Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/pCXBPNRl5Nz6liVpHSbwJwI8Jqo.roa
File: pCXBPNRl5Nz6liVpHSbwJwI8Jqo.roa (raw, json)
Hash identifier: bm+6U8L/4Uj7cWZX9aSnwa0Esin299bJV+GGJhCnXxM=
Subject key identifier: A4:25:C1:3C:D4:65:E4:DC:FA:96:25:69:1D:26:F0:27:02:3C:26:AA
Certificate issuer: /CN=59ba995385916e2b8f9e4b02cf023a8a6ecc90d6
Certificate serial: 0186E5E6B3960C9D36A09C277909E2B96F7E
Authority key identifier: 59:BA:99:53:85:91:6E:2B:8F:9E:4B:02:CF:02:3A:8A:6E:CC:90:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbqZU4WRbiuPnksCzwI6im7MkNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/pCXBPNRl5Nz6liVpHSbwJwI8Jqo.roa
Signing time: Wed 15 Mar 2023 15:32:27 +0000
ROA not before: Wed 15 Mar 2023 15:32:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208124
IP address blocks: 91.209.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:e6:b3:96:0c:9d:36:a0:9c:27:79:09:e2:b9:6f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59ba995385916e2b8f9e4b02cf023a8a6ecc90d6
Validity
Not Before: Mar 15 15:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a425c13cd465e4dcfa9625691d26f027023c26aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:23:5e:1d:83:ad:68:c8:65:58:6e:44:dd:
18:d4:42:06:da:f7:e2:39:57:c8:a1:f4:3e:02:94:
89:95:38:c3:38:0c:ea:a4:a9:52:74:1e:8e:4e:15:
91:27:4a:b7:a1:c9:9e:3f:1d:9e:9d:2e:e2:57:31:
4a:ca:43:45:c5:6c:db:76:49:9a:be:ab:5e:db:bd:
e2:78:c4:31:dd:8c:e2:61:1f:a1:7f:e3:fb:b1:23:
92:45:64:0d:cb:4e:2c:6c:c1:37:05:71:01:c4:b5:
18:21:f8:19:8a:e6:f4:bb:fa:08:1d:94:82:0c:bc:
46:5d:d6:0e:37:06:67:81:53:78:07:17:f1:b3:68:
48:75:18:a3:96:51:4e:71:da:fa:8a:5a:49:76:7d:
ab:46:a0:f5:37:b6:87:19:96:9c:8a:63:0b:b9:e0:
85:1d:5f:f2:b1:d5:4b:70:a1:6a:3e:33:05:8e:52:
8c:b9:66:76:7a:98:d0:5e:6f:55:a6:7f:3e:7b:a0:
6b:45:f5:21:fa:c1:9e:d5:e7:a0:a0:8a:28:10:a6:
2a:60:96:f3:38:01:3d:c6:9e:2e:5c:99:ca:d8:5b:
e6:56:24:ec:44:19:0a:cd:74:f8:ff:5f:e0:af:96:
5e:4c:76:e2:06:5f:58:d1:44:ed:41:8f:44:ae:ff:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:25:C1:3C:D4:65:E4:DC:FA:96:25:69:1D:26:F0:27:02:3C:26:AA
X509v3 Authority Key Identifier:
keyid:59:BA:99:53:85:91:6E:2B:8F:9E:4B:02:CF:02:3A:8A:6E:CC:90:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbqZU4WRbiuPnksCzwI6im7MkNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/pCXBPNRl5Nz6liVpHSbwJwI8Jqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3d3aff-6acf-4e8a-af8d-5b1ca64bb1de/1/WbqZU4WRbiuPnksCzwI6im7MkNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.161.0/24
Signature Algorithm: sha256WithRSAEncryption
49:71:83:42:b7:b5:81:63:b1:08:ed:1e:d1:31:05:48:6c:6d:
d9:81:41:89:72:df:55:4f:17:0e:df:6d:dd:1a:22:90:b4:e2:
a6:1e:3c:83:21:26:83:aa:9e:d3:5e:c6:17:da:99:6d:96:64:
01:77:c9:bb:99:6a:44:33:20:38:3a:f2:5b:62:1f:56:a9:40:
23:91:ce:76:53:f5:6b:11:a6:32:76:bc:fe:d2:0e:99:11:d0:
10:9b:eb:86:da:3b:dc:e8:55:47:16:58:8b:37:70:bc:6d:3c:
3c:21:7e:60:3c:2c:33:5e:2a:eb:38:0b:32:2f:5e:f3:89:92:
17:0c:5f:b9:74:9d:87:ea:12:82:8b:b1:79:30:fe:2f:a6:4f:
ef:1b:9c:1a:29:2a:df:ae:b8:65:be:4c:51:01:5b:48:38:3e:
18:2c:1f:fa:68:98:32:0d:b8:3d:7e:29:15:8b:48:57:23:14:
a9:22:6d:97:44:fa:7d:64:22:18:56:f3:3f:f6:3c:02:1d:b1:
37:1b:72:c4:a3:63:d2:92:67:d4:64:f3:d0:be:c4:94:17:5b:
bb:cd:b1:ed:cb:13:58:5f:84:60:54:b6:b9:d2:3e:84:d6:e1:
e0:17:0f:f7:c0:a1:89:c0:2b:39:54:d2:9f:6c:7d:ec:7e:3b:
32:ef:08:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbl5rOWDJ02oJwneQniuW9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YmE5OTUzODU5MTZlMmI4ZjllNGIwMmNmMDIzYThhNmVj
YzkwZDYwHhcNMjMwMzE1MTUzMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDI1YzEzY2Q0NjVlNGRjZmE5NjI1NjkxZDI2ZjAyNzAyM2MyNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCAjXh2DrWjIZVhuRN0Y1EIG2vfi
OVfIofQ+ApSJlTjDOAzqpKlSdB6OThWRJ0q3ocmePx2enS7iVzFKykNFxWzbdkma
vqte273ieMQx3YziYR+hf+P7sSOSRWQNy04sbME3BXEBxLUYIfgZiub0u/oIHZSC
DLxGXdYONwZngVN4Bxfxs2hIdRijllFOcdr6ilpJdn2rRqD1N7aHGZacimMLueCF
HV/ysdVLcKFqPjMFjlKMuWZ2epjQXm9Vpn8+e6BrRfUh+sGe1eegoIooEKYqYJbz
OAE9xp4uXJnK2FvmViTsRBkKzXT4/1/gr5ZeTHbiBl9Y0UTtQY9Erv/8XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQlwTzUZeTc+pYlaR0m8CcCPCaqMB8GA1UdIwQY
MBaAFFm6mVOFkW4rj55LAs8COopuzJDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JxWlU0V1JiaXVQbmtzQ3p3STZpbTdNa05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zZDNhZmYtNmFjZi00ZThhLWFmOGQt
NWIxY2E2NGJiMWRlLzEvcENYQlBOUmw1Tno2bGlWcEhTYndKd0k4SnFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zZDNhZmYtNmFjZi00ZThhLWFmOGQtNWIxY2E2NGJiMWRl
LzEvV2JxWlU0V1JiaXVQbmtzQ3p3STZpbTdNa05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GhMA0G
CSqGSIb3DQEBCwUAA4IBAQBJcYNCt7WBY7EI7R7RMQVIbG3ZgUGJct9VTxcO323d
GiKQtOKmHjyDISaDqp7TXsYX2pltlmQBd8m7mWpEMyA4OvJbYh9WqUAjkc52U/Vr
EaYydrz+0g6ZEdAQm+uG2jvc6FVHFliLN3C8bTw8IX5gPCwzXirrOAsyL17ziZIX
DF+5dJ2H6hKCi7F5MP4vpk/vG5waKSrfrrhlvkxRAVtIOD4YLB/6aJgyDbg9fikV
i0hXIxSpIm2XRPp9ZCIYVvM/9jwCHbE3G3LEo2PSkmfUZPPQvsSUF1u7zbHtyxNY
X4RgVLa50j6E1uHgFw/3wKGJwCs5VNKfbH3sfjsy7wgV
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:29 2023 by rpki-client on console.sobornost.net