Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/stXifNQKOB8rMgD2WqswXQUC4hc.roa
File: stXifNQKOB8rMgD2WqswXQUC4hc.roa (raw, json)
Hash identifier: 1aWA7BVSMxcPzNvMHFjHcGDa/jyxOPTrrSRltY789Ck=
Subject key identifier: B2:D5:E2:7C:D4:0A:38:1F:2B:32:00:F6:5A:AB:30:5D:05:02:E2:17
Certificate issuer: /CN=4f21c5393d93fccf0b8e0cccdc8d5497e2d69209
Certificate serial: 032B30F7
Authority key identifier: 4F:21:C5:39:3D:93:FC:CF:0B:8E:0C:CC:DC:8D:54:97:E2:D6:92:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/stXifNQKOB8rMgD2WqswXQUC4hc.roa
Signing time: Sat 01 Jan 2022 15:01:27 +0000
ROA not before: Sat 01 Jan 2022 15:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 328543
IP address blocks: 195.74.89.0/24 maxlen: 24
195.74.88.0/24 maxlen: 24
195.74.88.0/23 maxlen: 23
195.78.49.0/24 maxlen: 24
195.78.48.0/24 maxlen: 24
195.78.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53162231 (0x32b30f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f21c5393d93fccf0b8e0cccdc8d5497e2d69209
Validity
Not Before: Jan 1 15:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2d5e27cd40a381f2b3200f65aab305d0502e217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:a3:65:79:4a:f2:0e:4f:af:48:e8:3e:d6:
cd:7b:3a:13:d4:bb:a8:45:a4:0d:76:08:30:c1:94:
bb:d4:a2:39:c6:61:fa:0e:76:13:a5:af:10:25:93:
5b:30:40:59:ee:c2:b2:db:05:23:90:fb:56:1a:dc:
4f:c2:53:67:b1:49:c6:b6:62:79:78:78:5c:70:eb:
b3:55:22:e9:fc:8f:1b:e5:47:d8:1d:37:7c:46:28:
34:de:2a:6f:19:96:01:3b:7f:73:8f:99:91:1c:b8:
79:c7:99:58:9c:4f:5a:c6:b9:65:e4:72:4c:9b:28:
ea:7f:81:09:84:95:7a:57:03:b2:4f:4f:66:4b:7a:
f4:92:45:e2:73:c6:39:43:8a:fe:07:55:2e:55:2a:
7c:86:59:3d:4b:ad:de:dc:31:57:0e:b1:a7:c3:8a:
ef:63:23:6a:18:3d:dd:74:be:90:f2:1d:0b:b8:f9:
03:31:39:31:1f:cd:5d:88:fb:15:4c:e6:36:ff:4f:
c3:d4:42:41:63:65:68:b5:de:50:6e:d5:d4:20:fa:
12:c6:f2:20:00:9f:ab:29:a3:2d:6b:d1:ef:f0:b1:
e8:69:f5:4b:49:51:19:ea:23:e2:71:2a:fe:06:c6:
b1:14:e6:23:09:a1:d6:2c:ac:66:11:18:38:38:64:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D5:E2:7C:D4:0A:38:1F:2B:32:00:F6:5A:AB:30:5D:05:02:E2:17
X509v3 Authority Key Identifier:
keyid:4F:21:C5:39:3D:93:FC:CF:0B:8E:0C:CC:DC:8D:54:97:E2:D6:92:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/stXifNQKOB8rMgD2WqswXQUC4hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/df15d5-a0d0-4fab-bc96-ed21f80886a3/1/TyHFOT2T_M8LjgzM3I1Ul-LWkgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.74.88.0/23
195.78.48.0/23
Signature Algorithm: sha256WithRSAEncryption
23:d9:ca:c4:22:3b:d1:fb:f9:fa:57:b8:ca:e6:c1:4c:83:eb:
0a:fe:93:e4:32:d7:c8:bf:d4:65:56:65:a8:26:a4:c2:52:4c:
9f:61:7d:b6:c0:12:71:1c:38:94:11:80:94:0d:da:2f:c6:71:
83:b0:09:27:d9:d0:44:27:70:ee:dd:a6:cf:de:55:27:c4:4c:
dd:39:bc:82:c3:21:c5:2a:4f:95:76:20:58:4c:b6:23:af:e4:
1a:e7:79:3b:27:4f:46:45:35:a2:a1:11:55:77:99:9b:4c:f2:
95:51:a3:23:64:1b:f2:6b:2d:69:5f:19:38:9a:b9:a8:6f:6f:
3a:74:ec:2d:81:bc:3a:fc:ab:06:2e:48:3c:03:28:78:6a:4c:
e8:0e:2d:ab:14:22:f4:a9:ac:3e:72:b9:80:45:85:12:df:74:
10:0c:9e:16:93:76:1d:08:3d:2c:84:e7:b9:05:89:55:14:84:
4b:3b:39:5f:63:42:11:e0:45:c6:cf:f3:de:91:c9:ce:63:f0:
f8:26:71:20:be:71:cc:6b:b4:ac:6a:82:e5:44:9c:ee:d1:4c:
38:d7:8d:41:c4:be:fa:77:1a:ff:9c:d1:6b:78:54:c9:b7:d9:
18:a6:59:fb:35:fe:cc:43:64:f6:e4:08:74:ef:5e:c2:c5:46:
02:89:65:f4
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAysw9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZjIxYzUzOTNkOTNmY2NmMGI4ZTBjY2NkYzhkNTQ5N2UyZDY5MjA5MB4XDTIyMDEw
MTE1MDEyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjJkNWUyN2NkNDBh
MzgxZjJiMzIwMGY2NWFhYjMwNWQwNTAyZTIxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMkuo2V5SvIOT69I6D7WzXs6E9S7qEWkDXYIMMGUu9SiOcZh
+g52E6WvECWTWzBAWe7CstsFI5D7VhrcT8JTZ7FJxrZieXh4XHDrs1Ui6fyPG+VH
2B03fEYoNN4qbxmWATt/c4+ZkRy4eceZWJxPWsa5ZeRyTJso6n+BCYSVelcDsk9P
Zkt69JJF4nPGOUOK/gdVLlUqfIZZPUut3twxVw6xp8OK72Mjahg93XS+kPIdC7j5
AzE5MR/NXYj7FUzmNv9Pw9RCQWNlaLXeUG7V1CD6EsbyIACfqymjLWvR7/Cx6Gn1
S0lRGeoj4nEq/gbGsRTmIwmh1iysZhEYODhkiB8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSy1eJ81Ao4HysyAPZaqzBdBQLiFzAfBgNVHSMEGDAWgBRPIcU5PZP8zwuO
DMzcjVSX4taSCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1R5SEZPVDJUX004TGpnek0zSTFVbC1MV2tnay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvZGYxNWQ1LWEwZDAtNGZhYi1iYzk2LWVkMjFmODA4ODZhMy8x
L3N0WGlmTlFLT0I4ck1nRDJXcXN3WFFVQzRoYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
ZGYxNWQ1LWEwZDAtNGZhYi1iYzk2LWVkMjFmODA4ODZhMy8xL1R5SEZPVDJUX004
TGpnek0zSTFVbC1MV2tnay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcNKWAMEAcNOMDANBgkqhkiG9w0B
AQsFAAOCAQEAI9nKxCI70fv5+le4yubBTIPrCv6T5DLXyL/UZVZlqCakwlJMn2F9
tsAScRw4lBGAlA3aL8Zxg7AJJ9nQRCdw7t2mz95VJ8RM3Tm8gsMhxSpPlXYgWEy2
I6/kGud5OydPRkU1oqERVXeZm0zylVGjI2Qb8mstaV8ZOJq5qG9vOnTsLYG8Ovyr
Bi5IPAMoeGpM6A4tqxQi9KmsPnK5gEWFEt90EAyeFpN2HQg9LITnuQWJVRSESzs5
X2NCEeBFxs/z3pHJzmPw+CZxIL5xzGu0rGqC5USc7tFMONeNQcS++nca/5zRa3hU
ybfZGKZZ+zX+zENk9uQIdO9ewsVGAoll9A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:40 2023 by rpki-client on console.sobornost.net