Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9322ea-d8fd-464e-a69d-3fc536931b8f/1/DQswR6PDhMnDc2Tq5Wp2MaTFoZ0.roa
File: DQswR6PDhMnDc2Tq5Wp2MaTFoZ0.roa (raw, json)
Hash identifier: /jkav3Zq1wFLB+CIof3beFVxxjK/IKmRxO5mWkkMIHI=
Subject key identifier: 0D:0B:30:47:A3:C3:84:C9:C3:73:64:EA:E5:6A:76:31:A4:C5:A1:9D
Certificate issuer: /CN=fda14e678603efd1f573def5f46adcd3e818f4e3
Certificate serial: 0185629491E4840B95C0663742DC55D5A138
Authority key identifier: FD:A1:4E:67:86:03:EF:D1:F5:73:DE:F5:F4:6A:DC:D3:E8:18:F4:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aFOZ4YD79H1c9719Grc0-gY9OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9322ea-d8fd-464e-a69d-3fc536931b8f/1/DQswR6PDhMnDc2Tq5Wp2MaTFoZ0.roa
Signing time: Fri 30 Dec 2022 10:29:41 +0000
ROA not before: Fri 30 Dec 2022 10:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31627
IP address blocks: 193.16.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:94:91:e4:84:0b:95:c0:66:37:42:dc:55:d5:a1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda14e678603efd1f573def5f46adcd3e818f4e3
Validity
Not Before: Dec 30 10:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d0b3047a3c384c9c37364eae56a7631a4c5a19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:d7:54:d0:a9:86:67:74:cb:64:49:9a:7f:
38:19:f6:ac:58:40:20:99:71:d2:92:cb:0b:54:17:
2a:75:ca:b5:ba:61:7e:b0:8f:4e:af:5f:fe:66:1f:
ad:94:51:d7:96:be:0a:8e:37:b6:a8:7c:9b:38:d3:
95:40:09:69:6a:26:fd:8b:22:87:3d:6a:07:bb:0a:
02:31:79:20:22:06:9f:b7:79:b7:4d:6c:42:c2:5b:
9b:f9:66:a5:eb:c6:16:e8:a6:24:51:17:4e:23:04:
5f:92:a7:38:2b:8a:1c:e5:71:d9:31:2a:15:a0:c2:
17:43:3f:3f:4f:cc:69:bb:6d:79:e2:50:84:a1:9f:
b8:75:2c:59:cf:0e:8d:08:a0:4f:a3:38:03:21:93:
4b:4b:b9:06:f1:59:a8:09:23:58:57:37:02:d4:b7:
7b:ca:f8:20:13:24:87:cd:91:b2:22:53:d7:96:45:
a8:bd:b7:49:9b:86:41:ae:3c:eb:76:64:a5:ad:04:
71:9b:0d:2a:20:01:8a:11:5c:18:53:ed:80:94:6e:
61:1a:9b:3f:8d:b2:5e:9a:91:2f:0d:53:17:e8:9f:
38:99:8b:4a:05:83:74:2d:90:20:09:63:ba:61:9b:
6b:57:e6:70:06:b4:df:96:ff:60:c9:42:58:64:39:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:30:47:A3:C3:84:C9:C3:73:64:EA:E5:6A:76:31:A4:C5:A1:9D
X509v3 Authority Key Identifier:
keyid:FD:A1:4E:67:86:03:EF:D1:F5:73:DE:F5:F4:6A:DC:D3:E8:18:F4:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aFOZ4YD79H1c9719Grc0-gY9OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9322ea-d8fd-464e-a69d-3fc536931b8f/1/DQswR6PDhMnDc2Tq5Wp2MaTFoZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9322ea-d8fd-464e-a69d-3fc536931b8f/1/_aFOZ4YD79H1c9719Grc0-gY9OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6c:27:a6:10:64:e6:ff:a6:aa:ac:5d:52:18:75:35:0e:fb:
a7:43:fe:38:b7:3d:99:f4:52:81:33:56:3e:fc:7d:12:5f:16:
67:7c:83:7e:4f:0c:0a:a5:d0:51:6c:4b:1b:4a:02:ce:28:6a:
98:9a:d6:43:b0:ee:33:64:f9:dd:4a:f3:10:9c:d0:ed:f0:17:
46:44:f8:f6:0d:03:38:88:66:5f:ee:7e:39:d8:04:dc:0d:6b:
c3:9e:b9:8b:6b:18:f7:33:40:9c:77:03:b0:69:02:aa:80:17:
6b:39:ac:ae:37:e5:57:4d:29:7c:da:11:d7:0d:ae:ab:0b:24:
d2:58:79:2c:cc:e1:70:70:67:d4:d9:a2:57:d7:62:9c:ce:70:
69:c5:96:a1:9e:41:77:4a:e4:0c:7f:3c:52:c2:02:44:fc:6a:
63:53:c8:49:be:dc:ef:b5:c0:48:dd:da:bc:cc:e9:0b:21:74:
cf:9e:4c:29:b6:7b:57:a5:c0:c8:65:f0:e9:a6:b9:49:43:da:
78:99:c5:ff:27:8a:d7:32:44:15:df:fd:69:1c:d7:8b:b8:14:
03:bb:49:22:07:80:f6:c8:19:97:b5:56:83:8d:21:83:df:0a:
0a:33:77:0c:53:9a:24:3a:ef:9d:59:64:b7:df:20:d9:c4:72:
0c:04:f9:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVilJHkhAuVwGY3QtxV1aE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYTE0ZTY3ODYwM2VmZDFmNTczZGVmNWY0NmFkY2QzZTgx
OGY0ZTMwHhcNMjIxMjMwMTAyOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDBiMzA0N2EzYzM4NGM5YzM3MzY0ZWFlNTZhNzYzMWE0YzVhMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAvXVNCphmd0y2RJmn84GfasWEAg
mXHSkssLVBcqdcq1umF+sI9Or1/+Zh+tlFHXlr4Kjje2qHybONOVQAlpaib9iyKH
PWoHuwoCMXkgIgaft3m3TWxCwlub+Wal68YW6KYkURdOIwRfkqc4K4oc5XHZMSoV
oMIXQz8/T8xpu2154lCEoZ+4dSxZzw6NCKBPozgDIZNLS7kG8VmoCSNYVzcC1Ld7
yvggEySHzZGyIlPXlkWovbdJm4ZBrjzrdmSlrQRxmw0qIAGKEVwYU+2AlG5hGps/
jbJempEvDVMX6J84mYtKBYN0LZAgCWO6YZtrV+ZwBrTflv9gyUJYZDlLVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0LMEejw4TJw3Nk6uVqdjGkxaGdMB8GA1UdIwQY
MBaAFP2hTmeGA+/R9XPe9fRq3NPoGPTjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2FGT1o0WUQ3OUgxYzk3MTlHcmMwLWdZOU9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MzIyZWEtZDhmZC00NjRlLWE2OWQt
M2ZjNTM2OTMxYjhmLzEvRFFzd1I2UERoTW5EYzJUcTVXcDJNYVRGb1owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85MzIyZWEtZDhmZC00NjRlLWE2OWQtM2ZjNTM2OTMxYjhm
LzEvX2FGT1o0WUQ3OUgxYzk3MTlHcmMwLWdZOU9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRDzMA0G
CSqGSIb3DQEBCwUAA4IBAQAfbCemEGTm/6aqrF1SGHU1DvunQ/44tz2Z9FKBM1Y+
/H0SXxZnfIN+TwwKpdBRbEsbSgLOKGqYmtZDsO4zZPndSvMQnNDt8BdGRPj2DQM4
iGZf7n452ATcDWvDnrmLaxj3M0CcdwOwaQKqgBdrOayuN+VXTSl82hHXDa6rCyTS
WHkszOFwcGfU2aJX12KcznBpxZahnkF3SuQMfzxSwgJE/GpjU8hJvtzvtcBI3dq8
zOkLIXTPnkwptntXpcDIZfDpprlJQ9p4mcX/J4rXMkQV3/1pHNeLuBQDu0kiB4D2
yBmXtVaDjSGD3woKM3cMU5okOu+dWWS33yDZxHIMBPkr
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:29 2023 by rpki-client on console.sobornost.net