Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/WocdVRGEeAZvfEJg1U_rPitmTN8.roa
File: WocdVRGEeAZvfEJg1U_rPitmTN8.roa (raw, json)
Hash identifier: T4BRZu1zOLNNfs43/dvxRu0Qf+AjEoOdW+T5XbTy0RY=
Subject key identifier: 5A:87:1D:55:11:84:78:06:6F:7C:42:60:D5:4F:EB:3E:2B:66:4C:DF
Certificate issuer: /CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
Certificate serial: 018CC56E099C39CB05711921DBA97463BE50
Authority key identifier: 0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/WocdVRGEeAZvfEJg1U_rPitmTN8.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50131
IP address blocks: 193.105.95.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:09:9c:39:cb:05:71:19:21:db:a9:74:63:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a871d55118478066f7c4260d54feb3e2b664cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4f:1c:68:da:72:f5:a7:2c:94:fd:a9:bc:c4:
67:f1:4a:43:e1:3b:f5:f7:80:22:6f:6a:ef:d8:43:
65:ed:5b:08:e9:f2:d7:ba:f4:99:59:e9:79:d3:4a:
be:56:8f:fa:c0:53:cb:11:e0:0c:4b:9f:21:1e:88:
a8:53:74:df:26:b0:7e:f6:a4:8b:de:dd:10:45:d9:
8e:be:01:95:43:b2:c1:24:cf:ef:06:76:5e:65:0e:
6e:49:ca:d7:78:b0:ed:8d:11:ba:ad:ab:63:1b:14:
aa:68:ec:72:42:c1:59:15:a5:a9:96:40:ee:f8:08:
12:8e:d2:1b:2d:b2:d2:5c:1c:43:05:86:bf:e2:ad:
0d:3e:9d:12:40:53:1e:26:0c:b1:fd:02:4c:30:27:
0a:61:38:52:a3:c9:8a:d3:ea:30:69:f0:7e:d3:5c:
11:98:a1:ad:b4:b5:4a:81:6a:78:68:ff:25:1b:05:
41:70:57:33:29:fa:c1:90:c2:bb:9f:2a:0a:74:af:
fc:af:33:85:bf:05:e5:9b:d1:85:64:6c:62:85:c2:
06:fd:2f:17:46:43:92:1e:90:ee:f9:cc:b5:24:49:
05:a7:36:85:a9:16:38:41:b6:3b:9f:4a:f5:68:9c:
ec:df:39:92:9f:db:29:98:2a:09:9f:77:e7:21:23:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:1D:55:11:84:78:06:6F:7C:42:60:D5:4F:EB:3E:2B:66:4C:DF
X509v3 Authority Key Identifier:
keyid:0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/WocdVRGEeAZvfEJg1U_rPitmTN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a6:bc:43:bf:98:58:4f:c7:1f:ae:c3:6f:ae:cb:73:e9:44:
cf:0f:79:d3:8e:95:0c:97:93:d6:63:36:0f:17:6a:1a:ce:06:
22:07:52:5f:a3:f3:65:37:a9:6b:1b:6e:74:6d:55:bb:7c:b9:
df:c3:fc:90:c9:55:ec:a6:3e:ee:d7:48:ef:87:df:5a:f2:55:
40:98:2b:82:bd:13:76:fe:ff:e9:e5:c4:0a:2a:e6:df:9e:c7:
cc:85:1d:ad:cd:ac:95:c7:b5:4d:8b:cb:76:a7:98:6b:24:3e:
c5:cd:de:38:9e:10:d9:2f:1f:25:a8:fb:50:9e:f2:8f:5f:f4:
44:a8:d8:1c:2f:63:30:4a:06:a2:e0:b0:4d:62:a5:b7:ef:bd:
bc:4e:09:22:97:7c:a8:9b:4b:0f:79:7c:42:1d:3e:d6:1a:12:
d3:8b:8f:78:8c:43:8d:e1:8f:ab:7f:4f:53:df:00:5d:9b:5a:
e8:5c:1e:15:4c:bf:d8:eb:60:76:70:40:a9:5f:d8:c5:0f:86:
85:ff:0a:df:f6:e7:c5:52:04:61:01:42:d8:40:18:9c:be:bf:
5d:5a:06:72:1d:4b:14:e4:92:8b:6d:dc:ec:9f:ec:45:df:2c:
0a:70:13:02:16:20:98:0f:86:8a:a3:fd:97:82:d7:90:67:84:
57:c3:cb:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbgmcOcsFcRkh26l0Y75QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMTZiYjUyN2E1Mjg1OWUwZjY5Yjg4ZDJmZWRlZGUxYmRl
OWZmMmQwHhcNMjQwMTAxMTQyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTg3MWQ1NTExODQ3ODA2NmY3YzQyNjBkNTRmZWIzZTJiNjY0Y2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk8caNpy9acslP2pvMRn8UpD4Tv1
94Aib2rv2ENl7VsI6fLXuvSZWel500q+Vo/6wFPLEeAMS58hHoioU3TfJrB+9qSL
3t0QRdmOvgGVQ7LBJM/vBnZeZQ5uScrXeLDtjRG6ratjGxSqaOxyQsFZFaWplkDu
+AgSjtIbLbLSXBxDBYa/4q0NPp0SQFMeJgyx/QJMMCcKYThSo8mK0+owafB+01wR
mKGttLVKgWp4aP8lGwVBcFczKfrBkMK7nyoKdK/8rzOFvwXlm9GFZGxihcIG/S8X
RkOSHpDu+cy1JEkFpzaFqRY4QbY7n0r1aJzs3zmSn9spmCoJn3fnISOkzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqHHVURhHgGb3xCYNVP6z4rZkzfMB8GA1UdIwQY
MBaAFAwWu1J6UoWeD2m4jS/t7eG96f8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREJhN1VucFNoWjRQYWJpTkwtM3Q0YjNwX3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYjQzM2UtNGM4OC00M2YyLThiZjIt
MjQ2ODgzNmYxNTRiLzEvV29jZFZSR0VlQVp2ZkVKZzFVX3JQaXRtVE44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYjQzM2UtNGM4OC00M2YyLThiZjItMjQ2ODgzNmYxNTRi
LzEvREJhN1VucFNoWjRQYWJpTkwtM3Q0YjNwX3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWlfMA0G
CSqGSIb3DQEBCwUAA4IBAQBrprxDv5hYT8cfrsNvrstz6UTPD3nTjpUMl5PWYzYP
F2oazgYiB1Jfo/NlN6lrG250bVW7fLnfw/yQyVXspj7u10jvh99a8lVAmCuCvRN2
/v/p5cQKKubfnsfMhR2tzayVx7VNi8t2p5hrJD7Fzd44nhDZLx8lqPtQnvKPX/RE
qNgcL2MwSgai4LBNYqW37728Tgkil3yom0sPeXxCHT7WGhLTi494jEON4Y+rf09T
3wBdm1roXB4VTL/Y62B2cECpX9jFD4aF/wrf9ufFUgRhAULYQBicvr9dWgZyHUsU
5JKLbdzsn+xF3ywKcBMCFiCYD4aKo/2XgteQZ4RXw8tL
-----END CERTIFICATE-----
Generated at Thu Mar 21 18:46:37 2024 by rpki-client on console.sobornost.net