Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/4gQNNdy13eI5bH64zBapmsV2nmI.roa
File: 4gQNNdy13eI5bH64zBapmsV2nmI.roa (raw, json)
Hash identifier: V5P396E6NA/zfNCi+mtpiYKxAKufXkfdVSvMkvmcSmI=
Subject key identifier: E2:04:0D:35:DC:B5:DD:E2:39:6C:7E:B8:CC:16:A9:9A:C5:76:9E:62
Certificate issuer: /CN=eadd39b698e42472f8e1d13f93f2154b66da6e32
Certificate serial: 01877A9CB669A5CD3B247124A6405DB52C5C
Authority key identifier: EA:DD:39:B6:98:E4:24:72:F8:E1:D1:3F:93:F2:15:4B:66:DA:6E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6t05tpjkJHL44dE_k_IVS2babjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/4gQNNdy13eI5bH64zBapmsV2nmI.roa
Signing time: Thu 13 Apr 2023 12:35:03 +0000
ROA not before: Thu 13 Apr 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.37.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:9c:b6:69:a5:cd:3b:24:71:24:a6:40:5d:b5:2c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eadd39b698e42472f8e1d13f93f2154b66da6e32
Validity
Not Before: Apr 13 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2040d35dcb5dde2396c7eb8cc16a99ac5769e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:56:31:a1:cc:f4:d3:c1:e2:b9:a8:a6:75:
45:b5:5f:57:29:a4:27:d6:68:a7:dc:89:07:40:63:
c7:22:b3:92:2a:c3:5f:4c:cb:a4:99:ba:b4:33:44:
52:fb:af:17:d2:dd:33:8d:76:fb:87:50:c9:4d:e4:
c0:69:b3:b0:b6:f0:59:18:44:3c:8b:9f:53:b6:af:
6c:bb:11:f0:a6:a7:5e:ce:01:8d:0b:37:78:a2:3e:
46:d1:5c:f3:c7:fb:4a:d3:c6:93:f8:09:47:b2:c0:
de:db:49:f5:b7:c2:38:a1:00:06:1f:42:e5:6c:5d:
98:44:17:29:f4:15:d0:fd:8b:19:a0:50:2f:38:ee:
c9:47:ca:bc:f1:ee:0f:43:67:28:b1:b4:32:bd:87:
1d:03:6c:5c:5f:ff:f0:0d:99:55:1e:d7:6f:22:f6:
b2:7b:32:5e:f2:e2:b9:24:64:12:9c:1f:0b:ab:86:
bc:3d:a7:98:0d:d1:0a:92:a1:85:d8:93:66:db:94:
95:3d:c9:4e:20:13:fa:ba:b0:9d:ec:04:e1:e1:b9:
48:53:1f:05:06:63:0a:29:6f:dc:f5:f7:07:ce:ce:
1f:83:36:7c:6c:8d:8b:2d:9c:bb:d7:23:15:26:d9:
ec:6a:15:3b:2e:62:90:fd:2a:ac:5b:d0:65:5a:43:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:04:0D:35:DC:B5:DD:E2:39:6C:7E:B8:CC:16:A9:9A:C5:76:9E:62
X509v3 Authority Key Identifier:
keyid:EA:DD:39:B6:98:E4:24:72:F8:E1:D1:3F:93:F2:15:4B:66:DA:6E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6t05tpjkJHL44dE_k_IVS2babjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/4gQNNdy13eI5bH64zBapmsV2nmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/6t05tpjkJHL44dE_k_IVS2babjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.249.0/24
Signature Algorithm: sha256WithRSAEncryption
24:19:de:5c:0f:c4:9c:20:6d:e6:04:16:63:da:8e:22:cf:95:
74:11:67:9b:93:d0:3f:8b:6b:c7:eb:23:a8:56:07:a1:a1:56:
82:7a:ea:0d:39:e5:af:50:bd:22:17:7e:22:d6:3b:ce:3f:05:
39:b0:0e:98:da:51:7e:6d:b3:e6:2a:41:93:b5:fc:f1:0d:a6:
86:15:d2:0d:db:b6:13:4c:ae:8f:0c:88:98:9f:fb:7f:53:70:
5a:94:d6:6f:b8:a7:1b:7f:b0:ad:1f:76:7c:00:75:73:f3:95:
8f:06:a0:6a:04:e4:f6:71:60:78:72:13:98:2b:3c:84:43:4d:
1c:47:1e:d3:c0:45:8d:14:ea:77:32:4c:54:3d:de:c1:d5:1e:
cd:d8:8b:70:e0:9d:34:0a:20:cb:13:43:fe:2c:5f:1e:55:7e:
6c:b2:33:0c:e3:62:8d:91:9c:aa:f0:49:5b:70:65:5e:04:8c:
e5:1e:4f:ad:58:11:9b:cb:33:63:88:d6:38:f3:e4:8e:7d:18:
4a:10:55:9d:df:be:9a:24:f2:49:13:9f:87:e7:d1:89:51:e2:
60:f9:48:e9:11:5f:5c:66:c1:cd:78:6b:99:d8:74:75:a4:f9:
02:64:bf:b1:f9:95:db:a7:bf:4e:3b:d1:e3:1e:af:12:ba:7c:
aa:82:0b:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd6nLZppc07JHEkpkBdtSxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZGQzOWI2OThlNDI0NzJmOGUxZDEzZjkzZjIxNTRiNjZk
YTZlMzIwHhcNMjMwNDEzMTIzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjA0MGQzNWRjYjVkZGUyMzk2YzdlYjhjYzE2YTk5YWM1NzY5ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1pWMaHM9NPB4rmopnVFtV9XKaQn
1min3IkHQGPHIrOSKsNfTMukmbq0M0RS+68X0t0zjXb7h1DJTeTAabOwtvBZGEQ8
i59Ttq9suxHwpqdezgGNCzd4oj5G0Vzzx/tK08aT+AlHssDe20n1t8I4oQAGH0Ll
bF2YRBcp9BXQ/YsZoFAvOO7JR8q88e4PQ2cosbQyvYcdA2xcX//wDZlVHtdvIvay
ezJe8uK5JGQSnB8Lq4a8PaeYDdEKkqGF2JNm25SVPclOIBP6urCd7ATh4blIUx8F
BmMKKW/c9fcHzs4fgzZ8bI2LLZy71yMVJtnsahU7LmKQ/SqsW9BlWkNFmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOIEDTXctd3iOWx+uMwWqZrFdp5iMB8GA1UdIwQY
MBaAFOrdObaY5CRy+OHRP5PyFUtm2m4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnQwNXRwamtKSEw0NGRFX2tfSVZTMmJhYmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zY2ZmYTYtZWIyYy00NDg0LTljMTEt
NmZjYjIzNTkwYWIyLzEvNGdRTk5keTEzZUk1Ykg2NHpCYXBtc1Yybm1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zY2ZmYTYtZWIyYy00NDg0LTljMTEtNmZjYjIzNTkwYWIy
LzEvNnQwNXRwamtKSEw0NGRFX2tfSVZTMmJhYmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSX5MA0G
CSqGSIb3DQEBCwUAA4IBAQAkGd5cD8ScIG3mBBZj2o4iz5V0EWebk9A/i2vH6yOo
VgehoVaCeuoNOeWvUL0iF34i1jvOPwU5sA6Y2lF+bbPmKkGTtfzxDaaGFdIN27YT
TK6PDIiYn/t/U3BalNZvuKcbf7CtH3Z8AHVz85WPBqBqBOT2cWB4chOYKzyEQ00c
Rx7TwEWNFOp3MkxUPd7B1R7N2Itw4J00CiDLE0P+LF8eVX5ssjMM42KNkZyq8Elb
cGVeBIzlHk+tWBGbyzNjiNY48+SOfRhKEFWd376aJPJJE5+H59GJUeJg+UjpEV9c
ZsHNeGuZ2HR1pPkCZL+x+ZXbp79OO9HjHq8Sunyqggvz
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:47 2023 by rpki-client on console.sobornost.net