Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d018c4-e8ed-4e72-adff-28f26e6ef86d/1/nULS_8T7zQWT97MnVoRjKyGiGwU.roa
File: nULS_8T7zQWT97MnVoRjKyGiGwU.roa (raw, json)
Hash identifier: 8gFUWyTEqXlLbpqc9Jc5B3TWp6xepLqITe0ud2mR8jk=
Subject key identifier: 9D:42:D2:FF:C4:FB:CD:05:93:F7:B3:27:56:84:63:2B:21:A2:1B:05
Certificate issuer: /CN=179066c03fc32c846fc9be9aac25abce9a4c8515
Certificate serial: 01856F0B694FC06EC23B0DC718060AA801B9
Authority key identifier: 17:90:66:C0:3F:C3:2C:84:6F:C9:BE:9A:AC:25:AB:CE:9A:4C:85:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5BmwD_DLIRvyb6arCWrzppMhRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d018c4-e8ed-4e72-adff-28f26e6ef86d/1/nULS_8T7zQWT97MnVoRjKyGiGwU.roa
Signing time: Sun 01 Jan 2023 20:34:56 +0000
ROA not before: Sun 01 Jan 2023 20:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203187
IP address blocks: 185.238.124.0/22 maxlen: 22
185.238.124.0/24 maxlen: 24
185.238.125.0/24 maxlen: 24
185.238.127.0/24 maxlen: 24
185.238.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:69:4f:c0:6e:c2:3b:0d:c7:18:06:0a:a8:01:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179066c03fc32c846fc9be9aac25abce9a4c8515
Validity
Not Before: Jan 1 20:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d42d2ffc4fbcd0593f7b3275684632b21a21b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:47:0d:0c:8f:bb:9c:3a:2b:47:4a:90:c3:
f2:19:c8:2e:de:99:3e:cf:27:6e:d8:b8:0d:08:a1:
9d:33:c0:7a:c5:3c:46:dc:34:cb:2e:46:e2:b4:e7:
43:4f:4f:69:4b:e8:45:e5:34:ab:6e:6f:31:e3:b6:
fd:ef:bb:85:b3:d5:42:b9:9a:36:8e:7d:99:72:b8:
84:1c:a9:39:fa:43:c5:9f:7e:b6:c8:96:41:c1:5e:
01:d5:c0:59:2b:51:86:b2:e1:6b:74:18:ab:da:bc:
4f:72:50:b1:0c:05:6a:e1:00:fd:33:6a:af:50:e0:
f5:bc:de:f6:0b:c8:e5:c7:ed:74:91:fa:3a:a4:a9:
7e:3b:52:d4:de:6b:b0:b7:ae:f9:7b:4a:43:b8:6b:
9e:a0:44:53:3f:96:59:74:b0:93:e6:f6:ac:43:45:
4a:15:4e:77:38:f8:59:4b:48:54:a1:3b:a8:c8:08:
1f:f4:93:80:53:ee:1a:0e:b5:78:77:94:57:04:01:
63:50:4a:bf:09:59:9d:e9:ac:fd:4e:f7:96:fa:84:
13:37:10:18:93:bf:73:32:0a:99:b6:71:24:10:05:
b3:8f:f3:12:0c:f1:b0:d4:25:30:f6:0b:66:52:d8:
88:ec:c8:73:ba:ac:dc:16:de:1c:56:69:47:19:47:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:42:D2:FF:C4:FB:CD:05:93:F7:B3:27:56:84:63:2B:21:A2:1B:05
X509v3 Authority Key Identifier:
keyid:17:90:66:C0:3F:C3:2C:84:6F:C9:BE:9A:AC:25:AB:CE:9A:4C:85:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5BmwD_DLIRvyb6arCWrzppMhRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d018c4-e8ed-4e72-adff-28f26e6ef86d/1/nULS_8T7zQWT97MnVoRjKyGiGwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d018c4-e8ed-4e72-adff-28f26e6ef86d/1/F5BmwD_DLIRvyb6arCWrzppMhRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:35:94:68:56:f3:7e:04:fe:94:8f:12:56:7c:38:71:35:1c:
9a:ff:f0:29:7a:ea:17:0e:2b:3b:c1:b0:8e:0a:9d:62:d3:b8:
0b:49:d4:09:e0:6d:ba:4e:dc:0d:70:62:5a:a4:e6:fe:91:85:
39:f1:dd:1c:f8:0b:9a:41:7e:8c:b4:ef:9c:e3:c9:92:3d:cf:
b5:77:b0:fb:a8:84:1a:23:b0:53:a1:a2:5a:4d:24:a0:56:90:
a1:86:32:70:2a:ce:90:91:67:ac:ba:df:61:7b:02:74:d9:c2:
84:97:1a:e5:f5:e8:6f:5a:80:fd:b3:77:4a:23:e1:45:f0:e0:
b5:97:39:7c:a7:5a:04:d2:7d:12:01:2c:8a:73:c0:10:54:82:
31:52:5f:54:6a:59:9b:dd:5e:1a:06:95:2d:dc:2c:d0:33:7d:
60:91:a3:ba:58:41:3b:19:c5:9f:dc:92:3b:e0:40:d2:f9:0e:
ad:0e:9f:6d:1e:0b:4b:ea:88:30:5f:3b:c2:ef:a7:d5:46:0e:
e0:f8:aa:cb:77:a3:9b:f4:36:34:ce:6f:1f:0e:bb:31:84:4d:
1e:8b:34:f1:30:44:9a:4b:76:a8:b1:87:a9:d0:9a:2a:03:4c:
ee:bc:e5:fe:ec:a4:3d:31:12:7d:c5:36:a1:3c:24:34:db:de:
95:d7:ba:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvC2lPwG7COw3HGAYKqAG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTA2NmMwM2ZjMzJjODQ2ZmM5YmU5YWFjMjVhYmNlOWE0
Yzg1MTUwHhcNMjMwMTAxMjAzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDQyZDJmZmM0ZmJjZDA1OTNmN2IzMjc1Njg0NjMyYjIxYTIxYjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZpHDQyPu5w6K0dKkMPyGcgu3pk+
zydu2LgNCKGdM8B6xTxG3DTLLkbitOdDT09pS+hF5TSrbm8x47b977uFs9VCuZo2
jn2ZcriEHKk5+kPFn362yJZBwV4B1cBZK1GGsuFrdBir2rxPclCxDAVq4QD9M2qv
UOD1vN72C8jlx+10kfo6pKl+O1LU3muwt675e0pDuGueoERTP5ZZdLCT5vasQ0VK
FU53OPhZS0hUoTuoyAgf9JOAU+4aDrV4d5RXBAFjUEq/CVmd6az9TveW+oQTNxAY
k79zMgqZtnEkEAWzj/MSDPGw1CUw9gtmUtiI7MhzuqzcFt4cVmlHGUcjDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ1C0v/E+80Fk/ezJ1aEYyshohsFMB8GA1UdIwQY
MBaAFBeQZsA/wyyEb8m+mqwlq86aTIUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVCbXdEX0RMSVJ2eWI2YXJDV3J6cHBNaFJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kMDE4YzQtZThlZC00ZTcyLWFkZmYt
MjhmMjZlNmVmODZkLzEvblVMU184VDd6UVdUOTdNblZvUmpLeUdpR3dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kMDE4YzQtZThlZC00ZTcyLWFkZmYtMjhmMjZlNmVmODZk
LzEvRjVCbXdEX0RMSVJ2eWI2YXJDV3J6cHBNaFJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue58MA0G
CSqGSIb3DQEBCwUAA4IBAQAcNZRoVvN+BP6UjxJWfDhxNRya//ApeuoXDis7wbCO
Cp1i07gLSdQJ4G26TtwNcGJapOb+kYU58d0c+AuaQX6MtO+c48mSPc+1d7D7qIQa
I7BToaJaTSSgVpChhjJwKs6QkWesut9hewJ02cKElxrl9ehvWoD9s3dKI+FF8OC1
lzl8p1oE0n0SASyKc8AQVIIxUl9Ualmb3V4aBpUt3CzQM31gkaO6WEE7GcWf3JI7
4EDS+Q6tDp9tHgtL6ogwXzvC76fVRg7g+KrLd6Ob9DY0zm8fDrsxhE0eizTxMESa
S3aosYep0JoqA0zuvOX+7KQ9MRJ9xTahPCQ0296V17pl
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net