Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/pnDtlILOHOfAp9WyuARs92Luewk.roa
File: pnDtlILOHOfAp9WyuARs92Luewk.roa (raw, json)
Hash identifier: MjtvcTN+D1xWd3mJjRhpDNx1UXdCGNLLadCKimMDhjM=
Subject key identifier: A6:70:ED:94:82:CE:1C:E7:C0:A7:D5:B2:B8:04:6C:F7:62:EE:7B:09
Certificate issuer: /CN=61b429985b5932ab5af3674ba6cb5a27cbd766d4
Certificate serial: 011671
Authority key identifier: 61:B4:29:98:5B:59:32:AB:5A:F3:67:4B:A6:CB:5A:27:CB:D7:66:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbQpmFtZMqta82dLpstaJ8vXZtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/pnDtlILOHOfAp9WyuARs92Luewk.roa
Signing time: Thu 10 Feb 2022 16:39:17 +0000
ROA not before: Thu 10 Feb 2022 16:39:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209433
IP address blocks: 45.86.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71281 (0x11671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b429985b5932ab5af3674ba6cb5a27cbd766d4
Validity
Not Before: Feb 10 16:39:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a670ed9482ce1ce7c0a7d5b2b8046cf762ee7b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:ae:f5:fa:3f:55:27:54:02:fd:46:30:f3:
db:f6:cb:11:23:a8:86:94:4d:eb:a3:50:8a:95:92:
72:f8:40:33:60:6e:57:91:cd:b1:99:1d:fa:28:40:
55:ee:38:cd:1f:90:e0:83:3c:f9:78:29:32:f7:28:
4f:bc:8d:ce:e1:66:32:47:dd:c5:c5:37:b1:09:89:
2a:60:8a:55:a2:7f:65:c4:cd:03:ff:21:3a:90:6a:
73:83:44:2d:c9:0f:34:54:f0:0c:be:cc:14:10:c7:
5f:38:c6:0f:7e:45:b8:fb:f9:a4:03:fe:51:e4:dc:
d4:e3:f5:47:ba:21:18:43:ed:51:39:7d:75:05:a6:
80:5a:38:ca:68:54:9b:25:a3:81:12:6e:7c:de:6a:
aa:1c:51:f7:58:30:16:9d:98:9f:e2:ba:87:13:ca:
6f:79:8d:aa:c4:b2:d0:eb:aa:01:5f:f3:c0:a8:7e:
a1:7f:bb:b4:13:3e:29:cf:f8:9f:6a:30:c3:24:ca:
8e:2c:e5:48:15:51:79:26:4f:34:59:38:fc:97:7f:
28:da:83:de:76:28:f3:71:1c:1e:02:82:68:e6:a2:
21:75:5b:f3:71:83:6b:5c:7c:9d:1a:3a:2f:ee:dc:
2f:06:7c:6a:9d:58:b9:2f:4e:66:c6:b3:6b:66:3a:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:ED:94:82:CE:1C:E7:C0:A7:D5:B2:B8:04:6C:F7:62:EE:7B:09
X509v3 Authority Key Identifier:
keyid:61:B4:29:98:5B:59:32:AB:5A:F3:67:4B:A6:CB:5A:27:CB:D7:66:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbQpmFtZMqta82dLpstaJ8vXZtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/pnDtlILOHOfAp9WyuARs92Luewk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/YbQpmFtZMqta82dLpstaJ8vXZtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.136.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e2:28:06:88:48:26:74:7b:fa:d3:29:58:10:ac:d6:22:50:
d6:ea:1d:3d:e5:6a:b0:8d:f6:30:03:26:9c:16:7c:4d:8f:cb:
b5:c7:79:1f:b1:88:35:48:0d:e6:4f:e3:3e:8b:bc:ce:80:a4:
f6:e7:64:56:2f:55:7d:fa:35:06:38:b5:8d:50:d3:b0:df:90:
56:0a:d3:1a:80:ec:43:f7:d1:b9:aa:1f:6d:63:e3:f3:9b:39:
85:cf:59:3a:21:a1:c5:35:41:a8:67:55:0f:2b:9c:9e:47:21:
9d:15:7a:f1:84:7a:1e:7f:83:45:6e:bd:a9:4a:c2:d5:fd:1f:
53:86:29:65:db:46:0a:ff:cf:a7:8d:cf:92:49:b4:e9:ea:f4:
8e:7a:f1:8b:2e:ee:34:e3:98:24:3e:d1:8a:a3:d3:e8:3d:16:
0e:2b:1b:ae:3d:54:72:6a:0f:9b:a0:21:26:d2:af:b8:43:ea:
6d:cb:ee:ec:78:b1:e2:e2:20:22:35:7b:ba:af:7d:77:e6:05:
33:df:21:62:34:c9:8f:4d:58:19:43:bb:5d:99:a9:05:fb:8b:
98:9a:50:63:d5:41:5b:c7:41:bf:12:f3:ff:b3:a7:41:2c:7a:
c6:1f:2c:d3:cd:fb:fb:44:56:82:7f:d5:07:0a:c2:66:d5:11:
21:d0:5d:f9
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDARZxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
YjQyOTk4NWI1OTMyYWI1YWYzNjc0YmE2Y2I1YTI3Y2JkNzY2ZDQwHhcNMjIwMjEw
MTYzOTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNjcwZWQ5NDgyY2Ux
Y2U3YzBhN2Q1YjJiODA0NmNmNzYyZWU3YjA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqe+u9fo/VSdUAv1GMPPb9ssRI6iGlE3ro1CKlZJy+EAzYG5X
kc2xmR36KEBV7jjNH5Dggzz5eCky9yhPvI3O4WYyR93FxTexCYkqYIpVon9lxM0D
/yE6kGpzg0QtyQ80VPAMvswUEMdfOMYPfkW4+/mkA/5R5NzU4/VHuiEYQ+1ROX11
BaaAWjjKaFSbJaOBEm583mqqHFH3WDAWnZif4rqHE8pveY2qxLLQ66oBX/PAqH6h
f7u0Ez4pz/ifajDDJMqOLOVIFVF5Jk80WTj8l38o2oPedijzcRweAoJo5qIhdVvz
cYNrXHydGjov7twvBnxqnVi5L05mxrNrZjqzgwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFKZw7ZSCzhznwKfVsrgEbPdi7nsJMB8GA1UdIwQYMBaAFGG0KZhbWTKrWvNn
S6bLWifL12bUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WWJRcG1GdFpNcXRhODJkTHBzdGFKOHZYWnRRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wMC83NjY3ODQtNmFkMC00YTkzLTg2MTItZTlhYmE4NWY0MWQyLzEv
cG5EdGxJTE9IT2ZBcDlXeXVBUnM5Mkx1ZXdrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83
NjY3ODQtNmFkMC00YTkzLTg2MTItZTlhYmE4NWY0MWQyLzEvWWJRcG1GdFpNcXRh
ODJkTHBzdGFKOHZYWnRRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVaIMA0GCSqGSIb3DQEBCwUAA4IB
AQCS4igGiEgmdHv60ylYEKzWIlDW6h095WqwjfYwAyacFnxNj8u1x3kfsYg1SA3m
T+M+i7zOgKT252RWL1V9+jUGOLWNUNOw35BWCtMagOxD99G5qh9tY+PzmzmFz1k6
IaHFNUGoZ1UPK5yeRyGdFXrxhHoef4NFbr2pSsLV/R9Thill20YK/8+njc+SSbTp
6vSOevGLLu4045gkPtGKo9PoPRYOKxuuPVRyag+boCEm0q+4Q+pty+7seLHi4iAi
NXu6r3135gUz3yFiNMmPTVgZQ7tdmakF+4uYmlBj1UFbx0G/EvP/s6dBLHrGHyzT
zfv7RFaCf9UHCsJm1REh0F35
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net