Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/cWazi8ZvhPz8eNV7LSXnOnf58oQ.roa
File: cWazi8ZvhPz8eNV7LSXnOnf58oQ.roa (raw, json)
Hash identifier: Z9elirKd+Foh1Pjdc7ZcdVyVnbKX1jmQ+pnEL/kSjSM=
Subject key identifier: 71:66:B3:8B:C6:6F:84:FC:FC:78:D5:7B:2D:25:E7:3A:77:F9:F2:84
Certificate issuer: /CN=d85ee299c48a5c5c5ed0e11368c527b66ca405c1
Certificate serial: 018964C05257CEDFE93613716288EF4E8E77
Authority key identifier: D8:5E:E2:99:C4:8A:5C:5C:5E:D0:E1:13:68:C5:27:B6:6C:A4:05:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2F7imcSKXFxe0OETaMUntmykBcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/cWazi8ZvhPz8eNV7LSXnOnf58oQ.roa
Signing time: Mon 17 Jul 2023 16:47:52 +0000
ROA not before: Mon 17 Jul 2023 16:47:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 5.57.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:52:57:ce:df:e9:36:13:71:62:88:ef:4e:8e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85ee299c48a5c5c5ed0e11368c527b66ca405c1
Validity
Not Before: Jul 17 16:47:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7166b38bc66f84fcfc78d57b2d25e73a77f9f284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:21:4e:be:1a:3b:f0:cd:87:29:72:7b:71:
be:2c:91:1a:b2:b4:0e:b0:cd:7d:70:a8:0c:d7:93:
b0:24:ed:1e:b0:d2:01:b4:f3:ac:9c:df:ea:ff:82:
a8:ec:d1:37:07:67:fa:3a:64:6b:b2:c1:6c:65:e5:
0b:f1:a6:29:bb:c3:ac:bc:16:50:3b:77:f1:ab:a3:
6b:e8:c6:42:08:82:06:78:65:0f:f8:0c:c1:8e:28:
81:73:0e:29:60:30:76:51:75:c7:2b:76:bc:95:94:
ea:16:fd:16:bf:a6:ab:5a:5c:17:69:06:d2:1d:cb:
2e:dd:9a:12:cc:40:e4:02:ce:fd:c5:26:ba:ac:cb:
21:3d:14:de:0f:5e:47:1c:e0:0e:72:dc:f9:de:c5:
a3:98:10:4f:3f:da:34:0b:38:49:07:91:2d:cb:23:
36:6b:1a:cf:01:ec:ca:22:20:83:ad:3f:f2:83:b6:
62:da:0e:2d:79:b7:f4:f2:60:6a:97:59:92:15:b5:
ac:ad:0b:5e:a9:c0:d3:31:6f:e9:51:55:25:e9:e2:
72:66:3d:f8:c8:4f:8f:4a:a3:ca:0a:dc:aa:c6:9e:
a3:eb:a5:81:49:7b:46:ab:17:bf:85:a6:7b:dc:b5:
51:ac:7e:66:2e:df:c1:88:96:47:6f:ff:52:45:ff:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:66:B3:8B:C6:6F:84:FC:FC:78:D5:7B:2D:25:E7:3A:77:F9:F2:84
X509v3 Authority Key Identifier:
keyid:D8:5E:E2:99:C4:8A:5C:5C:5E:D0:E1:13:68:C5:27:B6:6C:A4:05:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2F7imcSKXFxe0OETaMUntmykBcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/cWazi8ZvhPz8eNV7LSXnOnf58oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/2F7imcSKXFxe0OETaMUntmykBcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:52:e4:6d:16:31:14:5c:38:fa:44:95:9a:84:2a:71:79:07:
da:ae:08:1d:9c:44:de:43:4d:29:a4:97:f0:0e:48:59:e2:fe:
b1:7e:d0:fc:d2:d3:e9:06:c5:79:bc:b7:b0:8e:4d:ae:19:c9:
f5:10:4f:92:d0:7a:7b:e5:c5:fb:15:07:8b:38:df:e9:87:0f:
d1:70:77:d7:d8:92:6a:42:ae:0a:49:17:b6:98:74:fd:fb:46:
d8:41:bd:c1:e2:54:09:02:3b:cb:46:d5:0b:d4:13:4a:4c:40:
a4:14:90:44:6a:b7:ac:15:cd:0a:fa:16:a8:95:83:2d:ef:3e:
90:ab:c2:54:87:1b:c1:fe:7b:e8:d6:cc:60:f8:4d:fb:3a:fd:
49:39:7a:fb:11:c8:de:68:7d:e7:6f:fd:0a:54:59:d0:15:99:
c6:cf:7a:e8:6c:e6:96:0d:00:f0:ff:12:b9:2b:81:2f:68:8c:
59:5d:a5:d8:f7:b2:68:d5:79:e9:4c:2a:e9:4b:e6:32:2e:a8:
50:e3:11:47:1e:44:02:35:85:06:85:ed:a3:22:1a:b3:24:17:
9c:12:b6:e9:15:88:33:6d:fc:1a:b5:11:26:bf:61:be:6a:c9:
e7:e9:0a:5a:32:95:9c:40:d6:2e:e6:0e:33:8e:1b:58:f6:ca:
61:0a:d2:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwFJXzt/pNhNxYojvTo53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NWVlMjk5YzQ4YTVjNWM1ZWQwZTExMzY4YzUyN2I2NmNh
NDA1YzEwHhcNMjMwNzE3MTY0NzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTY2YjM4YmM2NmY4NGZjZmM3OGQ1N2IyZDI1ZTczYTc3ZjlmMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuQhTr4aO/DNhylye3G+LJEasrQO
sM19cKgM15OwJO0esNIBtPOsnN/q/4Ko7NE3B2f6OmRrssFsZeUL8aYpu8OsvBZQ
O3fxq6Nr6MZCCIIGeGUP+AzBjiiBcw4pYDB2UXXHK3a8lZTqFv0Wv6arWlwXaQbS
Hcsu3ZoSzEDkAs79xSa6rMshPRTeD15HHOAOctz53sWjmBBPP9o0CzhJB5EtyyM2
axrPAezKIiCDrT/yg7Zi2g4tebf08mBql1mSFbWsrQteqcDTMW/pUVUl6eJyZj34
yE+PSqPKCtyqxp6j66WBSXtGqxe/haZ73LVRrH5mLt/BiJZHb/9SRf8lqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHFms4vGb4T8/HjVey0l5zp3+fKEMB8GA1UdIwQY
MBaAFNhe4pnEilxcXtDhE2jFJ7ZspAXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkY3aW1jU0tYRnhlME9FVGFNVW50bXlrQmNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85YzFmZDQtOTFlOS00ZmZmLTg4ZGEt
MjI0ZmQzMjI2MGU3LzEvY1dhemk4WnZoUHo4ZU5WN0xTWG5PbmY1OG9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85YzFmZDQtOTFlOS00ZmZmLTg4ZGEtMjI0ZmQzMjI2MGU3
LzEvMkY3aW1jU0tYRnhlME9FVGFNVW50bXlrQmNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTnSMA0G
CSqGSIb3DQEBCwUAA4IBAQCmUuRtFjEUXDj6RJWahCpxeQfarggdnETeQ00ppJfw
DkhZ4v6xftD80tPpBsV5vLewjk2uGcn1EE+S0Hp75cX7FQeLON/phw/RcHfX2JJq
Qq4KSRe2mHT9+0bYQb3B4lQJAjvLRtUL1BNKTECkFJBEaresFc0K+haolYMt7z6Q
q8JUhxvB/nvo1sxg+E37Ov1JOXr7EcjeaH3nb/0KVFnQFZnGz3robOaWDQDw/xK5
K4EvaIxZXaXY97Jo1XnpTCrpS+YyLqhQ4xFHHkQCNYUGhe2jIhqzJBecErbpFYgz
bfwatREmv2G+asnn6QpaMpWcQNYu5g4zjhtY9sphCtKR
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net