Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/AST1INghF9WajRMGPwnQE7dW_0I.roa
File: AST1INghF9WajRMGPwnQE7dW_0I.roa (raw, json)
Hash identifier: kJx22WNZeDWKgPqRUKwPmWe9MRTulNmbrIkyfCSoEKE=
Subject key identifier: 01:24:F5:20:D8:21:17:D5:9A:8D:13:06:3F:09:D0:13:B7:56:FF:42
Certificate issuer: /CN=e188d5c34c4c1e1768fd8afc8d0659c710e1111b
Certificate serial: 018CC6B786B91E9A9F01391D9858811E7E33
Authority key identifier: E1:88:D5:C3:4C:4C:1E:17:68:FD:8A:FC:8D:06:59:C7:10:E1:11:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YjVw0xMHhdo_Yr8jQZZxxDhERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/AST1INghF9WajRMGPwnQE7dW_0I.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 80.68.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:86:b9:1e:9a:9f:01:39:1d:98:58:81:1e:7e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e188d5c34c4c1e1768fd8afc8d0659c710e1111b
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0124f520d82117d59a8d13063f09d013b756ff42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:a5:f8:5c:66:8c:52:df:2f:be:8b:69:6c:
d9:ba:03:45:90:ea:0a:e3:6f:bf:e3:ab:4c:9b:4a:
28:af:58:66:7a:93:e6:58:4a:b4:7e:44:29:02:ec:
18:7e:dd:70:d2:5d:b4:94:05:03:63:19:bf:29:0f:
64:0d:87:91:67:39:40:53:1a:6b:fc:b1:3d:8e:34:
07:27:81:2f:e1:26:22:32:c5:b3:e9:76:d1:2c:cb:
b2:ec:6d:0f:6b:be:bb:58:d8:4f:67:85:26:fb:ad:
0a:32:4e:03:f6:a0:53:ce:74:2b:8d:b0:13:68:0c:
9a:b6:06:d6:0c:1a:92:3c:25:3c:0b:e1:58:c7:19:
db:c6:71:1c:10:1f:5a:9c:1e:98:a5:3c:5d:d7:a1:
81:4f:71:61:d2:34:be:4f:ab:e7:ba:d0:d1:19:01:
c0:d5:21:35:1d:b7:b6:73:b9:d6:df:3a:fd:66:4e:
f7:ad:22:94:51:3d:f6:00:a4:c3:eb:9a:c2:d8:9a:
e0:cf:df:c7:47:42:3a:03:53:ab:4f:9a:95:3e:ba:
11:dd:10:b3:3a:d6:ad:b7:92:b0:65:a1:96:72:57:
2e:d5:f4:c1:8c:93:ec:97:b0:2b:f6:af:33:07:7f:
37:c2:15:53:3d:c1:fd:3a:55:69:cc:ee:10:b7:c7:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:F5:20:D8:21:17:D5:9A:8D:13:06:3F:09:D0:13:B7:56:FF:42
X509v3 Authority Key Identifier:
keyid:E1:88:D5:C3:4C:4C:1E:17:68:FD:8A:FC:8D:06:59:C7:10:E1:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YjVw0xMHhdo_Yr8jQZZxxDhERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/AST1INghF9WajRMGPwnQE7dW_0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/4YjVw0xMHhdo_Yr8jQZZxxDhERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.156.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:80:5d:c1:fb:a5:4f:77:f8:27:64:c9:9d:8d:6f:23:15:c3:
43:c5:2d:ef:c6:e0:6d:47:1a:35:3a:28:c0:32:dd:89:44:24:
2f:3a:f0:a9:11:74:2b:9d:b0:55:80:fa:72:ce:1a:83:75:a1:
5a:1b:52:fe:8c:8b:be:10:17:e5:dc:d0:db:2c:7e:f4:a2:6c:
f7:31:19:44:19:f0:9c:73:73:0b:39:73:c8:a7:24:b0:06:f6:
02:80:1f:0c:64:2e:f9:b0:1a:cc:ef:ad:c4:e6:34:83:ef:c0:
74:45:5d:a3:23:b2:aa:6c:ce:fd:ea:d7:7f:76:12:80:6c:e5:
93:e0:04:70:d1:df:c8:0c:b7:84:b7:0e:67:da:dc:e3:d5:89:
6a:7f:1f:1b:9e:e6:30:8f:ad:dd:ec:78:cc:ff:0e:48:4f:1c:
d6:22:2d:a5:38:cd:16:86:63:1e:06:99:a0:bf:20:ad:ce:17:
55:64:cb:04:1b:5f:81:aa:24:3a:5c:11:f9:c0:f5:62:60:82:
2b:74:bc:cc:e3:4f:6a:fd:ab:d1:d4:39:0e:71:fe:6f:3a:81:
94:3e:61:b7:db:d2:70:1c:fc:08:ee:85:bc:8e:68:3d:b4:e2:
1c:d7:09:58:be:e4:33:27:8e:7f:5d:3f:d8:e2:72:1a:3b:af:
24:f3:13:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt4a5HpqfATkdmFiBHn4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODhkNWMzNGM0YzFlMTc2OGZkOGFmYzhkMDY1OWM3MTBl
MTExMWIwHhcNMjQwMTAxMjAyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTI0ZjUyMGQ4MjExN2Q1OWE4ZDEzMDYzZjA5ZDAxM2I3NTZmZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlel+FxmjFLfL76LaWzZugNFkOoK
42+/46tMm0oor1hmepPmWEq0fkQpAuwYft1w0l20lAUDYxm/KQ9kDYeRZzlAUxpr
/LE9jjQHJ4Ev4SYiMsWz6XbRLMuy7G0Pa767WNhPZ4Um+60KMk4D9qBTznQrjbAT
aAyatgbWDBqSPCU8C+FYxxnbxnEcEB9anB6YpTxd16GBT3Fh0jS+T6vnutDRGQHA
1SE1Hbe2c7nW3zr9Zk73rSKUUT32AKTD65rC2Jrgz9/HR0I6A1OrT5qVProR3RCz
Otatt5KwZaGWclcu1fTBjJPsl7Ar9q8zB383whVTPcH9OlVpzO4Qt8dOHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAEk9SDYIRfVmo0TBj8J0BO3Vv9CMB8GA1UdIwQY
MBaAFOGI1cNMTB4XaP2K/I0GWccQ4REbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlqVncweE1IaGRvX1lyOGpRWlp4eERoRVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kNDVkYTktNzcxOC00OWI5LWJjODMt
MDJiODcyMjFmMWVmLzEvQVNUMUlOZ2hGOVdhalJNR1B3blFFN2RXXzBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kNDVkYTktNzcxOC00OWI5LWJjODMtMDJiODcyMjFmMWVm
LzEvNFlqVncweE1IaGRvX1lyOGpRWlp4eERoRVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEScMA0G
CSqGSIb3DQEBCwUAA4IBAQCrgF3B+6VPd/gnZMmdjW8jFcNDxS3vxuBtRxo1OijA
Mt2JRCQvOvCpEXQrnbBVgPpyzhqDdaFaG1L+jIu+EBfl3NDbLH70omz3MRlEGfCc
c3MLOXPIpySwBvYCgB8MZC75sBrM763E5jSD78B0RV2jI7KqbM796td/dhKAbOWT
4ARw0d/IDLeEtw5n2tzj1Ylqfx8bnuYwj63d7HjM/w5ITxzWIi2lOM0WhmMeBpmg
vyCtzhdVZMsEG1+BqiQ6XBH5wPViYIIrdLzM409q/avR1DkOcf5vOoGUPmG329Jw
HPwI7oW8jmg9tOIc1wlYvuQzJ45/XT/Y4nIaO68k8xPQ
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:44 2024 by rpki-client on console.sobornost.net