Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/A1bfT4dELzD46igf9AjEbR_Cz6c.roa
File: A1bfT4dELzD46igf9AjEbR_Cz6c.roa (raw, json)
Hash identifier: MvTGAcLiUbZSBfPmxQwGQfILY5SmngL5CpIZCammBx0=
Subject key identifier: 03:56:DF:4F:87:44:2F:30:F8:EA:28:1F:F4:08:C4:6D:1F:C2:CF:A7
Certificate issuer: /CN=b3633287b55c76c191774ad54ec7c6fb291c822e
Certificate serial: 02460817
Authority key identifier: B3:63:32:87:B5:5C:76:C1:91:77:4A:D5:4E:C7:C6:FB:29:1C:82:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2Myh7VcdsGRd0rVTsfG-ykcgi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/A1bfT4dELzD46igf9AjEbR_Cz6c.roa
Signing time: Tue 03 May 2022 14:32:53 +0000
ROA not before: Tue 03 May 2022 14:32:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 130.255.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38144023 (0x2460817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3633287b55c76c191774ad54ec7c6fb291c822e
Validity
Not Before: May 3 14:32:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0356df4f87442f30f8ea281ff408c46d1fc2cfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:22:83:f0:46:06:89:62:59:34:27:b2:78:
c5:96:73:21:16:d0:73:a4:aa:cd:41:e9:09:f1:1e:
49:d3:13:fc:c3:08:29:e7:b6:6c:e2:8c:1e:f6:a4:
4b:e4:c7:1a:d8:a0:53:45:bf:a2:e8:c4:bc:60:e5:
db:2b:3f:79:85:c8:f0:bf:08:64:f3:fa:c5:1c:c9:
a2:63:1e:03:07:70:bc:97:11:d1:dc:f5:ae:3b:49:
ef:f6:fb:ba:1d:d1:85:e9:97:af:9c:b2:cf:4d:9c:
29:09:b5:f0:80:5b:f2:49:f9:8f:5d:f5:c5:b8:a9:
38:44:c0:ab:f1:9a:22:a5:48:e1:b1:33:6b:d6:0e:
94:30:d8:e1:04:b1:10:bb:91:b9:97:64:f5:ea:43:
de:78:84:d7:19:d5:9a:21:21:80:c6:06:74:be:f7:
28:35:e5:71:3b:3e:dc:1f:6a:e2:9a:3a:e0:6d:b6:
63:8b:8e:5f:09:39:cf:e0:df:10:41:f6:12:5a:31:
a3:e9:6f:c0:06:fb:00:00:32:33:9f:1d:7c:dd:4b:
cd:05:6f:af:51:99:51:ee:3e:ae:14:7b:cd:76:3b:
e9:34:37:a2:52:8d:01:e9:78:ed:d2:62:e3:1b:9d:
8b:66:59:ff:e4:01:98:63:ee:3f:cb:e1:d6:0c:91:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:DF:4F:87:44:2F:30:F8:EA:28:1F:F4:08:C4:6D:1F:C2:CF:A7
X509v3 Authority Key Identifier:
keyid:B3:63:32:87:B5:5C:76:C1:91:77:4A:D5:4E:C7:C6:FB:29:1C:82:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2Myh7VcdsGRd0rVTsfG-ykcgi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/A1bfT4dELzD46igf9AjEbR_Cz6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/s2Myh7VcdsGRd0rVTsfG-ykcgi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.175.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6b:75:2b:b6:77:e0:ba:a8:1b:68:c9:30:df:ae:43:11:4e:
12:19:aa:f6:6c:27:de:d4:4d:4a:52:06:78:be:89:9e:0e:3b:
9a:0d:39:e4:4e:ee:47:ee:fe:0f:0a:0b:98:47:de:74:1c:08:
9c:58:1f:30:c0:32:5f:85:ee:7e:1b:00:8d:4c:a6:a0:66:08:
04:a7:df:2b:c2:7a:2c:20:61:99:08:af:7b:85:a2:da:8a:d7:
89:ab:de:59:76:e3:0c:3f:e4:23:9a:b5:72:7e:a4:10:ec:60:
fd:4b:8f:58:ba:bd:a0:f2:ee:76:36:e7:08:34:e4:ee:f8:78:
5e:7c:9f:b0:57:4e:ca:5a:f3:31:9a:34:bb:43:14:4a:db:72:
a0:1b:19:05:62:06:5d:b6:d6:a8:9f:24:ce:be:f2:19:9f:22:
ce:b9:33:f6:f8:06:0e:53:37:a2:6a:c9:e2:3b:e2:d0:e1:db:
9e:90:9d:49:6a:69:61:4f:66:4e:62:78:a7:fe:1c:55:88:26:
71:b0:0e:6b:11:25:2c:47:cd:08:8e:f0:0a:83:e9:99:4a:b1:
40:2b:7d:ae:cd:c9:26:0b:19:5e:d2:27:f5:de:83:54:6d:4b:
5d:e8:60:cb:82:3e:a4:90:f4:d2:d3:04:17:a5:7b:86:45:7c:
9c:5f:c3:dc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAkYIFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MzYzMzI4N2I1NWM3NmMxOTE3NzRhZDU0ZWM3YzZmYjI5MWM4MjJlMB4XDTIyMDUw
MzE0MzI1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDM1NmRmNGY4NzQ0
MmYzMGY4ZWEyODFmZjQwOGM0NmQxZmMyY2ZhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKAmIoPwRgaJYlk0J7J4xZZzIRbQc6SqzUHpCfEeSdMT/MMI
Kee2bOKMHvakS+THGtigU0W/oujEvGDl2ys/eYXI8L8IZPP6xRzJomMeAwdwvJcR
0dz1rjtJ7/b7uh3RhemXr5yyz02cKQm18IBb8kn5j131xbipOETAq/GaIqVI4bEz
a9YOlDDY4QSxELuRuZdk9epD3niE1xnVmiEhgMYGdL73KDXlcTs+3B9q4po64G22
Y4uOXwk5z+DfEEH2Eloxo+lvwAb7AAAyM58dfN1LzQVvr1GZUe4+rhR7zXY76TQ3
olKNAel47dJi4xudi2ZZ/+QBmGPuP8vh1gyRGW8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQDVt9Ph0QvMPjqKB/0CMRtH8LPpzAfBgNVHSMEGDAWgBSzYzKHtVx2wZF3
StVOx8b7KRyCLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3MyTXloN1ZjZHNHUmQwclZUc2ZHLXlrY2dpNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvNDllMmU1LTdiMmEtNGIyZS1hMTMwLTM1YzkxZDUwMmQ2ZC8x
L0ExYmZUNGRFTHpENDZpZ2Y5QWpFYlJfQ3o2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
NDllMmU1LTdiMmEtNGIyZS1hMTMwLTM1YzkxZDUwMmQ2ZC8xL3MyTXloN1ZjZHNH
UmQwclZUc2ZHLXlrY2dpNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIL/rzANBgkqhkiG9w0BAQsFAAOC
AQEAKWt1K7Z34LqoG2jJMN+uQxFOEhmq9mwn3tRNSlIGeL6Jng47mg055E7uR+7+
DwoLmEfedBwInFgfMMAyX4XufhsAjUymoGYIBKffK8J6LCBhmQive4Wi2orXiave
WXbjDD/kI5q1cn6kEOxg/UuPWLq9oPLudjbnCDTk7vh4XnyfsFdOylrzMZo0u0MU
SttyoBsZBWIGXbbWqJ8kzr7yGZ8izrkz9vgGDlM3omrJ4jvi0OHbnpCdSWppYU9m
TmJ4p/4cVYgmcbAOaxElLEfNCI7wCoPpmUqxQCt9rs3JJgsZXtIn9d6DVG1LXehg
y4I+pJD00tMEF6V7hkV8nF/D3A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net