Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/doZeafEEuRvWM0vFo2LNroL3bCA.roa
File: doZeafEEuRvWM0vFo2LNroL3bCA.roa (raw, json)
Hash identifier: ty4rZOFqdlzvvwWP7Y8mp8OYB5gE/ci9qbC3aCOQg74=
Subject key identifier: 76:86:5E:69:F1:04:B9:1B:D6:33:4B:C5:A3:62:CD:AE:82:F7:6C:20
Certificate issuer: /CN=494f19145bf8432fe8f30fc2452f3e3002722c67
Certificate serial: 01856F393AC1B270C460D05D4862D0F47F10
Authority key identifier: 49:4F:19:14:5B:F8:43:2F:E8:F3:0F:C2:45:2F:3E:30:02:72:2C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU8ZFFv4Qy_o8w_CRS8-MAJyLGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/doZeafEEuRvWM0vFo2LNroL3bCA.roa
Signing time: Sun 01 Jan 2023 21:24:59 +0000
ROA not before: Sun 01 Jan 2023 21:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 91.218.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:3a:c1:b2:70:c4:60:d0:5d:48:62:d0:f4:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494f19145bf8432fe8f30fc2452f3e3002722c67
Validity
Not Before: Jan 1 21:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76865e69f104b91bd6334bc5a362cdae82f76c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ab:43:6c:6b:c4:91:37:1b:1f:d4:d6:54:7e:
35:5b:23:71:88:f3:b9:ac:00:29:d6:3a:50:ec:0c:
1d:6b:d9:3b:ab:29:8d:f6:63:f0:70:04:20:cb:ca:
71:c1:5e:45:cd:67:59:3d:d2:21:ff:dd:41:82:4b:
d1:52:41:84:d3:5d:91:79:fb:b5:2b:85:d2:52:d0:
3d:6f:d2:8e:bb:fa:d9:4a:20:69:06:bb:38:58:f0:
fd:c8:b0:8c:e6:07:62:69:52:5f:6f:3f:05:8b:91:
45:49:11:ca:9b:59:02:1c:f7:87:4d:d8:b3:f8:1c:
3a:4c:30:76:50:68:05:f8:e3:b8:24:0d:87:68:40:
58:ea:87:7b:2d:0e:31:db:f8:ad:7f:da:9d:da:0c:
2f:d0:4b:6f:11:71:4e:37:3e:14:c7:4e:3a:cf:11:
02:3f:f6:ab:40:26:17:94:40:b1:8e:17:1b:c5:68:
f1:d1:6e:d5:7c:8a:62:68:74:05:40:a9:9c:b0:9c:
6a:b9:85:48:c0:5f:60:8b:6c:be:55:97:88:4e:af:
5a:f5:cd:59:59:16:81:53:80:78:0e:3e:8c:cf:2d:
03:70:e4:ce:2c:25:04:f5:29:23:3d:27:4a:7c:56:
d7:0a:82:71:15:8a:74:af:c9:f6:dc:44:3c:12:62:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:86:5E:69:F1:04:B9:1B:D6:33:4B:C5:A3:62:CD:AE:82:F7:6C:20
X509v3 Authority Key Identifier:
keyid:49:4F:19:14:5B:F8:43:2F:E8:F3:0F:C2:45:2F:3E:30:02:72:2C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU8ZFFv4Qy_o8w_CRS8-MAJyLGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/doZeafEEuRvWM0vFo2LNroL3bCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/SU8ZFFv4Qy_o8w_CRS8-MAJyLGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:70:c2:73:66:0c:77:d0:2b:85:04:f2:1c:42:92:5a:3a:0e:
b7:e7:8b:9d:88:e5:9d:6b:a0:3c:ff:be:cc:b8:f2:fc:a1:4c:
60:45:2e:32:d9:4d:c0:9d:1d:09:58:27:4c:2c:b4:f2:b6:9f:
c4:35:38:2b:db:a2:4c:12:f2:b6:bb:2a:6d:de:b5:ae:77:fb:
e7:92:1c:b8:eb:36:8a:f0:8c:24:ce:6a:67:09:d5:a6:63:5d:
2f:05:71:03:d3:d3:3d:7e:e7:fd:51:7e:c8:cf:32:7b:b0:1a:
b3:5d:f6:bb:53:9b:87:6a:4b:71:a5:b4:91:e6:36:09:81:50:
b4:af:42:7b:39:db:40:f5:e3:29:40:c1:4b:dd:0a:46:21:54:
f9:c2:91:d9:db:16:43:25:76:46:17:bc:18:7c:67:34:d1:95:
43:da:7c:65:e6:65:7b:27:e0:8d:ad:3e:98:37:51:53:e0:89:
99:2d:67:b1:8d:22:9d:7d:98:ae:b1:52:0f:42:6f:d9:63:ab:
3c:3b:b2:08:18:82:38:bd:d6:db:0c:b0:13:dc:e6:2f:00:8a:
13:ea:b6:5b:95:3f:42:f7:87:08:1c:06:3b:b7:b3:9d:10:af:
07:5c:78:2d:03:48:f7:24:79:2b:33:f3:33:02:5f:67:e6:b1:
17:72:28:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvOTrBsnDEYNBdSGLQ9H8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGYxOTE0NWJmODQzMmZlOGYzMGZjMjQ1MmYzZTMwMDI3
MjJjNjcwHhcNMjMwMTAxMjEyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Njg2NWU2OWYxMDRiOTFiZDYzMzRiYzVhMzYyY2RhZTgyZjc2YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKtDbGvEkTcbH9TWVH41WyNxiPO5
rAAp1jpQ7Awda9k7qymN9mPwcAQgy8pxwV5FzWdZPdIh/91BgkvRUkGE012Refu1
K4XSUtA9b9KOu/rZSiBpBrs4WPD9yLCM5gdiaVJfbz8Fi5FFSRHKm1kCHPeHTdiz
+Bw6TDB2UGgF+OO4JA2HaEBY6od7LQ4x2/itf9qd2gwv0EtvEXFONz4Ux046zxEC
P/arQCYXlECxjhcbxWjx0W7VfIpiaHQFQKmcsJxquYVIwF9gi2y+VZeITq9a9c1Z
WRaBU4B4Dj6Mzy0DcOTOLCUE9SkjPSdKfFbXCoJxFYp0r8n23EQ8EmLAlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHaGXmnxBLkb1jNLxaNiza6C92wgMB8GA1UdIwQY
MBaAFElPGRRb+EMv6PMPwkUvPjACcixnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1U4WkZGdjRReV9vOHdfQ1JTOC1NQUp5TEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jZjFkNmMtNWYxZS00NDNkLTg5YzQt
ZWEyNzg2MzM0NzMyLzEvZG9aZWFmRUV1UnZXTTB2Rm8yTE5yb0wzYkNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jZjFkNmMtNWYxZS00NDNkLTg5YzQtZWEyNzg2MzM0NzMy
LzEvU1U4WkZGdjRReV9vOHdfQ1JTOC1NQUp5TEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9qLMA0G
CSqGSIb3DQEBCwUAA4IBAQCecMJzZgx30CuFBPIcQpJaOg6354udiOWda6A8/77M
uPL8oUxgRS4y2U3AnR0JWCdMLLTytp/ENTgr26JMEvK2uypt3rWud/vnkhy46zaK
8IwkzmpnCdWmY10vBXED09M9fuf9UX7IzzJ7sBqzXfa7U5uHaktxpbSR5jYJgVC0
r0J7OdtA9eMpQMFL3QpGIVT5wpHZ2xZDJXZGF7wYfGc00ZVD2nxl5mV7J+CNrT6Y
N1FT4ImZLWexjSKdfZiusVIPQm/ZY6s8O7IIGII4vdbbDLAT3OYvAIoT6rZblT9C
94cIHAY7t7OdEK8HXHgtA0j3JHkrM/MzAl9n5rEXciiM
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:06 2023 by rpki-client on console.sobornost.net