Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/ptz-oJKpSY1ZUvJb7YZfr44hjk0.roa
File: ptz-oJKpSY1ZUvJb7YZfr44hjk0.roa (raw, json)
Hash identifier: +Gq1hSRfSweRhErM45IHZcQ3mQWls+spGfOnwoZCTnU=
Subject key identifier: A6:DC:FE:A0:92:A9:49:8D:59:52:F2:5B:ED:86:5F:AF:8E:21:8E:4D
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 018CC56ECAFCF6321B9EBE5EFF05A50C6340
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/ptz-oJKpSY1ZUvJb7YZfr44hjk0.roa
Signing time: Mon 01 Jan 2024 14:30:21 +0000
ROA not before: Mon 01 Jan 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42778
IP address blocks: 194.110.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ca:fc:f6:32:1b:9e:be:5e:ff:05:a5:0c:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6dcfea092a9498d5952f25bed865faf8e218e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:14:d7:23:b9:65:8d:b6:9c:f8:cf:a2:98:
fe:22:48:78:2a:ee:b0:a7:4f:c2:88:19:8f:7b:84:
fc:65:50:d7:99:eb:a2:b6:94:d9:c1:08:3c:82:fd:
5e:85:cc:49:d3:71:d1:0d:f6:ea:f1:13:73:a4:2e:
0d:ee:27:41:2f:1d:3b:a1:bc:44:66:ed:99:e1:99:
ed:2b:a2:c6:f8:d4:03:37:4d:03:08:78:4f:f3:41:
67:68:0e:54:cd:a5:36:7a:fc:fb:ac:78:e6:eb:ba:
cd:b6:22:e5:36:72:26:70:26:fe:ce:e9:bb:35:e3:
17:f5:d4:0d:07:1b:e5:bd:72:fc:24:2c:be:ee:be:
4d:32:1c:b1:4b:d0:73:33:75:38:cc:ce:2a:3b:7f:
f8:3e:d4:42:93:9f:76:02:56:67:8e:82:db:2f:91:
8c:f7:f3:9b:f1:2f:c3:7c:58:47:28:6f:6a:6e:db:
ec:08:67:b9:80:42:22:bc:fb:c1:fa:d7:49:b4:07:
dc:da:2f:04:ab:2b:c0:b3:f7:39:16:20:ef:d6:5b:
a3:61:fc:08:d9:0d:4e:6d:81:29:15:78:d9:17:9d:
a1:ea:09:51:dd:dc:74:6e:a2:0f:25:3a:1a:d9:ee:
e6:0d:f6:c6:b7:d1:ed:09:2b:c7:ee:b3:16:20:0f:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DC:FE:A0:92:A9:49:8D:59:52:F2:5B:ED:86:5F:AF:8E:21:8E:4D
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/ptz-oJKpSY1ZUvJb7YZfr44hjk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.240.0/24
Signature Algorithm: sha256WithRSAEncryption
18:61:5e:84:6b:f2:a9:b5:7b:01:c8:cd:7d:92:e9:80:a2:05:
38:de:ca:40:61:17:1a:fc:3e:f1:34:58:5e:8c:75:5c:1d:1f:
dd:95:b2:bf:9d:5a:62:aa:17:7e:6c:09:3c:1f:f1:e9:22:fb:
15:03:5a:3c:d9:fe:1c:2d:99:a5:52:44:0e:ab:11:16:76:5e:
40:33:af:78:10:22:04:c3:1d:c4:24:1b:23:27:55:e2:8e:75:
04:e1:21:02:17:a8:64:35:df:fe:40:24:91:3a:75:86:4a:ad:
21:7f:9c:e0:16:8a:af:01:65:5a:82:df:f6:1f:6d:f0:fb:74:
94:ed:0f:0c:c7:61:9b:67:be:70:a6:ab:51:7d:d1:16:6e:6b:
f8:a4:7e:84:08:a6:9a:09:07:cb:26:6d:ce:21:81:66:b0:fb:
cc:da:c6:31:c6:0b:34:d8:1e:2e:63:07:50:79:ec:fa:b6:00:
1d:a7:de:81:fb:79:dc:7f:02:b4:77:d3:b1:80:9f:36:c6:9d:
b9:9a:15:ca:76:46:c4:b6:cc:b0:39:35:fb:62:3f:e3:33:a8:
b8:0b:b6:3a:33:1a:ac:ba:2a:41:61:91:0e:54:46:2f:53:5c:
a4:19:29:c3:ba:83:b9:7a:01:7d:97:dc:86:de:99:32:7b:22:
24:36:e3:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbsr89jIbnr5e/wWlDGNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmZiOWZkMzFjMmM2MGFiZGExNGUwYjNjOTJhODk4NjY4
MjlkOGUwHhcNMjQwMTAxMTQzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmRjZmVhMDkyYTk0OThkNTk1MmYyNWJlZDg2NWZhZjhlMjE4ZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8EU1yO5ZY22nPjPopj+Ikh4Ku6w
p0/CiBmPe4T8ZVDXmeuitpTZwQg8gv1ehcxJ03HRDfbq8RNzpC4N7idBLx07obxE
Zu2Z4ZntK6LG+NQDN00DCHhP80FnaA5UzaU2evz7rHjm67rNtiLlNnImcCb+zum7
NeMX9dQNBxvlvXL8JCy+7r5NMhyxS9BzM3U4zM4qO3/4PtRCk592AlZnjoLbL5GM
9/Ob8S/DfFhHKG9qbtvsCGe5gEIivPvB+tdJtAfc2i8EqyvAs/c5FiDv1lujYfwI
2Q1ObYEpFXjZF52h6glR3dx0bqIPJToa2e7mDfbGt9HtCSvH7rMWIA9nmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKbc/qCSqUmNWVLyW+2GX6+OIY5NMB8GA1UdIwQY
MBaAFKYvuf0xwsYKvaFOCzySqJhmgp2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQt
MWFiYjhlMjdiNGQxLzEvcHR6LW9KS3BTWTFaVXZKYjdZWmZyNDRoamswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQtMWFiYjhlMjdiNGQx
LzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm7wMA0G
CSqGSIb3DQEBCwUAA4IBAQAYYV6Ea/KptXsByM19kumAogU43spAYRca/D7xNFhe
jHVcHR/dlbK/nVpiqhd+bAk8H/HpIvsVA1o82f4cLZmlUkQOqxEWdl5AM694ECIE
wx3EJBsjJ1XijnUE4SECF6hkNd/+QCSROnWGSq0hf5zgFoqvAWVagt/2H23w+3SU
7Q8Mx2GbZ75wpqtRfdEWbmv4pH6ECKaaCQfLJm3OIYFmsPvM2sYxxgs02B4uYwdQ
eez6tgAdp96B+3ncfwK0d9OxgJ82xp25mhXKdkbEtsywOTX7Yj/jM6i4C7Y6Mxqs
uipBYZEOVEYvU1ykGSnDuoO5egF9l9yG3pkyeyIkNuP/
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net