Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4e3aa7-4602-48ca-98a5-a21c071b3c32/1/1-k95vbHYA1CPIjMMMYKiq41tOD0.roa
File: 1-k95vbHYA1CPIjMMMYKiq41tOD0.roa (raw, json)
Hash identifier: 8UEFZ0BXmhuCBu4MFVDIh4yOJEX2sHjzCFedZ5FTWf0=
Subject key identifier: FA:4F:79:BD:B1:D8:03:50:8F:22:33:0C:31:82:A2:AB:8D:6D:38:3D
Certificate issuer: /CN=6846330d9a4f9649a9eab8bb8252f81e0f53d893
Certificate serial: 01857255B470910F33BFB5AD669C4AD118D0
Authority key identifier: 68:46:33:0D:9A:4F:96:49:A9:EA:B8:BB:82:52:F8:1E:0F:53:D8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEYzDZpPlkmp6ri7glL4Hg9T2JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4e3aa7-4602-48ca-98a5-a21c071b3c32/1/1-k95vbHYA1CPIjMMMYKiq41tOD0.roa
Signing time: Mon 02 Jan 2023 11:54:57 +0000
ROA not before: Mon 02 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8481
IP address blocks: 193.31.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b4:70:91:0f:33:bf:b5:ad:66:9c:4a:d1:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6846330d9a4f9649a9eab8bb8252f81e0f53d893
Validity
Not Before: Jan 2 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa4f79bdb1d803508f22330c3182a2ab8d6d383d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:32:ae:87:50:fd:18:20:ce:c5:4a:ba:d7:
6d:82:f7:c9:6f:fd:c8:a0:b2:d9:f1:22:f6:cb:6b:
9e:3d:39:53:32:09:e9:72:a7:e1:b5:09:a5:96:7a:
99:c8:33:fe:02:04:34:d8:89:44:eb:5f:f7:39:71:
ff:a4:c3:63:2d:09:c1:95:7a:5e:de:4e:a7:a4:d2:
57:49:17:e6:74:c8:ea:88:63:36:27:d9:cc:e8:ed:
46:6c:65:7b:62:5f:61:64:70:ce:58:35:b7:09:9c:
bc:d4:23:ad:9f:37:8d:00:cc:7d:37:67:a7:59:bd:
dd:98:7a:30:fb:eb:81:df:1f:6f:76:34:38:5d:e6:
6a:bf:0a:87:6f:3b:8a:d8:46:bc:3b:81:9b:30:26:
53:50:79:b7:a5:bc:e6:36:f2:35:d9:f4:ec:f5:51:
a4:8a:a9:48:aa:e2:05:33:c5:17:88:b0:fb:90:e6:
57:fc:c5:d2:8c:af:5c:7a:45:be:37:1a:6a:3f:b2:
7b:99:45:a2:f7:47:ee:35:95:37:1e:e3:d4:d2:d0:
8c:d1:ec:64:aa:ec:25:b6:39:e9:1c:7d:a6:8c:f6:
a0:37:66:a2:04:69:66:37:16:02:86:17:08:0d:b1:
26:25:38:55:0c:3f:d1:d9:f5:9e:dc:e2:22:1d:65:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4F:79:BD:B1:D8:03:50:8F:22:33:0C:31:82:A2:AB:8D:6D:38:3D
X509v3 Authority Key Identifier:
keyid:68:46:33:0D:9A:4F:96:49:A9:EA:B8:BB:82:52:F8:1E:0F:53:D8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEYzDZpPlkmp6ri7glL4Hg9T2JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4e3aa7-4602-48ca-98a5-a21c071b3c32/1/1-k95vbHYA1CPIjMMMYKiq41tOD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4e3aa7-4602-48ca-98a5-a21c071b3c32/1/aEYzDZpPlkmp6ri7glL4Hg9T2JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:52:90:11:d6:17:ad:36:8e:d5:67:3c:bc:d2:dd:55:61:4d:
ca:9b:c3:9d:f3:5c:50:3c:db:05:6b:67:8a:6d:fc:62:38:ff:
bb:6a:d7:d9:74:f7:5e:83:53:8d:bd:c7:db:32:0b:d0:88:1e:
b3:fe:cf:46:1c:b5:6b:3e:74:65:71:a2:f7:92:82:c5:04:5b:
8c:2c:e7:b8:db:37:2e:3b:ed:50:22:51:ad:d4:18:0a:73:3a:
dc:02:a8:96:b0:f5:2e:69:7a:1b:90:55:a5:d5:f1:9a:88:bc:
cb:d5:f4:13:84:39:c0:ee:d2:98:ba:28:2c:8c:88:e0:95:60:
07:33:46:c0:bf:9f:a1:cd:5f:a1:27:2e:e6:1b:f5:cb:b4:59:
1b:ed:e0:0d:e6:4e:02:46:de:da:e7:a3:f4:46:2c:ee:81:69:
16:0e:f3:c6:05:c4:67:bd:89:e7:79:59:16:a1:31:92:2a:35:
92:5c:c4:f5:f3:be:2b:82:cf:b7:19:c7:e0:03:b7:38:ba:8f:
88:56:cc:d3:4c:b1:f7:bf:ae:51:7d:b7:05:69:aa:42:8f:95:
9c:ed:1c:cf:f3:56:0e:f9:49:b2:02:72:c1:9d:38:69:10:87:
a5:c6:49:be:56:88:fb:fb:53:80:20:b8:2e:8a:5e:2e:fe:5f:
39:37:e2:1e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVyVbRwkQ8zv7WtZpxK0RjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDYzMzBkOWE0Zjk2NDlhOWVhYjhiYjgyNTJmODFlMGY1
M2Q4OTMwHhcNMjMwMTAyMTE1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTRmNzliZGIxZDgwMzUwOGYyMjMzMGMzMTgyYTJhYjhkNmQzODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3AyrodQ/RggzsVKutdtgvfJb/3I
oLLZ8SL2y2uePTlTMgnpcqfhtQmllnqZyDP+AgQ02IlE61/3OXH/pMNjLQnBlXpe
3k6npNJXSRfmdMjqiGM2J9nM6O1GbGV7Yl9hZHDOWDW3CZy81COtnzeNAMx9N2en
Wb3dmHow++uB3x9vdjQ4XeZqvwqHbzuK2Ea8O4GbMCZTUHm3pbzmNvI12fTs9VGk
iqlIquIFM8UXiLD7kOZX/MXSjK9cekW+NxpqP7J7mUWi90fuNZU3HuPU0tCM0exk
quwltjnpHH2mjPagN2aiBGlmNxYChhcIDbEmJThVDD/R2fWe3OIiHWWW6QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPpPeb2x2ANQjyIzDDGCoquNbTg9MB8GA1UdIwQY
MBaAFGhGMw2aT5ZJqeq4u4JS+B4PU9iTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVZekRacFBsa21wNnJpN2dsTDRIZzlUMkpNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80ZTNhYTctNDYwMi00OGNhLTk4YTUt
YTIxYzA3MWIzYzMyLzEvMS1rOTV2YkhZQTFDUElqTU1NWUtpcTQxdE9EMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmUvNGUzYWE3LTQ2MDItNDhjYS05OGE1LWEyMWMwNzFiM2Mz
Mi8xL2FFWXpEWnBQbGttcDZyaTdnbEw0SGc5VDJKTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEfBzAN
BgkqhkiG9w0BAQsFAAOCAQEAfVKQEdYXrTaO1Wc8vNLdVWFNypvDnfNcUDzbBWtn
im38Yjj/u2rX2XT3XoNTjb3H2zIL0Iges/7PRhy1az50ZXGi95KCxQRbjCznuNs3
LjvtUCJRrdQYCnM63AKolrD1Lml6G5BVpdXxmoi8y9X0E4Q5wO7SmLooLIyI4JVg
BzNGwL+foc1foScu5hv1y7RZG+3gDeZOAkbe2uej9EYs7oFpFg7zxgXEZ72J53lZ
FqExkio1klzE9fO+K4LPtxnH4AO3OLqPiFbM00yx97+uUX23BWmqQo+VnO0cz/NW
DvlJsgJywZ04aRCHpcZJvlaI+/tTgCC4LopeLv5fOTfiHg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:43 2023 by rpki-client on console.sobornost.net