Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/WdkMGYeIVRl_2gFIzAKLGzTHHQI.roa
File: WdkMGYeIVRl_2gFIzAKLGzTHHQI.roa (raw, json)
Hash identifier: qDpE0sVso9p74buZmruqwUT7kJOkJ3xtfkCRnOAa6+I=
Subject key identifier: 59:D9:0C:19:87:88:55:19:7F:DA:01:48:CC:02:8B:1B:34:C7:1D:02
Certificate issuer: /CN=1d8258e93b7e4a2a21821aa99fd9cff6f324b5fc
Certificate serial: 04A810DC
Authority key identifier: 1D:82:58:E9:3B:7E:4A:2A:21:82:1A:A9:9F:D9:CF:F6:F3:24:B5:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYJY6Tt-Siohghqpn9nP9vMktfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/WdkMGYeIVRl_2gFIzAKLGzTHHQI.roa
Signing time: Sat 01 Jan 2022 14:04:00 +0000
ROA not before: Sat 01 Jan 2022 14:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199136
IP address blocks: 78.31.161.0/24 maxlen: 24
78.31.160.0/23 maxlen: 23
78.31.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78123228 (0x4a810dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8258e93b7e4a2a21821aa99fd9cff6f324b5fc
Validity
Not Before: Jan 1 14:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59d90c19878855197fda0148cc028b1b34c71d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:5c:92:df:e7:10:bd:15:e3:95:58:53:d6:
c1:49:08:52:99:5c:8f:7a:a7:48:ee:95:11:e5:c1:
16:4f:1a:a2:6b:1d:fe:df:2d:19:24:6e:c0:35:78:
88:d0:ca:cc:bc:24:16:3e:cc:1e:9a:da:10:c0:ce:
01:70:88:40:ee:da:be:33:89:8f:ff:da:0a:dc:9b:
e3:15:e6:68:0c:2c:75:d7:48:eb:4d:87:fd:99:b5:
a3:49:a8:a7:72:d9:08:07:a0:b6:12:6a:2d:7d:f1:
72:a5:8c:fd:67:21:fd:70:e5:59:6a:eb:df:cf:2d:
30:43:de:d9:c8:e7:68:8b:0f:77:32:c5:be:5a:1f:
6d:72:d1:42:19:b8:fb:f7:4c:2f:73:d8:1a:94:a4:
30:3e:d2:a5:e5:de:c1:75:e0:3c:af:ab:0e:7c:38:
03:50:99:3e:e8:2c:0d:9a:5d:e0:b6:3d:d9:ba:bd:
f4:a5:21:7f:56:5b:42:13:7c:ec:c9:26:de:8f:e5:
e4:f3:28:8d:ff:ad:89:29:1f:f3:d1:83:80:34:d9:
13:57:15:dd:09:71:11:6a:42:a2:53:64:f7:66:b0:
f8:8f:b8:35:c6:22:2b:b7:cf:d0:32:da:ea:f1:c6:
ef:d4:62:1e:14:b2:f2:20:2d:93:b8:10:23:44:bc:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D9:0C:19:87:88:55:19:7F:DA:01:48:CC:02:8B:1B:34:C7:1D:02
X509v3 Authority Key Identifier:
keyid:1D:82:58:E9:3B:7E:4A:2A:21:82:1A:A9:9F:D9:CF:F6:F3:24:B5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYJY6Tt-Siohghqpn9nP9vMktfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/WdkMGYeIVRl_2gFIzAKLGzTHHQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/HYJY6Tt-Siohghqpn9nP9vMktfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.160.0/23
Signature Algorithm: sha256WithRSAEncryption
62:3c:bd:66:0b:c0:c9:f4:09:48:96:79:a7:79:5c:46:64:9e:
0f:7d:f7:85:63:e4:c1:46:7a:15:98:0c:72:1d:d4:c8:13:6f:
be:76:7c:6c:f1:65:40:39:38:b3:f2:5e:9f:7b:dc:d1:20:ee:
2a:8b:82:24:da:5e:25:c4:60:9d:91:1d:cf:74:bb:2f:da:9d:
53:d3:b9:ae:34:04:8a:d1:cb:de:1c:e0:ca:b9:25:20:ae:6d:
9c:dc:fc:c4:13:ea:96:83:30:b0:2d:5d:c9:21:67:e8:45:79:
57:3f:d2:1e:08:a3:ea:13:8e:94:26:00:ab:08:96:82:9c:33:
89:ec:df:93:03:e9:d3:60:d5:ae:f9:85:bd:1a:c5:30:90:8a:
50:d5:5b:86:1f:61:46:ed:4a:9a:57:5e:c9:81:45:69:2f:c7:
29:75:2a:11:5f:30:3a:65:1c:92:d6:a3:29:28:3e:9a:a4:2c:
db:9e:e0:d3:26:55:6e:2f:c7:41:1d:d7:9f:33:ec:09:1d:b9:
21:4d:e6:a4:a8:c7:87:2e:f4:e7:fb:67:9a:7a:db:ed:0b:14:
46:9f:0c:62:e8:30:cd:8a:76:82:b9:da:fa:02:ee:96:9d:3c:
49:dc:f1:91:27:cf:7b:7e:5e:58:8e:a4:65:ab:87:69:db:e4:
94:a1:0c:30
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBKgQ3DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZDgyNThlOTNiN2U0YTJhMjE4MjFhYTk5ZmQ5Y2ZmNmYzMjRiNWZjMB4XDTIyMDEw
MTE0MDQwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTlkOTBjMTk4Nzg4
NTUxOTdmZGEwMTQ4Y2MwMjhiMWIzNGM3MWQwMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALMdXJLf5xC9FeOVWFPWwUkIUplcj3qnSO6VEeXBFk8aomsd
/t8tGSRuwDV4iNDKzLwkFj7MHpraEMDOAXCIQO7avjOJj//aCtyb4xXmaAwsdddI
602H/Zm1o0mop3LZCAegthJqLX3xcqWM/Wch/XDlWWrr388tMEPe2cjnaIsPdzLF
vlofbXLRQhm4+/dML3PYGpSkMD7SpeXewXXgPK+rDnw4A1CZPugsDZpd4LY92bq9
9KUhf1ZbQhN87Mkm3o/l5PMojf+tiSkf89GDgDTZE1cV3QlxEWpColNk92aw+I+4
NcYiK7fP0DLa6vHG79RiHhSy8iAtk7gQI0S8fHkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRZ2QwZh4hVGX/aAUjMAosbNMcdAjAfBgNVHSMEGDAWgBQdgljpO35KKiGC
Gqmf2c/28yS1/DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hZSlk2VHQtU2lvaGdocXBuOW5QOXZNa3Rmdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvYTFmZGM4LWE4YjQtNDI1NC04ODNiLTcyMjcyOTVjNjlkNi8x
L1dka01HWWVJVlJsXzJnRkl6QUtMR3pUSEhRSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
YTFmZGM4LWE4YjQtNDI1NC04ODNiLTcyMjcyOTVjNjlkNi8xL0hZSlk2VHQtU2lv
aGdocXBuOW5QOXZNa3Rmdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAU4foDANBgkqhkiG9w0BAQsFAAOC
AQEAYjy9ZgvAyfQJSJZ5p3lcRmSeD333hWPkwUZ6FZgMch3UyBNvvnZ8bPFlQDk4
s/Jen3vc0SDuKouCJNpeJcRgnZEdz3S7L9qdU9O5rjQEitHL3hzgyrklIK5tnNz8
xBPqloMwsC1dySFn6EV5Vz/SHgij6hOOlCYAqwiWgpwziezfkwPp02DVrvmFvRrF
MJCKUNVbhh9hRu1KmldeyYFFaS/HKXUqEV8wOmUcktajKSg+mqQs257g0yZVbi/H
QR3XnzPsCR25IU3mpKjHhy705/tnmnrb7QsURp8MYugwzYp2grna+gLulp08Sdzx
kSfPe35eWI6kZauHadvklKEMMA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:18 2023 by rpki-client on console.sobornost.net