Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/l9F4U0RSXCjh6NQCdqReMKBS2ho.roa
File: l9F4U0RSXCjh6NQCdqReMKBS2ho.roa (raw, json)
Hash identifier: 3erK6V1OlfVneoKZoCbtznshKr0hJoCytG22EE9ZYIc=
Subject key identifier: 97:D1:78:53:44:52:5C:28:E1:E8:D4:02:76:A4:5E:30:A0:52:DA:1A
Certificate issuer: /CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Certificate serial: 0184C7FDF6A1F926310CC92D7DD637234778
Authority key identifier: 0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/l9F4U0RSXCjh6NQCdqReMKBS2ho.roa
Signing time: Wed 30 Nov 2022 10:03:40 +0000
ROA not before: Wed 30 Nov 2022 10:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24851
IP address blocks: 81.27.96.0/24 maxlen: 24
81.27.96.0/20 maxlen: 20
146.247.48.0/20 maxlen: 20
146.247.50.0/24 maxlen: 24
146.247.51.0/24 maxlen: 24
146.247.48.0/23 maxlen: 23
146.247.62.0/24 maxlen: 24
146.247.59.0/24 maxlen: 24
2a02:2bb8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:fd:f6:a1:f9:26:31:0c:c9:2d:7d:d6:37:23:47:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Validity
Not Before: Nov 30 10:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97d1785344525c28e1e8d40276a45e30a052da1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:11:8a:27:5d:07:c9:c9:ba:cd:ae:35:7d:
bd:bb:14:07:7e:3f:6e:ee:65:33:26:e3:72:a5:17:
a3:c7:8e:51:a5:f6:83:a1:73:c4:d8:9b:b0:72:fb:
de:c5:57:7c:9d:f8:7f:32:72:9e:6a:c9:a8:57:06:
65:57:c2:48:1b:b2:65:52:e3:f5:a9:d2:35:db:f6:
e6:97:67:93:55:81:f2:29:d3:d8:98:be:85:81:d7:
71:03:31:97:96:e6:ca:57:87:5f:6b:de:b9:ce:31:
d5:cc:34:bd:ea:73:41:9c:b2:9e:83:45:60:96:1e:
28:fd:47:b4:39:ea:6e:88:ff:e3:f2:67:f5:e4:26:
30:21:dd:02:6a:42:83:35:d3:ef:2f:8d:35:ba:17:
8c:f7:43:ef:ac:a5:cc:d7:53:e5:69:cb:e1:2a:fe:
20:0d:02:66:2e:12:6a:d8:05:03:ad:c4:dd:ea:fd:
ec:e5:15:e8:73:b8:66:53:b6:9d:bb:98:87:5a:e8:
48:f4:bd:c1:47:63:9e:a2:5e:00:82:28:a9:df:18:
b2:6b:d9:52:0e:ab:8f:f5:39:44:23:e5:61:b8:f1:
0b:f8:87:61:b3:41:f6:ff:25:cf:ce:cf:d0:66:12:
9e:9c:b5:de:41:83:bb:1c:4f:1e:46:c9:8f:ed:18:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:78:53:44:52:5C:28:E1:E8:D4:02:76:A4:5E:30:A0:52:DA:1A
X509v3 Authority Key Identifier:
keyid:0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/l9F4U0RSXCjh6NQCdqReMKBS2ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.96.0/20
146.247.48.0/20
IPv6:
2a02:2bb8::/32
Signature Algorithm: sha256WithRSAEncryption
1b:98:c8:6c:30:6c:8c:11:49:a4:c9:a6:00:2b:d5:50:8e:e9:
df:9d:6b:bc:b1:be:05:b3:6a:41:d8:0f:f0:02:94:74:9d:0d:
b0:6a:bd:7e:56:ed:55:33:bc:92:25:a2:b1:75:0c:17:cc:25:
0a:8f:01:40:22:04:1d:17:5f:02:cb:77:73:05:f6:f5:63:fe:
93:be:0a:60:09:bf:dc:79:88:1c:b4:e0:5a:c5:7a:a0:c7:27:
e2:a2:eb:2b:2a:72:27:62:e8:45:9b:44:eb:c7:cf:74:f6:4d:
13:ee:87:73:80:16:6b:f0:c6:23:02:51:bb:79:65:47:1f:6b:
07:24:41:9a:6a:fd:40:fd:84:df:b3:6d:ae:28:07:04:f8:04:
1a:bb:c3:b2:18:4b:f6:2a:13:5b:b2:5d:a0:95:bd:98:c1:b1:
03:e7:c1:cf:a0:55:65:02:22:c8:d2:ab:28:89:e3:bb:ca:ef:
c1:11:11:e4:67:48:44:25:a4:b4:05:21:c8:75:35:49:9b:98:
5b:94:c5:b6:c8:54:73:12:ab:57:32:db:8b:f6:58:50:9b:d0:
bf:d2:19:5b:7d:72:0a:71:b7:28:c7:89:ba:8b:5a:92:6c:77:
61:f0:2c:56:39:cf:31:a6:fb:81:03:6a:da:70:b9:ce:bf:73:
27:b3:96:5b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYTH/fah+SYxDMktfdY3I0d4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDU1ZDI5ODM5ZDM0ZjJhNmZhMGY4MThjYzczZmMzMGUy
NDUyMjIwHhcNMjIxMTMwMTAwMzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2QxNzg1MzQ0NTI1YzI4ZTFlOGQ0MDI3NmE0NWUzMGEwNTJkYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF4RiiddB8nJus2uNX29uxQHfj9u
7mUzJuNypRejx45RpfaDoXPE2JuwcvvexVd8nfh/MnKeasmoVwZlV8JIG7JlUuP1
qdI12/bml2eTVYHyKdPYmL6FgddxAzGXlubKV4dfa965zjHVzDS96nNBnLKeg0Vg
lh4o/Ue0OepuiP/j8mf15CYwId0CakKDNdPvL401uheM90PvrKXM11PlacvhKv4g
DQJmLhJq2AUDrcTd6v3s5RXoc7hmU7adu5iHWuhI9L3BR2Oeol4Agiip3xiya9lS
DquP9TlEI+VhuPEL+Idhs0H2/yXPzs/QZhKenLXeQYO7HE8eRsmP7RiZSQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJfReFNEUlwo4ejUAnakXjCgUtoaMB8GA1UdIwQY
MBaAFApFXSmDnTTypvoPgYzHP8MOJFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDIt
Njc5YWZmN2FjYjJjLzEvbDlGNFUwUlNYQ2poNk5RQ2RxUmVNS0JTMmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDItNjc5YWZmN2FjYjJj
LzEvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEURtgAwQE
kvcwMA0EAgACMAcDBQAqAiu4MA0GCSqGSIb3DQEBCwUAA4IBAQAbmMhsMGyMEUmk
yaYAK9VQjunfnWu8sb4Fs2pB2A/wApR0nQ2war1+Vu1VM7ySJaKxdQwXzCUKjwFA
IgQdF18Cy3dzBfb1Y/6TvgpgCb/ceYgctOBaxXqgxyfiousrKnInYuhFm0Trx890
9k0T7odzgBZr8MYjAlG7eWVHH2sHJEGaav1A/YTfs22uKAcE+AQau8OyGEv2KhNb
sl2glb2YwbED58HPoFVlAiLI0qsoieO7yu/BERHkZ0hEJaS0BSHIdTVJm5hblMW2
yFRzEqtXMtuL9lhQm9C/0hlbfXIKcbcox4m6i1qSbHdh8CxWOc8xpvuBA2racLnO
v3Mns5Zb
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:37 2023 by rpki-client on console.sobornost.net