Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/KGwVb1Nc4YDOsXdEtx2AHJAdv9I.roa
File: KGwVb1Nc4YDOsXdEtx2AHJAdv9I.roa (raw, json)
Hash identifier: zM/i7d+jBOkwtdB7f3/uOtoDX/75yKLzr3LAa2anH2I=
Subject key identifier: 28:6C:15:6F:53:5C:E1:80:CE:B1:77:44:B7:1D:80:1C:90:1D:BF:D2
Certificate issuer: /CN=eadd39b698e42472f8e1d13f93f2154b66da6e32
Certificate serial: 0186513B187648B60521E5B246E0D0F3D858
Authority key identifier: EA:DD:39:B6:98:E4:24:72:F8:E1:D1:3F:93:F2:15:4B:66:DA:6E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6t05tpjkJHL44dE_k_IVS2babjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/KGwVb1Nc4YDOsXdEtx2AHJAdv9I.roa
Signing time: Tue 14 Feb 2023 18:41:12 +0000
ROA not before: Tue 14 Feb 2023 18:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 193.37.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:3b:18:76:48:b6:05:21:e5:b2:46:e0:d0:f3:d8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eadd39b698e42472f8e1d13f93f2154b66da6e32
Validity
Not Before: Feb 14 18:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=286c156f535ce180ceb17744b71d801c901dbfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:ba:44:a2:bb:5e:4d:70:8d:42:41:2f:db:
93:c1:1c:5b:e0:70:0f:47:4e:64:c8:c0:13:2b:1d:
c9:1c:e9:57:2c:3e:e3:58:3d:cd:64:58:50:66:04:
f4:17:ab:cb:3b:22:e2:32:0b:de:3f:b8:3d:c1:77:
e5:24:97:34:31:38:fa:cb:7d:dd:aa:3d:b4:d6:f8:
aa:d4:cc:ed:45:4a:ef:df:74:2e:e4:b4:47:da:3d:
68:ed:89:e3:9c:39:2f:bb:b3:6f:19:c9:b7:ac:9d:
27:6e:25:68:e2:8a:08:35:ad:01:11:2d:60:13:a8:
41:90:d0:c2:b5:e7:dd:74:67:ef:a0:7d:d9:ba:af:
9a:c1:4a:dc:69:7e:3e:8a:3a:e9:d9:8b:7b:d9:38:
8f:f5:bd:05:23:c9:e0:00:eb:2d:c8:90:7c:08:4d:
cf:77:09:02:8d:10:0d:89:da:dd:88:f2:22:e7:3c:
a8:00:2e:fc:62:dd:ba:64:c4:b9:2a:ac:0a:6c:3b:
31:e3:2e:41:f7:8b:d8:fd:2d:4d:5f:3f:4a:5d:6c:
9c:a8:68:a6:3c:5b:2e:d3:e8:94:49:ed:eb:64:bc:
8a:b7:6a:66:db:38:2e:36:3f:d7:4e:da:1a:49:bd:
81:1f:ef:9e:e8:50:e5:fb:1a:37:e1:fb:1b:a8:ee:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6C:15:6F:53:5C:E1:80:CE:B1:77:44:B7:1D:80:1C:90:1D:BF:D2
X509v3 Authority Key Identifier:
keyid:EA:DD:39:B6:98:E4:24:72:F8:E1:D1:3F:93:F2:15:4B:66:DA:6E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6t05tpjkJHL44dE_k_IVS2babjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/KGwVb1Nc4YDOsXdEtx2AHJAdv9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3cffa6-eb2c-4484-9c11-6fcb23590ab2/1/6t05tpjkJHL44dE_k_IVS2babjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.249.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:2c:8c:92:e1:a6:9b:99:3c:4f:c6:a2:a6:39:a1:fb:eb:ad:
9b:05:a3:f2:46:f6:09:11:e5:d3:10:88:d6:b6:85:7e:b6:d6:
7a:87:a2:78:64:91:77:6d:ab:ab:e8:e1:5f:9b:2c:92:53:c5:
b1:b8:97:99:c4:db:87:37:e0:09:65:43:5c:bf:cf:e6:9f:32:
64:6f:e6:24:93:a1:34:15:df:95:17:11:a6:1b:0c:48:a9:03:
12:12:d1:ca:0b:4f:44:18:77:b7:e1:ff:ce:f7:0f:ef:e8:0c:
86:b7:ab:c3:dd:bd:5b:45:1d:52:6f:77:b4:8e:3c:c8:3a:c8:
44:8f:f0:c0:c3:f6:4d:a8:e5:c3:28:f4:32:db:08:61:47:19:
28:ac:d3:7c:b7:ee:d2:ee:cc:de:b6:d3:ea:7f:28:89:c0:4e:
ec:cc:7e:ea:e0:c6:05:8c:26:69:d1:32:a0:69:ec:28:a1:8f:
7e:00:6e:87:92:53:b5:bc:01:0e:c3:b6:18:93:2e:1a:58:13:
33:02:b1:81:77:f8:55:30:27:d3:f0:dd:60:4f:bc:8f:d6:f0:
56:3c:a5:c4:9a:94:19:5d:89:03:f4:84:cb:7b:08:82:ac:6c:
e1:25:b7:9a:6d:4f:8b:d5:b8:c0:ba:d2:96:6c:c1:c8:b1:53:
ff:5f:dd:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZROxh2SLYFIeWyRuDQ89hYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZGQzOWI2OThlNDI0NzJmOGUxZDEzZjkzZjIxNTRiNjZk
YTZlMzIwHhcNMjMwMjE0MTg0MTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODZjMTU2ZjUzNWNlMTgwY2ViMTc3NDRiNzFkODAxYzkwMWRiZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho66RKK7Xk1wjUJBL9uTwRxb4HAP
R05kyMATKx3JHOlXLD7jWD3NZFhQZgT0F6vLOyLiMgveP7g9wXflJJc0MTj6y33d
qj201viq1MztRUrv33Qu5LRH2j1o7YnjnDkvu7NvGcm3rJ0nbiVo4ooINa0BES1g
E6hBkNDCtefddGfvoH3Zuq+awUrcaX4+ijrp2Yt72TiP9b0FI8ngAOstyJB8CE3P
dwkCjRANidrdiPIi5zyoAC78Yt26ZMS5KqwKbDsx4y5B94vY/S1NXz9KXWycqGim
PFsu0+iUSe3rZLyKt2pm2zguNj/XTtoaSb2BH++e6FDl+xo34fsbqO5YpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFChsFW9TXOGAzrF3RLcdgByQHb/SMB8GA1UdIwQY
MBaAFOrdObaY5CRy+OHRP5PyFUtm2m4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnQwNXRwamtKSEw0NGRFX2tfSVZTMmJhYmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zY2ZmYTYtZWIyYy00NDg0LTljMTEt
NmZjYjIzNTkwYWIyLzEvS0d3VmIxTmM0WURPc1hkRXR4MkFISkFkdjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zY2ZmYTYtZWIyYy00NDg0LTljMTEtNmZjYjIzNTkwYWIy
LzEvNnQwNXRwamtKSEw0NGRFX2tfSVZTMmJhYmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSX5MA0G
CSqGSIb3DQEBCwUAA4IBAQDrLIyS4aabmTxPxqKmOaH7662bBaPyRvYJEeXTEIjW
toV+ttZ6h6J4ZJF3baur6OFfmyySU8WxuJeZxNuHN+AJZUNcv8/mnzJkb+Ykk6E0
Fd+VFxGmGwxIqQMSEtHKC09EGHe34f/O9w/v6AyGt6vD3b1bRR1Sb3e0jjzIOshE
j/DAw/ZNqOXDKPQy2whhRxkorNN8t+7S7szettPqfyiJwE7szH7q4MYFjCZp0TKg
aewooY9+AG6HklO1vAEOw7YYky4aWBMzArGBd/hVMCfT8N1gT7yP1vBWPKXEmpQZ
XYkD9ITLewiCrGzhJbeabU+L1bjAutKWbMHIsVP/X90A
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:47 2023 by rpki-client on console.sobornost.net