Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/YOlJFRLz4dBAekFjK6fnoM_8zRs.roa
File: YOlJFRLz4dBAekFjK6fnoM_8zRs.roa (raw, json)
Hash identifier: kSBOvHJ24/0NTeDdJZoIyAsl6W/z0ttsrMIotVnzoa8=
Subject key identifier: 60:E9:49:15:12:F3:E1:D0:40:7A:41:63:2B:A7:E7:A0:CF:FC:CD:1B
Certificate issuer: /CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Certificate serial: 018B1913473D7B32B2CBC65BE4DA19B53FF9
Authority key identifier: 68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/YOlJFRLz4dBAekFjK6fnoM_8zRs.roa
Signing time: Tue 10 Oct 2023 10:12:55 +0000
ROA not before: Tue 10 Oct 2023 10:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 91.217.7.0/24 maxlen: 24
91.217.6.0/24 maxlen: 24
2a09:6ec0::/29 maxlen: 29
2a0e:3f07::/48 maxlen: 48
2a0d:27c0::/29 maxlen: 29
2a0e:3f00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:13:47:3d:7b:32:b2:cb:c6:5b:e4:da:19:b5:3f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Validity
Not Before: Oct 10 10:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60e9491512f3e1d0407a41632ba7e7a0cffccd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:22:f1:e4:1a:95:35:7c:08:9f:ec:e4:59:
f2:f4:9d:9e:fe:95:44:1b:26:fc:2c:47:f5:c8:4c:
a3:7d:ec:cc:e6:56:4c:8b:90:0b:90:13:d6:6c:a0:
6d:03:1c:07:4f:96:67:38:fe:ad:04:5a:9c:53:6e:
35:26:b6:cb:14:0b:c2:0f:74:f2:5f:2b:67:03:6e:
68:04:51:1d:19:3d:48:61:d2:a0:d5:47:e0:bb:45:
58:21:db:f2:33:b5:2c:ed:1e:05:8e:f0:7d:98:9f:
01:37:0b:a4:0e:08:82:50:22:3b:a1:f4:03:31:6f:
5e:43:f7:21:2d:1d:1e:61:35:15:6b:63:07:fd:b2:
cf:09:6f:20:fe:4a:19:4d:33:ef:27:9a:f0:61:3c:
55:07:11:4b:ca:08:ba:29:fb:97:c9:c0:eb:db:cf:
cb:34:f6:88:14:1b:04:40:0e:7a:89:89:60:47:89:
12:2e:97:ba:1c:6f:0f:17:06:52:e6:f8:2a:72:7b:
47:57:54:ac:ff:3f:da:c7:8f:96:77:f2:62:32:59:
d8:6e:6c:35:40:38:2b:31:5a:f7:72:7f:b2:1e:1f:
3a:d0:ae:ac:f9:03:97:5d:4c:3d:8c:18:f7:f3:09:
e9:b6:fe:f0:aa:df:fd:97:59:80:94:94:e2:71:f6:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E9:49:15:12:F3:E1:D0:40:7A:41:63:2B:A7:E7:A0:CF:FC:CD:1B
X509v3 Authority Key Identifier:
keyid:68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/YOlJFRLz4dBAekFjK6fnoM_8zRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/aDlfuPRSS4pvlFu_qTi49haUBS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.6.0/23
IPv6:
2a09:6ec0::/29
2a0d:27c0::/29
2a0e:3f00::/29
Signature Algorithm: sha256WithRSAEncryption
0b:8b:15:71:fd:87:58:fd:c2:0b:a7:8a:36:46:4c:c8:79:09:
77:68:d7:68:d4:e8:f8:42:53:3e:34:a9:e6:b3:74:2d:1e:42:
41:dc:6c:e4:d8:3f:a4:15:8c:5e:81:e9:56:b4:19:6f:e1:9a:
07:47:13:a8:30:09:f5:cf:4c:f2:23:08:ed:69:ad:3e:ba:ec:
13:f4:55:34:57:27:92:87:79:ea:c3:9f:79:7a:55:9a:48:a9:
25:0e:c8:85:9a:8e:3c:7a:9d:a8:d6:88:3a:3b:c7:db:5f:69:
2f:e0:15:96:57:cf:13:9a:3c:8c:58:4b:8e:34:fc:5f:c6:f2:
8a:5e:c0:8f:f9:b7:fb:c3:f2:a3:c8:a7:d1:5c:04:1d:09:08:
1d:24:4e:98:2a:16:ba:a2:93:77:a7:f2:be:9a:7f:99:27:be:
6e:a9:48:ed:51:3a:71:35:03:8c:88:2f:fb:e7:41:06:23:ca:
7f:30:6e:ac:77:0b:69:99:38:0a:27:c8:96:0b:b8:04:52:8b:
c7:79:16:7f:e8:e9:10:85:c0:bb:3f:dc:b1:1f:e5:f3:b2:4b:
1a:0e:3e:89:cb:e2:e4:1f:6c:4b:d9:b5:28:da:29:b5:ec:3e:
69:d5:22:72:94:c2:f7:cc:c3:51:b7:c8:0c:a5:01:35:69:f5:
c4:c7:e1:6e
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYsZE0c9ezKyy8Zb5NoZtT/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Mzk1ZmI4ZjQ1MjRiOGE2Zjk0NWJiZmE5MzhiOGY2MTY5
NDA1MmYwHhcNMjMxMDEwMTAxMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGU5NDkxNTEyZjNlMWQwNDA3YTQxNjMyYmE3ZTdhMGNmZmNjZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutoi8eQalTV8CJ/s5Fny9J2e/pVE
Gyb8LEf1yEyjfezM5lZMi5ALkBPWbKBtAxwHT5ZnOP6tBFqcU241JrbLFAvCD3Ty
XytnA25oBFEdGT1IYdKg1Ufgu0VYIdvyM7Us7R4FjvB9mJ8BNwukDgiCUCI7ofQD
MW9eQ/chLR0eYTUVa2MH/bLPCW8g/koZTTPvJ5rwYTxVBxFLygi6KfuXycDr28/L
NPaIFBsEQA56iYlgR4kSLpe6HG8PFwZS5vgqcntHV1Ss/z/ax4+Wd/JiMlnYbmw1
QDgrMVr3cn+yHh860K6s+QOXXUw9jBj38wnptv7wqt/9l1mAlJTicfa58wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFGDpSRUS8+HQQHpBYyun56DP/M0bMB8GA1UdIwQY
MBaAFGg5X7j0UkuKb5Rbv6k4uPYWlAUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURsZnVQUlNTNHB2bEZ1X3FUaTQ5aGFVQlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xYTNkNWMtZTQ5YS00ZDRkLWE3MGQt
YjZkNDI3YTNiMTA2LzEvWU9sSkZSTHo0ZEJBZWtGaks2Zm5vTV84elJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xYTNkNWMtZTQ5YS00ZDRkLWE3MGQtYjZkNDI3YTNiMTA2
LzEvYURsZnVQUlNTNHB2bEZ1X3FUaTQ5aGFVQlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAMBAIAATAGAwQBW9kGMBsE
AgACMBUDBQMqCW7AAwUDKg0nwAMFAyoOPwAwDQYJKoZIhvcNAQELBQADggEBAAuL
FXH9h1j9wgunijZGTMh5CXdo12jU6PhCUz40qeazdC0eQkHcbOTYP6QVjF6B6Va0
GW/hmgdHE6gwCfXPTPIjCO1prT667BP0VTRXJ5KHeerDn3l6VZpIqSUOyIWajjx6
najWiDo7x9tfaS/gFZZXzxOaPIxYS440/F/G8opewI/5t/vD8qPIp9FcBB0JCB0k
TpgqFrqik3en8r6af5knvm6pSO1ROnE1A4yIL/vnQQYjyn8wbqx3C2mZOAonyJYL
uARSi8d5Fn/o6RCFwLs/3LEf5fOySxoOPonL4uQfbEvZtSjaKbXsPmnVInKUwvfM
w1G3yAylATVp9cTH4W4=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net