Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/PVZ09klvErDRn9wn1k_qVB3Q53g.roa
File: PVZ09klvErDRn9wn1k_qVB3Q53g.roa (raw, json)
Hash identifier: 8mhrg4u9cP77UnDzGIAIXklqqXlZiw1+Ek93xSp9Euo=
Subject key identifier: 3D:56:74:F6:49:6F:12:B0:D1:9F:DC:27:D6:4F:EA:54:1D:D0:E7:78
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 018CC348BCF5AF0F6A45A394A4EBD3349348
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/PVZ09klvErDRn9wn1k_qVB3Q53g.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12779
IP address blocks: 194.28.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bc:f5:af:0f:6a:45:a3:94:a4:eb:d3:34:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d5674f6496f12b0d19fdc27d64fea541dd0e778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:45:27:14:6f:1c:9b:08:0d:f7:5e:d7:3f:
45:e0:b6:a2:12:f3:8f:7b:1d:36:40:8a:d1:6d:1b:
89:45:35:7c:24:ae:e4:12:34:2c:e9:cd:f8:a0:37:
af:28:f1:6c:db:1c:6d:95:0b:be:66:d0:e3:be:06:
4f:c4:d3:87:4a:43:16:a9:9f:af:7d:b8:0a:d7:98:
1e:f9:60:42:32:ac:8f:58:1e:9a:9e:11:a5:78:5d:
87:da:89:e2:a4:a5:e1:d4:c4:bd:0f:ed:00:f3:cf:
df:bf:86:fb:e7:ba:52:c7:2a:2d:07:41:0e:a3:08:
fd:cb:26:ab:0a:8a:d7:38:37:3c:19:5c:47:77:ec:
53:80:02:4a:a6:9b:14:79:bd:0b:fb:b8:33:9f:f7:
36:39:a8:14:be:28:c1:31:0f:14:eb:d5:ab:65:a8:
e7:93:85:94:15:db:2e:0d:53:9a:2b:3d:ec:66:73:
f7:8a:7c:4b:8e:66:ea:40:31:75:ac:74:5a:c9:19:
44:7a:79:2a:9c:5e:cf:d8:f6:c1:9d:1f:29:26:d7:
6a:6f:06:48:7c:84:6e:08:dd:a9:33:60:67:93:9f:
b9:71:17:15:3e:4a:c3:9c:5f:00:e9:e6:47:4a:1e:
1b:6a:2c:4e:c5:ea:e0:08:8a:65:27:f1:53:1e:25:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:74:F6:49:6F:12:B0:D1:9F:DC:27:D6:4F:EA:54:1D:D0:E7:78
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/PVZ09klvErDRn9wn1k_qVB3Q53g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.116.0/22
Signature Algorithm: sha256WithRSAEncryption
26:44:bf:6b:83:da:9b:f7:d3:30:d1:39:a2:81:cf:5d:25:4e:
4d:2f:b0:8e:57:31:3f:5b:f8:b2:eb:93:0b:fc:7a:f4:c5:ba:
ff:51:88:98:cb:b5:30:8b:91:e3:65:b7:b8:71:4a:e0:84:90:
1b:89:ae:e2:1d:fe:21:c6:e7:2c:a7:e8:eb:df:43:12:b4:5d:
c3:bb:a2:30:90:40:e2:9f:66:c6:b3:43:42:13:db:c2:6c:8f:
5c:73:aa:57:89:31:41:0b:fd:ae:f9:e9:77:db:ae:6f:c4:71:
6d:1a:8b:26:f5:30:9c:2e:fd:51:0e:9a:13:f2:16:e9:ee:01:
74:cd:b1:f4:7e:86:b2:e0:23:2f:ae:93:77:01:e8:ff:eb:ad:
8a:6c:d8:7f:b2:46:ac:89:b2:92:50:64:9d:85:05:65:c7:02:
4d:1f:96:9b:1b:a0:93:cd:0e:08:03:f0:7d:fe:8b:ec:cf:13:
cc:53:0b:5e:69:55:c3:25:19:31:ca:b9:ce:a6:bd:3e:b9:37:
8a:3f:7d:4f:a9:cf:26:0f:75:45:2e:fa:69:85:46:f8:ac:82:
6b:0e:84:17:b8:74:00:a7:6c:d5:df:3f:3a:db:8f:3e:78:bc:
86:2d:b0:b7:95:0e:be:00:9e:a3:cb:f8:70:f3:e4:93:41:c9:
d4:2e:27:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSLz1rw9qRaOUpOvTNJNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkODE4ZDkzZTY4NTcxZjk1YzQ1ZWJjMjgxNTk4YzdjOThm
MzI1NzcwHhcNMjQwMTAxMDQyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDU2NzRmNjQ5NmYxMmIwZDE5ZmRjMjdkNjRmZWE1NDFkZDBlNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM5FJxRvHJsIDfde1z9F4LaiEvOP
ex02QIrRbRuJRTV8JK7kEjQs6c34oDevKPFs2xxtlQu+ZtDjvgZPxNOHSkMWqZ+v
fbgK15ge+WBCMqyPWB6anhGleF2H2onipKXh1MS9D+0A88/fv4b757pSxyotB0EO
owj9yyarCorXODc8GVxHd+xTgAJKppsUeb0L+7gzn/c2OagUvijBMQ8U69WrZajn
k4WUFdsuDVOaKz3sZnP3inxLjmbqQDF1rHRayRlEenkqnF7P2PbBnR8pJtdqbwZI
fIRuCN2pM2Bnk5+5cRcVPkrDnF8A6eZHSh4baixOxergCIplJ/FTHiV50wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD1WdPZJbxKw0Z/cJ9ZP6lQd0Od4MB8GA1UdIwQY
MBaAFP2BjZPmhXH5XEXrwoFZjHyY8yV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMt
ZjY5OGIwNWJhOTcxLzEvUFZaMDlrbHZFckRSbjl3bjFrX3FWQjNRNTNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMtZjY5OGIwNWJhOTcx
LzEvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwhx0MA0G
CSqGSIb3DQEBCwUAA4IBAQAmRL9rg9qb99Mw0Tmigc9dJU5NL7COVzE/W/iy65ML
/Hr0xbr/UYiYy7Uwi5HjZbe4cUrghJAbia7iHf4hxucsp+jr30MStF3Du6IwkEDi
n2bGs0NCE9vCbI9cc6pXiTFBC/2u+el3265vxHFtGosm9TCcLv1RDpoT8hbp7gF0
zbH0foay4CMvrpN3Aej/662KbNh/skasibKSUGSdhQVlxwJNH5abG6CTzQ4IA/B9
/ovszxPMUwteaVXDJRkxyrnOpr0+uTeKP31Pqc8mD3VFLvpphUb4rIJrDoQXuHQA
p2zV3z86248+eLyGLbC3lQ6+AJ6jy/hw8+STQcnULicv
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:11 2024 by rpki-client on console.sobornost.net