Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/q1CiobY7EjG8UwFsZJymfCh2WYI.roa
File: q1CiobY7EjG8UwFsZJymfCh2WYI.roa (raw, json)
Hash identifier: gwjw3KvGfXF6N/BaW6vvzBYc5kykQEfrEEk+OO4Zkk0=
Subject key identifier: AB:50:A2:A1:B6:3B:12:31:BC:53:01:6C:64:9C:A6:7C:28:76:59:82
Certificate issuer: /CN=6af2af2fe2a3efe54a14fa09262030acd0711d78
Certificate serial: 0181D54A0B5B59ABBDD80D6FFFFC1DEFC1A0
Authority key identifier: 6A:F2:AF:2F:E2:A3:EF:E5:4A:14:FA:09:26:20:30:AC:D0:71:1D:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKvL-Kj7-VKFPoJJiAwrNBxHXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/q1CiobY7EjG8UwFsZJymfCh2WYI.roa
Signing time: Wed 06 Jul 2022 20:53:28 +0000
ROA not before: Wed 06 Jul 2022 20:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 80.243.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:4a:0b:5b:59:ab:bd:d8:0d:6f:ff:fc:1d:ef:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2af2fe2a3efe54a14fa09262030acd0711d78
Validity
Not Before: Jul 6 20:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab50a2a1b63b1231bc53016c649ca67c28765982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f9:86:ee:e0:90:67:8e:92:d8:af:40:c0:52:
6b:47:81:4f:d6:3b:ad:f8:6a:97:ef:7c:98:90:46:
7c:7e:87:0a:4a:45:8f:b1:42:ab:77:d9:1a:3f:88:
e2:e9:c3:eb:9e:85:fd:52:e5:1f:03:7e:27:fd:f1:
d8:9f:c3:7c:bc:e6:9e:9d:83:b1:96:3a:c0:02:e5:
5f:10:a4:5c:e8:b9:86:38:68:77:55:78:1a:71:af:
a4:73:84:ad:23:a2:3e:e4:e1:4a:18:21:5f:0d:e0:
51:71:c6:e3:13:5e:c2:5c:82:d9:f3:3b:4b:db:19:
70:3e:a3:21:58:43:fb:c7:12:70:5e:23:d7:44:09:
29:3d:94:5f:c1:47:ac:f8:ae:cc:0c:94:41:c4:aa:
52:7e:5b:5e:99:0a:d1:2a:63:e6:a6:d1:66:59:d1:
5c:b1:78:7c:bf:d1:c3:92:3b:8d:ca:a8:e2:b6:cb:
15:66:56:63:ea:9d:aa:34:15:cb:a9:a0:67:66:d4:
4f:cf:66:66:a3:f2:1f:e9:92:47:3e:c0:84:21:69:
c2:e2:a4:68:c7:4d:ef:bf:d6:8c:cd:c9:74:3a:88:
f7:2c:80:d4:c3:25:ac:2c:8b:c1:0c:7e:6e:95:29:
50:34:fe:bc:58:2d:0c:62:a1:f5:4f:eb:24:91:f8:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:50:A2:A1:B6:3B:12:31:BC:53:01:6C:64:9C:A6:7C:28:76:59:82
X509v3 Authority Key Identifier:
keyid:6A:F2:AF:2F:E2:A3:EF:E5:4A:14:FA:09:26:20:30:AC:D0:71:1D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKvL-Kj7-VKFPoJJiAwrNBxHXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/q1CiobY7EjG8UwFsZJymfCh2WYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/avKvL-Kj7-VKFPoJJiAwrNBxHXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:37:25:43:54:ea:8c:e2:c9:31:29:71:2d:b0:fe:14:ba:29:
df:b5:4d:da:0f:a3:97:18:6d:40:dd:d5:9c:f4:cc:3b:27:fa:
48:75:61:de:0c:b3:01:d5:0d:c8:5d:c7:6f:9b:37:d6:be:7e:
af:6c:b5:af:10:cf:51:b8:02:1f:7d:15:32:54:bb:d2:15:1b:
ee:19:77:b1:6f:9a:d1:f8:b7:2b:f0:1d:dd:c9:fa:0b:7c:e8:
63:b7:c0:bc:ef:6f:fc:36:23:1f:6c:44:c3:ad:97:a5:c5:f9:
07:b2:1c:30:d0:67:7f:46:2f:54:49:4a:f8:51:57:a8:39:0d:
d8:21:e0:0d:80:b6:9a:8b:ab:b0:ad:85:b4:c2:a3:3f:4a:84:
3b:0d:e6:82:5b:82:5e:1c:30:c6:92:03:69:d1:6b:d8:80:9b:
7b:45:05:89:16:b7:67:eb:19:01:3a:a6:0d:ba:5a:a8:6d:b2:
3d:15:b0:eb:a6:71:36:90:9c:71:49:99:f2:c5:16:89:1d:7b:
43:05:34:d8:13:58:5b:01:f8:1e:5a:32:77:15:e6:f7:23:68:
78:0f:b4:84:55:35:f6:b1:6b:1f:7c:44:68:aa:d8:53:a6:3c:
5b:99:ab:d0:de:34:51:f9:b1:5d:93:dd:be:e0:42:30:f0:64:
13:dd:7c:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHVSgtbWau92A1v//wd78GgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjJhZjJmZTJhM2VmZTU0YTE0ZmEwOTI2MjAzMGFjZDA3
MTFkNzgwHhcNMjIwNzA2MjA1MzI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjUwYTJhMWI2M2IxMjMxYmM1MzAxNmM2NDljYTY3YzI4NzY1OTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fmG7uCQZ46S2K9AwFJrR4FP1jut
+GqX73yYkEZ8focKSkWPsUKrd9kaP4ji6cPrnoX9UuUfA34n/fHYn8N8vOaenYOx
ljrAAuVfEKRc6LmGOGh3VXgaca+kc4StI6I+5OFKGCFfDeBRccbjE17CXILZ8ztL
2xlwPqMhWEP7xxJwXiPXRAkpPZRfwUes+K7MDJRBxKpSfltemQrRKmPmptFmWdFc
sXh8v9HDkjuNyqjitssVZlZj6p2qNBXLqaBnZtRPz2Zmo/If6ZJHPsCEIWnC4qRo
x03vv9aMzcl0Ooj3LIDUwyWsLIvBDH5ulSlQNP68WC0MYqH1T+skkfgSMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKtQoqG2OxIxvFMBbGScpnwodlmCMB8GA1UdIwQY
MBaAFGryry/io+/lShT6CSYgMKzQcR14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZLdkwtS2o3LVZLRlBvSkppQXdyTkJ4SFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hMWM1NWItYWM5Ni00OTYzLTg5YWQt
N2NhMTFiN2EwYTZlLzEvcTFDaW9iWTdFakc4VXdGc1pKeW1mQ2gyV1lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hMWM1NWItYWM5Ni00OTYzLTg5YWQtN2NhMTFiN2EwYTZl
LzEvYXZLdkwtS2o3LVZLRlBvSkppQXdyTkJ4SFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPPkMA0G
CSqGSIb3DQEBCwUAA4IBAQC6NyVDVOqM4skxKXEtsP4UuinftU3aD6OXGG1A3dWc
9Mw7J/pIdWHeDLMB1Q3IXcdvmzfWvn6vbLWvEM9RuAIffRUyVLvSFRvuGXexb5rR
+Lcr8B3dyfoLfOhjt8C872/8NiMfbETDrZelxfkHshww0Gd/Ri9USUr4UVeoOQ3Y
IeANgLaai6uwrYW0wqM/SoQ7DeaCW4JeHDDGkgNp0WvYgJt7RQWJFrdn6xkBOqYN
ulqobbI9FbDrpnE2kJxxSZnyxRaJHXtDBTTYE1hbAfgeWjJ3Feb3I2h4D7SEVTX2
sWsffERoqthTpjxbmavQ3jRR+bFdk92+4EIw8GQT3Xxv
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net