Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/eoqr0x9yxGKmoufqR2QDtiyBuHI.roa
File: eoqr0x9yxGKmoufqR2QDtiyBuHI.roa (raw, json)
Hash identifier: R1b34k2QDYl3XJOu10ScSlmtWnrGWcTMa0JQaQRBQ1A=
Subject key identifier: 7A:8A:AB:D3:1F:72:C4:62:A6:A2:E7:EA:47:64:03:B6:2C:81:B8:72
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0191B1D79A2ED8BA20C9089B684D65B1B831
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/eoqr0x9yxGKmoufqR2QDtiyBuHI.roa
Signing time: Mon 02 Sep 2024 08:26:22 +0000
ROA not before: Mon 02 Sep 2024 08:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.100.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:d7:9a:2e:d8:ba:20:c9:08:9b:68:4d:65:b1:b8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Sep 2 08:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a8aabd31f72c462a6a2e7ea476403b62c81b872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:54:9a:7f:c0:27:9b:13:1a:97:a7:b6:d3:
1b:c4:31:da:fc:a5:12:20:ad:27:26:7d:81:fd:d2:
ef:07:d7:01:9f:ac:02:2d:41:fe:ca:e2:0e:4f:81:
70:0e:6a:46:51:d4:f4:3a:55:3e:f7:96:b7:6a:b3:
26:47:3d:dd:af:f4:23:31:6e:8f:eb:8f:4f:d1:ae:
72:9f:e4:20:f8:df:28:74:38:34:a5:01:cf:07:53:
fe:b5:f4:75:36:7e:f2:49:8d:b0:6f:93:58:12:54:
72:ba:02:a2:cd:df:a4:be:85:38:43:1f:90:c3:ec:
95:af:b8:52:99:5c:8d:87:83:70:0c:66:af:7a:35:
7f:0d:26:f0:ae:56:b6:e6:ce:7a:28:30:17:dc:f1:
a6:41:49:32:1c:b7:ed:72:b4:ce:b0:2d:42:79:e0:
ad:88:f0:04:39:bf:f2:e7:80:72:b7:71:b7:46:ca:
66:6b:e4:dc:b1:ec:05:9b:bd:cb:c7:d4:da:ba:54:
d2:ab:f1:08:e5:f7:fa:44:9b:9c:b0:76:39:e7:65:
f1:1f:45:d5:96:64:ca:05:6d:48:47:2b:8f:75:1b:
54:a2:e2:be:c6:ad:0f:45:26:2b:31:36:92:78:00:
b2:f1:8f:59:92:bb:c1:41:37:37:91:3c:c5:8f:db:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:AB:D3:1F:72:C4:62:A6:A2:E7:EA:47:64:03:B6:2C:81:B8:72
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/eoqr0x9yxGKmoufqR2QDtiyBuHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.168.0/24
Signature Algorithm: sha256WithRSAEncryption
68:79:f5:9c:31:3d:8c:fd:72:63:3a:01:f6:07:11:37:68:bc:
1a:d2:41:56:c1:a9:4e:05:56:0d:2b:7c:98:ff:be:bd:16:9c:
dd:38:71:3a:51:c5:91:be:ca:60:78:80:ce:bb:64:bc:5b:ff:
c3:0e:32:f4:90:f4:4d:0b:a7:19:6b:9e:b9:b4:1d:2e:ee:02:
bc:0c:68:4a:59:18:29:bd:4b:dd:a8:84:13:cc:a3:46:a0:e7:
12:58:77:5b:70:a3:3d:20:f8:73:1d:67:d0:e5:19:cd:34:db:
e9:81:d0:9a:ba:74:32:21:30:ce:f7:a0:1a:e9:2f:14:7e:09:
bd:82:a4:88:b5:c6:b8:dd:6c:8a:b0:b1:11:3a:81:dd:17:b1:
fe:f5:d7:b9:ea:9f:29:13:45:fb:7c:76:7f:d2:d3:6d:7c:17:
bc:73:5f:7d:f0:38:24:e6:9d:93:bb:82:e5:1a:08:46:65:e2:
51:44:63:26:a8:98:de:b7:16:28:dc:f0:16:1c:8e:34:a2:38:
39:59:0d:87:bd:a5:a4:48:7b:60:8a:e6:e2:43:2b:1f:09:dc:
12:aa:d0:58:fb:1e:57:5f:57:66:cb:98:4c:d3:d6:68:49:74:
68:66:fc:61:07:1d:d8:b3:18:db:9c:a7:a9:0a:17:cf:8f:1e:
c8:29:82:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGx15ou2LogyQibaE1lsbgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjQwOTAyMDgyNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YThhYWJkMzFmNzJjNDYyYTZhMmU3ZWE0NzY0MDNiNjJjODFiODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf1Umn/AJ5sTGpenttMbxDHa/KUS
IK0nJn2B/dLvB9cBn6wCLUH+yuIOT4FwDmpGUdT0OlU+95a3arMmRz3dr/QjMW6P
649P0a5yn+Qg+N8odDg0pQHPB1P+tfR1Nn7ySY2wb5NYElRyugKizd+kvoU4Qx+Q
w+yVr7hSmVyNh4NwDGavejV/DSbwrla25s56KDAX3PGmQUkyHLftcrTOsC1CeeCt
iPAEOb/y54Byt3G3Rspma+TcsewFm73Lx9TaulTSq/EI5ff6RJucsHY552XxH0XV
lmTKBW1IRyuPdRtUouK+xq0PRSYrMTaSeACy8Y9ZkrvBQTc3kTzFj9vH7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHqKq9MfcsRipqLn6kdkA7YsgbhyMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvZW9xcjB4OXl4R0ttb3VmcVIyUUR0aXlCdUhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWSoMA0G
CSqGSIb3DQEBCwUAA4IBAQBoefWcMT2M/XJjOgH2BxE3aLwa0kFWwalOBVYNK3yY
/769FpzdOHE6UcWRvspgeIDOu2S8W//DDjL0kPRNC6cZa565tB0u7gK8DGhKWRgp
vUvdqIQTzKNGoOcSWHdbcKM9IPhzHWfQ5RnNNNvpgdCaunQyITDO96Aa6S8Ufgm9
gqSItca43WyKsLEROoHdF7H+9de56p8pE0X7fHZ/0tNtfBe8c1998Dgk5p2Tu4Ll
GghGZeJRRGMmqJjetxYo3PAWHI40ojg5WQ2HvaWkSHtgiubiQysfCdwSqtBY+x5X
X1dmy5hM09ZoSXRoZvxhBx3YsxjbnKepChfPjx7IKYK3
-----END CERTIFICATE-----
Generated at Fri Sep 27 20:08:11 2024 by rpki-client on console.sobornost.net