Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WhvbHiHL6t521FstOU5bQxExylE.roa
File: WhvbHiHL6t521FstOU5bQxExylE.roa (raw, json)
Hash identifier: dvY0jgxhERgjroQ/8sOcvP/27NziLH7kUwsIlCBPAX4=
Subject key identifier: 5A:1B:DB:1E:21:CB:EA:DE:76:D4:5B:2D:39:4E:5B:43:11:31:CA:51
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184D5CACEFE5620DCD73CDDEEADFFF93B43
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WhvbHiHL6t521FstOU5bQxExylE.roa
Signing time: Sat 03 Dec 2022 02:22:29 +0000
ROA not before: Sat 03 Dec 2022 02:22:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.172.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d5:ca:ce:fe:56:20:dc:d7:3c:dd:ee:ad:ff:f9:3b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 3 02:22:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a1bdb1e21cbeade76d45b2d394e5b431131ca51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7a:00:0b:a4:77:35:c2:b5:75:12:b2:0b:a4:
51:6f:88:2e:ae:6a:31:63:c5:2d:1f:4a:8b:84:78:
89:bc:30:b1:8d:c0:dd:43:86:f3:56:2d:2c:42:fa:
60:31:72:98:70:d8:5d:bf:b5:2f:91:d8:53:7e:67:
46:fd:63:16:97:c4:3f:dc:5c:c5:5a:cf:3e:6b:1e:
39:a2:0f:58:46:3e:39:02:11:d0:df:c5:75:2f:3b:
83:fc:59:6e:15:27:33:c7:6c:90:56:f6:4f:e4:17:
bc:91:13:8b:28:72:27:ad:5a:f9:04:5b:15:4f:cf:
95:a1:66:94:a5:aa:70:de:4f:e6:c6:18:70:38:83:
5b:8d:58:aa:95:cd:85:a7:9a:8e:d8:2d:a8:1d:94:
7f:e7:34:c8:ac:de:93:96:a3:b3:c3:2b:b1:a0:72:
31:8f:a2:f2:b0:1c:69:e1:30:79:f6:a1:85:16:6a:
c5:4d:e5:2e:1d:f1:75:61:da:bf:1c:8f:c8:54:2a:
a3:67:33:df:f5:38:fa:a0:30:2f:b0:ba:07:3b:58:
08:5a:bd:ac:aa:da:0d:8c:66:f3:b3:d4:58:b5:e1:
d6:07:33:8b:bc:57:0c:80:fc:17:a4:ea:1a:ea:1d:
31:c1:dd:1c:c2:98:df:02:bb:60:5c:c3:66:18:65:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:DB:1E:21:CB:EA:DE:76:D4:5B:2D:39:4E:5B:43:11:31:CA:51
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WhvbHiHL6t521FstOU5bQxExylE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:9a:53:cf:49:af:6f:23:e6:6a:49:ee:56:af:07:48:c4:1f:
5c:48:e0:88:71:2f:7a:ca:47:d3:e9:b3:34:05:96:e9:45:1c:
3c:67:2a:a8:d6:ed:10:6f:7e:20:3b:21:8d:c3:01:cf:d2:6e:
04:a4:7f:ab:68:71:b6:0c:64:f1:b0:3a:6b:15:4c:4e:43:1a:
b1:4a:b2:0f:84:94:61:8a:38:dd:30:0c:51:b7:f1:85:32:66:
b6:d9:89:5f:20:dc:14:c1:81:52:b2:8f:97:64:a2:51:83:d2:
52:35:88:b9:36:ec:74:1d:a3:c7:05:5c:f4:44:c7:06:01:fd:
fd:94:2a:5c:7a:2d:71:8b:0a:77:e4:40:ea:52:6a:4a:c0:92:
00:e5:fe:34:a7:e7:2f:74:12:a1:cc:44:cd:59:54:e2:26:b6:
6d:96:dc:36:be:03:a5:50:f8:3e:7d:17:e8:1a:d7:16:1d:38:
ce:65:05:af:af:31:bd:27:31:fb:43:a1:f5:29:f8:2c:9f:43:
c8:af:b8:02:1e:32:7f:2a:ab:c5:ad:54:24:89:37:00:92:03:
d1:ce:39:11:ce:76:85:f2:f2:0a:5d:b1:cb:57:c0:18:db:be:
19:a0:ea:2f:e1:80:d0:97:98:37:46:00:9e:b5:2d:6d:83:bf:
2d:83:72:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTVys7+ViDc1zzd7q3/+TtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMjAzMDIyMjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTFiZGIxZTIxY2JlYWRlNzZkNDViMmQzOTRlNWI0MzExMzFjYTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8noAC6R3NcK1dRKyC6RRb4gurmox
Y8UtH0qLhHiJvDCxjcDdQ4bzVi0sQvpgMXKYcNhdv7UvkdhTfmdG/WMWl8Q/3FzF
Ws8+ax45og9YRj45AhHQ38V1LzuD/FluFSczx2yQVvZP5Be8kROLKHInrVr5BFsV
T8+VoWaUpapw3k/mxhhwOINbjViqlc2Fp5qO2C2oHZR/5zTIrN6TlqOzwyuxoHIx
j6LysBxp4TB59qGFFmrFTeUuHfF1Ydq/HI/IVCqjZzPf9Tj6oDAvsLoHO1gIWr2s
qtoNjGbzs9RYteHWBzOLvFcMgPwXpOoa6h0xwd0cwpjfArtgXMNmGGUQCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFob2x4hy+redtRbLTlOW0MRMcpRMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvV2h2YkhpSEw2dDUyMUZzdE9VNWJReEV4eWxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaysMA0G
CSqGSIb3DQEBCwUAA4IBAQAumlPPSa9vI+ZqSe5WrwdIxB9cSOCIcS96ykfT6bM0
BZbpRRw8Zyqo1u0Qb34gOyGNwwHP0m4EpH+raHG2DGTxsDprFUxOQxqxSrIPhJRh
ijjdMAxRt/GFMma22YlfINwUwYFSso+XZKJRg9JSNYi5Nux0HaPHBVz0RMcGAf39
lCpcei1xiwp35EDqUmpKwJIA5f40p+cvdBKhzETNWVTiJrZtltw2vgOlUPg+fRfo
GtcWHTjOZQWvrzG9JzH7Q6H1Kfgsn0PIr7gCHjJ/KqvFrVQkiTcAkgPRzjkRznaF
8vIKXbHLV8AY274ZoOov4YDQl5g3RgCetS1tg78tg3IW
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:13 2023 by rpki-client on console.sobornost.net