Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/r8Wra0lBrqNaiaUS_FLk60j16fM.roa
File: r8Wra0lBrqNaiaUS_FLk60j16fM.roa (raw, json)
Hash identifier: 2p2BnlezbdIAgjR0O9uN64YfvayTCD9RVaGzE8ZqQMs=
Subject key identifier: AF:C5:AB:6B:49:41:AE:A3:5A:89:A5:12:FC:52:E4:EB:48:F5:E9:F3
Certificate issuer: /CN=5ff4616f5cca34634b42311a0ea3d11864dada22
Certificate serial: 018B4756
Authority key identifier: 5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/r8Wra0lBrqNaiaUS_FLk60j16fM.roa
Signing time: Sat 01 Jan 2022 09:04:24 +0000
ROA not before: Sat 01 Jan 2022 09:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48715
IP address blocks: 194.56.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25904982 (0x18b4756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4616f5cca34634b42311a0ea3d11864dada22
Validity
Not Before: Jan 1 09:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afc5ab6b4941aea35a89a512fc52e4eb48f5e9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:4c:6b:1b:a7:00:3f:9a:10:b9:b5:bf:02:
13:a3:39:c4:3b:a1:e9:3d:0c:eb:82:0c:92:63:83:
4d:be:6f:70:f9:a8:45:2d:7a:08:11:aa:f8:b3:22:
29:bb:18:6a:4e:34:62:1a:26:45:a9:ea:64:6e:ee:
8e:b6:47:83:b2:4b:15:df:94:8a:a4:81:b2:d2:3f:
25:74:5f:a0:b9:93:2f:64:9a:7e:fd:b8:87:d7:db:
77:bf:78:5f:b4:3b:03:6d:11:fe:41:e2:80:cc:dd:
09:2d:f9:db:ef:26:87:40:40:1a:ab:0a:22:b0:b0:
40:1a:a3:39:94:12:7a:0a:69:6f:d7:b4:f0:69:8e:
c9:9d:d5:40:2d:7c:24:ab:2a:3c:da:cd:3b:94:43:
a6:fb:01:86:ac:1b:08:c9:66:0b:28:d0:68:8b:58:
1a:48:48:de:2d:00:6b:40:81:64:87:f7:41:bd:3b:
cb:2e:b2:58:d9:a5:3a:25:d7:96:06:1c:be:89:c6:
99:ab:1d:1d:15:0b:cd:4a:1c:2b:fe:47:42:b8:4a:
3c:df:6a:d8:07:b1:52:4a:f7:43:b0:b3:ac:67:48:
09:9d:af:fc:35:37:37:bf:b6:07:b6:5f:eb:71:e3:
70:77:dc:4e:63:74:00:bc:dc:46:e2:8d:dc:8a:cb:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C5:AB:6B:49:41:AE:A3:5A:89:A5:12:FC:52:E4:EB:48:F5:E9:F3
X509v3 Authority Key Identifier:
keyid:5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/r8Wra0lBrqNaiaUS_FLk60j16fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.148.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ba:37:9b:8d:6d:36:d2:76:a3:ec:c0:ca:c8:a4:c7:22:41:
af:05:41:b8:a7:2d:ee:c0:aa:05:a7:93:e7:0d:75:bd:97:59:
3b:a0:bb:21:0d:e8:a7:17:62:08:1d:d0:d6:90:73:28:07:24:
be:6d:e2:b5:09:22:bc:14:0a:c6:60:73:87:9a:66:a5:d9:ee:
b2:b6:34:95:75:d0:96:16:a5:a4:89:a5:d9:d3:d7:f2:7b:08:
11:1e:49:4c:aa:d9:c0:e4:af:3b:d0:f7:89:8c:c1:a1:aa:0f:
8f:4f:40:d7:c5:cf:20:ef:56:f2:f7:11:93:74:9e:cc:a4:5e:
34:c8:1d:d3:04:e4:54:80:b3:b2:db:49:12:36:6a:b3:44:6d:
6d:8b:3d:f5:4b:68:46:e3:c3:db:03:f8:fb:87:40:7e:d7:3f:
d7:ef:29:2f:36:b0:b9:c8:2d:d9:3b:e1:8e:8d:ab:7c:0d:f9:
5a:bd:e1:e7:08:c3:07:fd:dd:1b:8f:77:a6:7c:cc:7f:f7:a3:
ea:87:79:36:dc:c1:e8:32:14:9d:71:ec:33:e6:15:e9:04:02:
07:43:59:fc:51:5a:ce:c3:eb:d9:af:51:c8:28:e0:6e:ba:67:
03:a9:57:44:94:0a:ef:ae:db:c2:5c:72:3e:69:fe:a7:10:09:
85:08:35:1d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAYtHVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZmY0NjE2ZjVjY2EzNDYzNGI0MjMxMWEwZWEzZDExODY0ZGFkYTIyMB4XDTIyMDEw
MTA5MDQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWZjNWFiNmI0OTQx
YWVhMzVhODlhNTEyZmM1MmU0ZWI0OGY1ZTlmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALCVTGsbpwA/mhC5tb8CE6M5xDuh6T0M64IMkmODTb5vcPmo
RS16CBGq+LMiKbsYak40YhomRanqZG7ujrZHg7JLFd+UiqSBstI/JXRfoLmTL2Sa
fv24h9fbd794X7Q7A20R/kHigMzdCS352+8mh0BAGqsKIrCwQBqjOZQSegppb9e0
8GmOyZ3VQC18JKsqPNrNO5RDpvsBhqwbCMlmCyjQaItYGkhI3i0Aa0CBZIf3Qb07
yy6yWNmlOiXXlgYcvonGmasdHRULzUocK/5HQrhKPN9q2AexUkr3Q7CzrGdICZ2v
/DU3N7+2B7Zf63HjcHfcTmN0ALzcRuKN3IrLV1cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSvxatrSUGuo1qJpRL8UuTrSPXp8zAfBgNVHSMEGDAWgBRf9GFvXMo0Y0tC
MRoOo9EYZNraIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hfUmhiMXpLTkdOTFFqRWFEcVBSR0dUYTJpSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvNmVlMjI1LTFkM2UtNDQ0OC05ZTA4LWM5ZDAzZmFkMDI1YS8x
L3I4V3JhMGxCcnFOYWlhVVNfRkxrNjBqMTZmTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
NmVlMjI1LTFkM2UtNDQ0OC05ZTA4LWM5ZDAzZmFkMDI1YS8xL1hfUmhiMXpLTkdO
TFFqRWFEcVBSR0dUYTJpSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI4lDANBgkqhkiG9w0BAQsFAAOC
AQEANLo3m41tNtJ2o+zAysikxyJBrwVBuKct7sCqBaeT5w11vZdZO6C7IQ3opxdi
CB3Q1pBzKAckvm3itQkivBQKxmBzh5pmpdnusrY0lXXQlhalpIml2dPX8nsIER5J
TKrZwOSvO9D3iYzBoaoPj09A18XPIO9W8vcRk3SezKReNMgd0wTkVICzsttJEjZq
s0RtbYs99UtoRuPD2wP4+4dAftc/1+8pLzawucgt2Tvhjo2rfA35Wr3h5wjDB/3d
G493pnzMf/ej6od5NtzB6DIUnXHsM+YV6QQCB0NZ/FFazsPr2a9RyCjgbrpnA6lX
RJQK767bwlxyPmn+pxAJhQg1HQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:19 2023 by rpki-client on console.sobornost.net