Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/1vVQjuQdHU3Eew3VIUJ2ZM_mYEA.roa
File: 1vVQjuQdHU3Eew3VIUJ2ZM_mYEA.roa (raw, json)
Hash identifier: V75IfdmF9vv7fZJ9i7xOYiTJ9UFoGY8w2LWJty/JvJw=
Subject key identifier: D6:F5:50:8E:E4:1D:1D:4D:C4:7B:0D:D5:21:42:76:64:CF:E6:60:40
Certificate issuer: /CN=70f409ee8f1727c6d94ef794324caf4c5fd941a5
Certificate serial: 0430D83C
Authority key identifier: 70:F4:09:EE:8F:17:27:C6:D9:4E:F7:94:32:4C:AF:4C:5F:D9:41:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/1vVQjuQdHU3Eew3VIUJ2ZM_mYEA.roa
Signing time: Fri 24 Jun 2022 09:58:47 +0000
ROA not before: Fri 24 Jun 2022 09:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.139.63.0/24 maxlen: 24
185.139.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70309948 (0x430d83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f409ee8f1727c6d94ef794324caf4c5fd941a5
Validity
Not Before: Jun 24 09:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6f5508ee41d1d4dc47b0dd521427664cfe66040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:78:fa:e6:14:de:e8:15:09:d7:33:ed:1d:
9c:5d:1a:6e:a6:09:45:6b:03:97:3d:2b:c2:41:bc:
f2:e5:07:90:c3:6e:74:f0:9a:3f:c7:45:47:26:96:
db:8a:d6:f1:27:04:33:63:db:7d:e0:da:d8:9f:70:
3f:f3:9e:3e:42:e6:81:97:c4:58:b4:b7:b1:7b:1a:
03:34:21:9b:f2:e9:5d:f3:bc:db:22:18:04:c2:e3:
9e:b6:98:19:88:4e:64:30:5a:e4:a3:22:4b:a7:fa:
b1:de:67:c2:54:de:36:e9:71:a6:ee:53:70:78:29:
24:1f:10:30:f1:05:db:04:80:f7:19:b9:19:99:f9:
5b:28:d4:eb:34:19:81:e6:8a:70:a0:97:54:e9:d9:
96:7e:37:08:48:6f:13:dc:65:9f:e3:11:a3:75:6e:
f7:f3:4c:c7:1a:39:d8:75:1e:f8:54:a8:de:6d:76:
bf:19:61:0d:56:27:82:c6:34:b1:76:55:d7:a8:c0:
34:b3:e3:d3:cc:34:30:f3:c7:47:a6:78:6e:d5:12:
82:8e:28:39:b1:ad:2f:77:57:83:6d:58:31:09:89:
2c:09:b2:e7:7d:8c:ac:2c:0d:a2:39:1e:b6:45:f9:
6b:7f:60:7d:95:94:78:3f:63:04:ff:11:d8:ed:96:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F5:50:8E:E4:1D:1D:4D:C4:7B:0D:D5:21:42:76:64:CF:E6:60:40
X509v3 Authority Key Identifier:
keyid:70:F4:09:EE:8F:17:27:C6:D9:4E:F7:94:32:4C:AF:4C:5F:D9:41:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/1vVQjuQdHU3Eew3VIUJ2ZM_mYEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.60.0/24
185.139.63.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f9:6a:7c:85:b5:67:ae:ec:bc:cf:f4:89:a8:46:d2:ec:05:
ff:9c:bb:0a:3b:2b:f2:0c:33:d4:ed:a3:02:20:20:39:61:78:
20:77:e9:b3:31:41:ed:f9:cb:83:7e:b4:37:fa:7f:08:80:9e:
41:a1:5d:22:bf:af:8c:00:d2:f1:10:85:14:9d:df:93:bc:b0:
25:1e:d8:9e:42:5e:7f:18:3e:f6:80:74:ca:72:6c:10:c5:d9:
da:dc:da:04:75:29:ea:7f:12:1c:50:66:a1:e4:1b:17:15:ca:
d1:f2:ec:27:d4:86:4f:90:88:34:06:26:a8:31:ed:c2:67:c5:
14:39:08:16:d1:7c:d3:e0:d1:9b:82:47:e5:5a:c6:63:03:c7:
5c:1c:9a:db:09:d1:78:02:44:ea:ea:0a:2d:71:d5:de:9b:4f:
85:93:15:09:81:a3:0d:72:1f:b2:9e:79:fc:61:a3:03:5d:6e:
5c:4c:b7:b0:57:a5:0e:2f:ac:1c:cb:3b:d4:6a:88:9c:76:d7:
e4:30:bd:31:65:79:95:0b:17:38:74:89:4a:6a:b1:94:d7:c8:
66:6b:f7:5c:bb:3a:98:d4:2c:1e:09:8f:35:5d:68:e5:29:75:
81:10:27:6c:33:aa:63:1d:2a:e8:e3:1a:f7:ed:86:f9:5b:03:
30:62:79:66
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBDDYPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MGY0MDllZThmMTcyN2M2ZDk0ZWY3OTQzMjRjYWY0YzVmZDk0MWE1MB4XDTIyMDYy
NDA5NTg0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDZmNTUwOGVlNDFk
MWQ0ZGM0N2IwZGQ1MjE0Mjc2NjRjZmU2NjA0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIa8ePrmFN7oFQnXM+0dnF0abqYJRWsDlz0rwkG88uUHkMNu
dPCaP8dFRyaW24rW8ScEM2PbfeDa2J9wP/OePkLmgZfEWLS3sXsaAzQhm/LpXfO8
2yIYBMLjnraYGYhOZDBa5KMiS6f6sd5nwlTeNulxpu5TcHgpJB8QMPEF2wSA9xm5
GZn5WyjU6zQZgeaKcKCXVOnZln43CEhvE9xln+MRo3Vu9/NMxxo52HUe+FSo3m12
vxlhDVYngsY0sXZV16jANLPj08w0MPPHR6Z4btUSgo4oObGtL3dXg21YMQmJLAmy
532MrCwNojketkX5a39gfZWUeD9jBP8R2O2WPsUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTW9VCO5B0dTcR7DdUhQnZkz+ZgQDAfBgNVHSMEGDAWgBRw9AnujxcnxtlO
95QyTK9MX9lBpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NQUUo3bzhYSjhiWlR2ZVVNa3l2VEZfWlFhVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWYvY2IxYzI1LWI1NTYtNDVhNC1iN2MxLTE1ZjdiZDYwYjAyOC8x
LzF2VlFqdVFkSFUzRWV3M1ZJVUoyWk1fbVlFQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYv
Y2IxYzI1LWI1NTYtNDVhNC1iN2MxLTE1ZjdiZDYwYjAyOC8xL2NQUUo3bzhYSjhi
WlR2ZVVNa3l2VEZfWlFhVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALmLPAMEALmLPzANBgkqhkiG9w0B
AQsFAAOCAQEAQflqfIW1Z67svM/0iahG0uwF/5y7Cjsr8gwz1O2jAiAgOWF4IHfp
szFB7fnLg360N/p/CICeQaFdIr+vjADS8RCFFJ3fk7ywJR7YnkJefxg+9oB0ynJs
EMXZ2tzaBHUp6n8SHFBmoeQbFxXK0fLsJ9SGT5CINAYmqDHtwmfFFDkIFtF80+DR
m4JH5VrGYwPHXBya2wnReAJE6uoKLXHV3ptPhZMVCYGjDXIfsp55/GGjA11uXEy3
sFelDi+sHMs71GqInHbX5DC9MWV5lQsXOHSJSmqxlNfIZmv3XLs6mNQsHgmPNV1o
5Sl1gRAnbDOqYx0q6OMa9+2G+VsDMGJ5Zg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:27 2023 by rpki-client on console.sobornost.net