Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/BpYiIu49i49JGXQLV6irCty00qU.roa
File: BpYiIu49i49JGXQLV6irCty00qU.roa (raw, json)
Hash identifier: HtQZGTpRRh3rm1hpFR1++eQ+Lo/pUl2bbGCPUjFitFM=
Subject key identifier: 06:96:22:22:EE:3D:8B:8F:49:19:74:0B:57:A8:AB:0A:DC:B4:D2:A5
Certificate issuer: /CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Certificate serial: 07A6ABDD
Authority key identifier: 68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/BpYiIu49i49JGXQLV6irCty00qU.roa
Signing time: Wed 22 Jun 2022 00:03:44 +0000
ROA not before: Wed 22 Jun 2022 00:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197706
IP address blocks: 81.21.232.0/24 maxlen: 24
91.217.73.0/24 maxlen: 24
81.21.235.0/24 maxlen: 24
91.217.72.0/24 maxlen: 24
91.217.7.0/24 maxlen: 24
91.217.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128363485 (0x7a6abdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Validity
Not Before: Jun 22 00:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06962222ee3d8b8f4919740b57a8ab0adcb4d2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:0d:3c:16:65:73:d8:06:ab:cc:7e:a4:7a:
86:75:3c:ab:8f:6c:82:65:aa:c5:b7:25:91:d5:2e:
9c:fb:3d:db:77:6a:84:3a:0f:57:36:ce:d2:81:bc:
e6:9f:d9:12:17:73:16:cf:b2:ad:3f:8f:66:e6:2d:
95:b5:72:a0:98:69:2d:dc:67:9c:c1:e6:6d:67:8b:
9d:a0:6e:51:3e:12:54:1d:32:04:42:a9:5a:2a:1f:
27:ee:e2:d2:92:00:9e:9b:c2:cb:12:4e:a4:b2:2b:
c9:99:19:49:cc:55:7b:0f:2c:b3:8e:e1:53:21:64:
76:bc:1d:1f:f6:0d:1b:e1:24:e8:da:47:86:97:ba:
fc:78:13:24:21:72:bd:17:f1:a6:92:63:4b:c6:e9:
55:73:87:80:21:db:5f:4f:e4:5a:18:9e:9a:e1:a5:
b4:f2:a9:90:f8:00:16:37:1d:e4:16:3e:95:65:f9:
c8:ba:04:b2:0b:5d:8d:30:df:18:cb:a4:ff:8f:1b:
40:bd:4b:4b:38:99:ab:2d:d3:b4:db:ab:46:9f:ec:
81:af:35:66:55:dc:42:19:04:b8:ab:79:38:87:df:
ff:bf:95:56:fd:71:93:f7:dc:9c:d7:3b:f0:fe:f6:
00:ae:80:56:5b:b3:c0:02:01:f4:d4:d0:34:e2:0f:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:96:22:22:EE:3D:8B:8F:49:19:74:0B:57:A8:AB:0A:DC:B4:D2:A5
X509v3 Authority Key Identifier:
keyid:68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/BpYiIu49i49JGXQLV6irCty00qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/aDlfuPRSS4pvlFu_qTi49haUBS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.232.0/24
81.21.235.0/24
91.217.6.0/23
91.217.72.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:36:e3:40:3a:f6:55:0e:f4:02:4b:b2:6c:60:29:bd:65:12:
b5:df:11:54:11:a0:b3:26:a2:f3:0d:5b:3b:98:a1:56:11:af:
24:2b:85:79:4e:ec:03:ce:21:dc:d0:0b:6a:c5:28:08:ba:61:
00:7c:9b:3e:4d:f9:a3:e3:15:15:b3:87:4c:89:a8:25:46:27:
f8:fb:ae:ff:7a:0f:f1:50:05:8f:40:a1:69:a9:3c:f7:14:e7:
27:9d:5d:ad:e9:c2:32:a0:20:58:b4:ee:15:3d:8f:16:9c:db:
15:95:a8:e3:7a:4d:d3:1f:d0:4d:d1:61:37:68:b5:9a:ca:2b:
fd:d0:d4:8f:e0:ff:9b:6b:27:38:2d:5d:83:c1:5d:ea:3f:c1:
15:e8:14:08:5b:53:eb:5f:11:4b:b1:22:89:fb:b6:d4:f5:4d:
a9:96:ee:2a:dd:c9:58:25:a4:dc:97:16:a8:ea:f7:d3:f7:91:
26:90:0d:bc:86:36:61:bd:49:07:a8:7b:7e:ca:4a:55:a0:87:
43:00:a9:74:49:f0:c7:46:ff:ed:9f:ea:c3:c3:92:61:60:0d:
d1:60:c9:5f:c3:3d:95:19:8a:31:4c:17:03:5e:46:86:6c:34:
e9:7a:b8:ae:f2:09:dc:79:2c:29:14:81:83:24:12:cd:b6:b0:
31:56:f7:b0
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEB6ar3TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODM5NWZiOGY0NTI0YjhhNmY5NDViYmZhOTM4YjhmNjE2OTQwNTJmMB4XDTIyMDYy
MjAwMDM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDY5NjIyMjJlZTNk
OGI4ZjQ5MTk3NDBiNTdhOGFiMGFkY2I0ZDJhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIveDTwWZXPYBqvMfqR6hnU8q49sgmWqxbclkdUunPs923dq
hDoPVzbO0oG85p/ZEhdzFs+yrT+PZuYtlbVyoJhpLdxnnMHmbWeLnaBuUT4SVB0y
BEKpWiofJ+7i0pIAnpvCyxJOpLIryZkZScxVew8ss47hUyFkdrwdH/YNG+Ek6NpH
hpe6/HgTJCFyvRfxppJjS8bpVXOHgCHbX0/kWhiemuGltPKpkPgAFjcd5BY+lWX5
yLoEsgtdjTDfGMuk/48bQL1LSziZqy3TtNurRp/sga81ZlXcQhkEuKt5OIff/7+V
Vv1xk/fcnNc78P72AK6AVluzwAIB9NTQNOIPUSkCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQGliIi7j2Lj0kZdAtXqKsK3LTSpTAfBgNVHSMEGDAWgBRoOV+49FJLim+U
W7+pOLj2FpQFLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FEbGZ1UFJTUzRwdmxGdV9xVGk0OWhhVUJTOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvMWEzZDVjLWU0OWEtNGQ0ZC1hNzBkLWI2ZDQyN2EzYjEwNi8x
L0JwWWlJdTQ5aTQ5SkdYUUxWNmlyQ3R5MDBxVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
MWEzZDVjLWU0OWEtNGQ0ZC1hNzBkLWI2ZDQyN2EzYjEwNi8xL2FEbGZ1UFJTUzRw
dmxGdV9xVGk0OWhhVUJTOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFEV6AMEAFEV6wMEAVvZBgMEAVvZ
SDANBgkqhkiG9w0BAQsFAAOCAQEAHDbjQDr2VQ70AkuybGApvWUStd8RVBGgsyai
8w1bO5ihVhGvJCuFeU7sA84h3NALasUoCLphAHybPk35o+MVFbOHTImoJUYn+Puu
/3oP8VAFj0Chaak89xTnJ51drenCMqAgWLTuFT2PFpzbFZWo43pN0x/QTdFhN2i1
msor/dDUj+D/m2snOC1dg8Fd6j/BFegUCFtT618RS7Eiifu21PVNqZbuKt3JWCWk
3JcWqOr30/eRJpANvIY2Yb1JB6h7fspKVaCHQwCpdEnwx0b/7Z/qw8OSYWAN0WDJ
X8M9lRmKMUwXA15Ghmw06Xq4rvIJ3HksKRSBgyQSzbawMVb3sA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net