Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/0uFzt8GrjOrx9BII17G7DanFZ8w.roa
File: 0uFzt8GrjOrx9BII17G7DanFZ8w.roa (raw, json)
Hash identifier: 7Gs/TNZTanJWkWnYwkljWKBW6fR37P5ZRWjrvXlN3n8=
Subject key identifier: D2:E1:73:B7:C1:AB:8C:EA:F1:F4:12:08:D7:B1:BB:0D:A9:C5:67:CC
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 0192004D73F04578BAE840BFFB8E31520837
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/0uFzt8GrjOrx9BII17G7DanFZ8w.roa
Signing time: Tue 17 Sep 2024 14:05:28 +0000
ROA not before: Tue 17 Sep 2024 14:05:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214239
IP address blocks: 185.210.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:4d:73:f0:45:78:ba:e8:40:bf:fb:8e:31:52:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Sep 17 14:05:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2e173b7c1ab8ceaf1f41208d7b1bb0da9c567cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:21:31:e3:3b:70:d5:af:8e:f6:bb:3d:6f:
a0:16:46:ae:b1:bf:30:04:78:ac:d6:f5:18:28:e3:
64:b6:80:ec:22:47:ca:92:1a:e9:36:54:5a:a7:a0:
72:4d:cf:e2:02:9d:12:1d:68:de:69:fe:b2:18:96:
63:5d:69:04:4c:3f:4e:63:58:72:6b:b4:7f:66:2e:
80:84:e8:b9:a8:5b:3a:69:fe:88:a8:0f:50:80:f4:
7f:51:13:82:7e:19:13:06:ee:ac:a6:f9:c3:c0:f8:
c2:22:32:39:ff:36:1f:dc:38:dc:3e:b6:7d:49:95:
26:55:35:10:0f:5d:d7:63:c2:4d:da:c0:9f:b7:df:
73:c9:fe:4d:7d:47:ef:5c:44:d7:06:04:16:c6:1d:
8f:49:8a:70:b3:fa:b5:6c:07:70:1b:45:77:01:23:
32:d1:c6:26:a1:60:ab:31:6c:9a:8a:83:09:7a:73:
ad:35:ef:97:a9:ab:61:7b:05:46:95:4f:9e:62:c2:
c7:86:08:a8:4a:b6:43:5d:18:70:cd:ee:12:87:d1:
f4:a2:46:48:07:9a:58:47:64:cc:52:ab:3b:83:19:
70:5d:62:c4:8a:7d:3c:f9:1f:f4:c6:74:47:8c:5d:
15:8c:c5:cb:86:f0:dd:41:34:dc:e1:c8:7e:bf:90:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E1:73:B7:C1:AB:8C:EA:F1:F4:12:08:D7:B1:BB:0D:A9:C5:67:CC
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/0uFzt8GrjOrx9BII17G7DanFZ8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
41:70:ae:31:df:69:b6:c8:3c:bc:ff:ba:e8:fc:03:c7:d3:0a:
23:5b:90:44:04:e2:80:a3:9c:64:44:00:38:52:84:fc:0d:15:
13:1b:2a:07:2c:8f:d0:b4:e8:30:5b:e4:e8:64:52:16:e0:0c:
11:f2:36:ad:b8:49:72:e8:ac:07:1e:84:1b:72:a8:a2:a7:98:
0d:c0:8a:2e:1a:81:65:05:04:d4:b3:2a:b3:e2:7b:2e:ff:27:
f6:b6:10:ef:79:25:cc:78:eb:96:57:52:d2:87:12:a8:9b:aa:
53:04:b4:35:1d:71:e9:9f:6b:f2:e7:b0:af:2c:2c:4d:bb:a4:
63:66:d0:5e:fd:d6:4e:d0:44:1b:fd:34:7e:3e:f3:91:e8:06:
91:20:5d:28:ec:f6:76:c6:aa:8c:15:5f:bd:75:c0:f0:06:d1:
44:d1:c2:3c:e7:ec:b6:a1:ff:96:4d:96:f8:83:df:2f:73:87:
d5:fa:3b:8a:49:d4:0f:6f:c5:6d:39:f3:e0:f0:58:a7:83:74:
8b:8d:62:4c:7e:0d:f6:86:d4:46:d7:37:d8:8d:79:9d:2f:d1:
d3:97:40:43:87:09:de:84:1b:80:f5:f0:02:34:69:b0:b2:a0:
81:a9:38:32:4d:58:ae:f8:bd:ae:80:9c:3b:13:de:d1:dd:ac:
68:98:16:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIATXPwRXi66EC/+44xUgg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTdhMWZjYmYyZTc1YTJlMTAzNGNhNzRhMGU5NzI2MjNi
YmM0OWMwHhcNMjQwOTE3MTQwNTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmUxNzNiN2MxYWI4Y2VhZjFmNDEyMDhkN2IxYmIwZGE5YzU2N2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd4hMeM7cNWvjva7PW+gFkausb8w
BHis1vUYKONktoDsIkfKkhrpNlRap6ByTc/iAp0SHWjeaf6yGJZjXWkETD9OY1hy
a7R/Zi6AhOi5qFs6af6IqA9QgPR/UROCfhkTBu6spvnDwPjCIjI5/zYf3DjcPrZ9
SZUmVTUQD13XY8JN2sCft99zyf5NfUfvXETXBgQWxh2PSYpws/q1bAdwG0V3ASMy
0cYmoWCrMWyaioMJenOtNe+XqathewVGlU+eYsLHhgioSrZDXRhwze4Sh9H0okZI
B5pYR2TMUqs7gxlwXWLEin08+R/0xnRHjF0VjMXLhvDdQTTc4ch+v5BtNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNLhc7fBq4zq8fQSCNexuw2pxWfMMB8GA1UdIwQY
MBaAFAJXofy/LnWi4QNMp0oOlyYju8ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt
YzIzZjczMTM2MmNlLzEvMHVGenQ4R3JqT3J4OUJJSTE3RzdEYW5GWjh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl
LzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudI2MA0G
CSqGSIb3DQEBCwUAA4IBAQBBcK4x32m2yDy8/7ro/APH0wojW5BEBOKAo5xkRAA4
UoT8DRUTGyoHLI/QtOgwW+ToZFIW4AwR8jatuEly6KwHHoQbcqiip5gNwIouGoFl
BQTUsyqz4nsu/yf2thDveSXMeOuWV1LShxKom6pTBLQ1HXHpn2vy57CvLCxNu6Rj
ZtBe/dZO0EQb/TR+PvOR6AaRIF0o7PZ2xqqMFV+9dcDwBtFE0cI85+y2of+WTZb4
g98vc4fV+juKSdQPb8VtOfPg8Fing3SLjWJMfg32htRG1zfYjXmdL9HTl0BDhwne
hBuA9fACNGmwsqCBqTgyTViu+L2ugJw7E97R3axomBYw
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:21 2024 by rpki-client on console.sobornost.net