Cc/TqJl+/F4uY7lORupkcdl5MnsoD6gxObR55lMZDNXktf
J/UW6B3LlSIAsYck12VKGtVRLn8K+hUbrYL/B1Yu+bOb
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:59 2024 by rpki-client on console.sobornost.net