Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/Zk6KIpDvUwYxPFjLIeYfGNElb9o.roa
File: Zk6KIpDvUwYxPFjLIeYfGNElb9o.roa (raw, json)
Hash identifier: 0ZDFE/Z86rsaOqN8+tLrY7HVWhBVRJzQC21jg4V0ax8=
Subject key identifier: 66:4E:8A:22:90:EF:53:06:31:3C:58:CB:21:E6:1F:18:D1:25:6F:DA
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 018CC349226A99598BBB19849EEB343D4216
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/Zk6KIpDvUwYxPFjLIeYfGNElb9o.roa
Signing time: Mon 01 Jan 2024 04:29:59 +0000
ROA not before: Mon 01 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49883
IP address blocks: 176.120.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:22:6a:99:59:8b:bb:19:84:9e:eb:34:3d:42:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664e8a2290ef5306313c58cb21e61f18d1256fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:50:24:9d:11:1f:04:c2:ba:99:57:84:9e:
10:c2:bf:da:29:a4:39:68:d8:32:08:a1:fc:2a:12:
fe:73:9e:fe:04:a0:61:23:81:27:3f:4e:9b:0c:d1:
e7:63:17:e4:30:62:fd:b2:ca:b1:6a:1d:d4:56:e3:
1a:4d:49:17:22:20:9b:37:db:f4:44:11:c2:0d:44:
7e:a8:8c:9b:e7:d2:4d:36:61:49:de:9a:bc:8a:1c:
92:47:8c:9c:91:b4:8a:01:ac:ee:d0:66:d4:ba:c9:
63:10:d4:69:0f:c0:ed:96:2e:3f:d6:e8:d1:a0:17:
c9:e0:39:56:0e:75:e1:fd:be:7c:93:72:1c:b9:e6:
82:5a:80:1a:68:11:84:29:a3:24:1d:5b:24:2f:1b:
b5:f4:65:78:8f:f5:80:cb:be:83:4c:0c:b1:ee:f8:
dc:88:22:0f:54:7f:8c:d6:5c:d6:e5:32:2a:f8:3d:
8f:dc:63:8a:19:ba:d8:6b:2f:33:f8:53:a2:b9:85:
12:08:2b:f0:bd:b2:7c:74:ea:57:ac:2d:53:ad:f4:
f2:22:cf:a6:2e:b6:8b:dd:22:ae:2d:31:5d:c9:96:
7a:7f:57:c1:50:93:ea:15:8c:60:56:98:9e:03:ab:
28:2d:89:3a:59:f5:f0:05:2d:31:fe:f0:f4:fe:d0:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4E:8A:22:90:EF:53:06:31:3C:58:CB:21:E6:1F:18:D1:25:6F:DA
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/Zk6KIpDvUwYxPFjLIeYfGNElb9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:93:af:53:4b:c6:11:31:0e:98:bc:54:96:13:40:53:46:a7:
c1:0f:f9:11:d2:5b:b6:f7:96:f7:c0:72:0e:5a:ad:d7:fe:80:
c2:f4:83:76:e5:09:5c:44:3d:c4:73:66:01:08:3c:c3:a5:ec:
d3:b9:fd:ef:81:02:59:2d:58:5a:6e:06:62:63:75:e7:36:d4:
b2:29:b2:f6:c5:ed:b3:06:55:23:f2:c1:4c:3b:cc:29:c4:fa:
92:36:2f:25:45:d5:91:2e:6c:d4:dc:78:77:2f:34:d3:a3:19:
7f:9e:68:43:1f:3a:45:b0:ff:18:ac:f1:f9:f9:cf:d6:73:4e:
e8:0a:26:b1:51:c4:5a:ab:92:74:86:e8:25:c6:74:78:95:91:
ca:fa:cc:69:b8:89:6e:10:de:17:b6:76:58:e0:3c:46:5b:eb:
25:21:28:be:b8:d6:7f:75:7b:6c:ec:ec:1b:02:79:96:93:0b:
e1:0a:33:20:ff:c3:c9:3e:61:9c:ee:24:dd:70:d2:50:5a:64:
90:42:26:2e:34:aa:1a:87:9b:10:3c:03:7e:d3:b6:a9:0d:5c:
fc:91:4b:2b:eb:41:4d:4f:4f:6e:39:52:ff:2a:64:6c:38:e9:
a2:73:5b:09:cb:d6:d8:76:57:0e:c5:cc:5b:4c:b5:98:8f:67:
8a:69:64:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSSJqmVmLuxmEnus0PUIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmU4MjdhNTgwZGU2MTUzOGRkZWZhMjgyMzk0NjhjNGU5
MDFiNDAwHhcNMjQwMTAxMDQyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjRlOGEyMjkwZWY1MzA2MzEzYzU4Y2IyMWU2MWYxOGQxMjU2ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxZQJJ0RHwTCuplXhJ4Qwr/aKaQ5
aNgyCKH8KhL+c57+BKBhI4EnP06bDNHnYxfkMGL9ssqxah3UVuMaTUkXIiCbN9v0
RBHCDUR+qIyb59JNNmFJ3pq8ihySR4yckbSKAazu0GbUusljENRpD8Dtli4/1ujR
oBfJ4DlWDnXh/b58k3IcueaCWoAaaBGEKaMkHVskLxu19GV4j/WAy76DTAyx7vjc
iCIPVH+M1lzW5TIq+D2P3GOKGbrYay8z+FOiuYUSCCvwvbJ8dOpXrC1TrfTyIs+m
LraL3SKuLTFdyZZ6f1fBUJPqFYxgVpieA6soLYk6WfXwBS0x/vD0/tB4hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGZOiiKQ71MGMTxYyyHmHxjRJW/aMB8GA1UdIwQY
MBaAFBe+gnpYDeYVON3vooI5RoxOkBtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTct
YTFkOWQwZjg4NjI5LzEvWms2S0lwRHZVd1l4UEZqTEllWWZHTkVsYjlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80OTBlMDEtY2FmOS00ZDQ0LThmNTctYTFkOWQwZjg4NjI5
LzEvRjc2Q2VsZ041aFU0M2UtaWdqbEdqRTZRRzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHhgMA0G
CSqGSIb3DQEBCwUAA4IBAQBfk69TS8YRMQ6YvFSWE0BTRqfBD/kR0lu295b3wHIO
Wq3X/oDC9IN25QlcRD3Ec2YBCDzDpezTuf3vgQJZLVhabgZiY3XnNtSyKbL2xe2z
BlUj8sFMO8wpxPqSNi8lRdWRLmzU3Hh3LzTToxl/nmhDHzpFsP8YrPH5+c/Wc07o
CiaxUcRaq5J0huglxnR4lZHK+sxpuIluEN4XtnZY4DxGW+slISi+uNZ/dXts7Owb
AnmWkwvhCjMg/8PJPmGc7iTdcNJQWmSQQiYuNKoah5sQPAN+07apDVz8kUsr60FN
T09uOVL/KmRsOOmic1sJy9bYdlcOxcxbTLWYj2eKaWS8
-----END CERTIFICATE-----
Generated at Mon Mar 4 11:26:28 2024 by rpki-client on console.sobornost.net