Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/rVdZo4dTzsfhpQ6QNxn9MdXihNg.roa
File: rVdZo4dTzsfhpQ6QNxn9MdXihNg.roa (raw, json)
Hash identifier: IdR2LGNSltiWZjT1s8s2sf9Y0pygwqob9p+fX22nvTU=
Subject key identifier: AD:57:59:A3:87:53:CE:C7:E1:A5:0E:90:37:19:FD:31:D5:E2:84:D8
Certificate issuer: /CN=cf0b4e42012ab2561248bc18f0442c2007c8caa2
Certificate serial: 018570151CE07F074ABE4B47948717C53BF9
Authority key identifier: CF:0B:4E:42:01:2A:B2:56:12:48:BC:18:F0:44:2C:20:07:C8:CA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwtOQgEqslYSSLwY8EQsIAfIyqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/rVdZo4dTzsfhpQ6QNxn9MdXihNg.roa
Signing time: Mon 02 Jan 2023 01:25:09 +0000
ROA not before: Mon 02 Jan 2023 01:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50272
IP address blocks: 91.235.60.0/22 maxlen: 22
195.238.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:1c:e0:7f:07:4a:be:4b:47:94:87:17:c5:3b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0b4e42012ab2561248bc18f0442c2007c8caa2
Validity
Not Before: Jan 2 01:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad5759a38753cec7e1a50e903719fd31d5e284d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b7:6d:bf:7a:fb:43:55:5b:d7:1d:e3:3f:43:
65:87:43:c7:59:aa:26:06:94:13:4e:7e:a7:4f:98:
83:7f:30:7f:eb:7d:a8:76:4a:b6:c6:96:75:15:f2:
9a:67:b1:0e:11:10:5d:d5:be:f0:03:08:63:36:d9:
80:fb:fc:4a:93:10:e7:3e:91:08:bf:bb:37:96:09:
07:96:10:6d:01:13:e1:a2:e0:88:b4:45:8f:f7:1b:
04:aa:a3:64:39:0a:a9:65:c0:bb:4f:4c:4a:12:0b:
ee:f5:c4:60:cb:43:34:16:54:00:86:5d:2d:1c:94:
1d:a3:50:e5:b9:9c:6c:60:d6:4f:0e:8a:5b:a8:80:
b9:8f:31:a2:62:59:52:b4:1b:5e:e2:7a:56:8e:cb:
e7:5d:d5:c5:d2:f7:47:61:bc:28:3c:3d:54:ae:d2:
5a:d1:ef:73:a6:a6:74:26:99:99:5a:a3:0f:e8:64:
84:d7:81:83:29:ae:fa:7d:3c:4b:ac:06:37:a8:22:
9b:72:0f:09:1c:b3:5b:28:bd:85:b4:c1:5d:9c:ff:
4d:3e:26:74:71:42:37:94:25:46:c2:bd:aa:c7:d9:
07:a5:97:5f:be:6e:7b:4b:79:da:5f:d2:e1:8e:46:
0b:c1:27:75:98:45:30:7e:73:87:8e:d3:47:0a:bf:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:57:59:A3:87:53:CE:C7:E1:A5:0E:90:37:19:FD:31:D5:E2:84:D8
X509v3 Authority Key Identifier:
keyid:CF:0B:4E:42:01:2A:B2:56:12:48:BC:18:F0:44:2C:20:07:C8:CA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwtOQgEqslYSSLwY8EQsIAfIyqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/rVdZo4dTzsfhpQ6QNxn9MdXihNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.60.0/22
195.238.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:26:6b:21:de:c6:a5:87:0d:5d:4d:41:7e:8a:93:ae:34:a7:
c4:08:f8:7c:12:50:ac:72:53:54:16:6e:2d:1c:7d:7e:e0:0c:
16:88:56:14:c0:47:ce:69:9e:8d:c4:29:fb:cb:9a:0f:a9:c3:
c4:a1:95:80:64:ea:e9:ad:7f:91:54:92:6a:eb:d0:c8:56:ee:
a4:4c:ec:3b:a0:48:ff:67:c9:6f:63:9e:b3:e0:53:65:5d:96:
2b:ae:35:bc:04:33:94:30:ab:0d:10:df:5e:82:20:a7:2f:e8:
33:f9:40:c8:40:96:ed:b0:06:42:c7:af:2f:73:d7:54:45:c1:
96:e1:e0:83:fd:a9:46:70:62:80:a9:ed:f5:64:33:7f:7b:e3:
d7:35:95:9f:47:cd:6e:39:71:e3:74:8c:74:df:22:aa:46:6f:
95:21:e7:e4:60:78:03:55:00:6a:06:dc:d4:80:f8:7f:58:99:
03:b1:64:86:4b:01:32:e7:2e:85:b7:2d:78:c6:a2:c7:9c:0e:
3c:7f:98:d3:93:31:de:9d:bd:97:c8:66:ab:b5:90:d2:49:99:
fd:12:58:1d:b4:33:ad:18:c8:4e:1a:ab:19:4f:a8:7b:8c:17:
c8:6f:b4:c4:8a:8d:30:55:03:a2:7d:28:ae:87:d6:e7:bb:60:
d3:ad:97:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwFRzgfwdKvktHlIcXxTv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMGI0ZTQyMDEyYWIyNTYxMjQ4YmMxOGYwNDQyYzIwMDdj
OGNhYTIwHhcNMjMwMTAyMDEyNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDU3NTlhMzg3NTNjZWM3ZTFhNTBlOTAzNzE5ZmQzMWQ1ZTI4NGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bdtv3r7Q1Vb1x3jP0Nlh0PHWaom
BpQTTn6nT5iDfzB/632odkq2xpZ1FfKaZ7EOERBd1b7wAwhjNtmA+/xKkxDnPpEI
v7s3lgkHlhBtARPhouCItEWP9xsEqqNkOQqpZcC7T0xKEgvu9cRgy0M0FlQAhl0t
HJQdo1DluZxsYNZPDopbqIC5jzGiYllStBte4npWjsvnXdXF0vdHYbwoPD1UrtJa
0e9zpqZ0JpmZWqMP6GSE14GDKa76fTxLrAY3qCKbcg8JHLNbKL2FtMFdnP9NPiZ0
cUI3lCVGwr2qx9kHpZdfvm57S3naX9LhjkYLwSd1mEUwfnOHjtNHCr+cxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK1XWaOHU87H4aUOkDcZ/THV4oTYMB8GA1UdIwQY
MBaAFM8LTkIBKrJWEki8GPBELCAHyMqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvend0T1FnRXFzbFlTU0x3WThFUXNJQWZJeXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iOTQxMWMtMDIwMS00NDMwLWJmYTUt
NTMyZGUyODM0OGFiLzEvclZkWm80ZFR6c2ZocFE2UU54bjlNZFhpaE5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iOTQxMWMtMDIwMS00NDMwLWJmYTUtNTMyZGUyODM0OGFi
LzEvend0T1FnRXFzbFlTU0x3WThFUXNJQWZJeXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+s8AwQA
w+7qMA0GCSqGSIb3DQEBCwUAA4IBAQCaJmsh3salhw1dTUF+ipOuNKfECPh8ElCs
clNUFm4tHH1+4AwWiFYUwEfOaZ6NxCn7y5oPqcPEoZWAZOrprX+RVJJq69DIVu6k
TOw7oEj/Z8lvY56z4FNlXZYrrjW8BDOUMKsNEN9egiCnL+gz+UDIQJbtsAZCx68v
c9dURcGW4eCD/alGcGKAqe31ZDN/e+PXNZWfR81uOXHjdIx03yKqRm+VIefkYHgD
VQBqBtzUgPh/WJkDsWSGSwEy5y6Fty14xqLHnA48f5jTkzHenb2XyGartZDSSZn9
ElgdtDOtGMhOGqsZT6h7jBfIb7TEio0wVQOifSiuh9bnu2DTrZcz
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net