Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/a5gesFrby9OxtV8Vpykzy86qRFE.roa
File: a5gesFrby9OxtV8Vpykzy86qRFE.roa (raw, json)
Hash identifier: xGOISkvOvZGMOd1x6JuwGnvbhyacT0mYXdUZM88Z2gA=
Subject key identifier: 6B:98:1E:B0:5A:DB:CB:D3:B1:B5:5F:15:A7:29:33:CB:CE:AA:44:51
Certificate issuer: /CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
Certificate serial: 01841F3A63FCC15FE5D9F6790CD648682BD6
Authority key identifier: A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/a5gesFrby9OxtV8Vpykzy86qRFE.roa
Signing time: Fri 28 Oct 2022 15:33:51 +0000
ROA not before: Fri 28 Oct 2022 15:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 176.126.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1f:3a:63:fc:c1:5f:e5:d9:f6:79:0c:d6:48:68:2b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
Validity
Not Before: Oct 28 15:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b981eb05adbcbd3b1b55f15a72933cbceaa4451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:0a:5f:1a:34:c8:38:ce:26:b2:ac:ac:02:
7f:13:ac:73:ac:72:8e:0e:e2:6c:f9:e6:eb:e5:df:
8c:cd:05:86:c1:45:f0:8f:8d:75:65:bd:06:89:b1:
48:42:6f:0b:2d:c3:c0:21:e1:19:90:51:f6:07:f6:
c5:85:c8:c3:d3:ef:25:fd:2f:aa:84:14:3a:f0:d4:
8a:49:bb:58:f5:05:36:bd:dd:c0:61:71:2f:b5:b0:
da:f7:d7:21:8f:7d:bb:3f:d6:5a:7f:1b:8e:a5:bb:
9c:45:27:99:49:3e:b4:4e:b2:eb:c6:38:56:d6:e5:
d8:ea:f6:f1:49:00:89:63:a8:88:64:85:d6:40:4e:
c3:35:2d:82:58:ed:98:ae:28:e2:d7:a1:cc:6c:9a:
ed:e9:6f:f7:53:3b:83:8c:17:dc:35:33:12:a0:7a:
d2:1c:2a:fc:01:ee:48:fc:f0:48:fe:ae:92:73:e0:
f4:77:f1:1f:52:4b:7b:45:98:5f:c9:62:a0:e6:ca:
67:ae:13:14:74:d9:d1:f6:7f:76:49:11:05:e7:db:
10:3a:65:eb:4a:9c:77:f4:78:d7:30:e6:1f:05:66:
3d:14:99:5e:a8:3a:40:7c:c4:d3:ee:92:77:5f:33:
4e:b5:26:18:cd:1d:08:d4:2c:2b:96:26:a0:fe:7b:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:98:1E:B0:5A:DB:CB:D3:B1:B5:5F:15:A7:29:33:CB:CE:AA:44:51
X509v3 Authority Key Identifier:
keyid:A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/a5gesFrby9OxtV8Vpykzy86qRFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/p7UrJMHaUi7T_-5xNi28Fcna5vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
34:70:5b:b0:cb:ed:8e:32:71:f1:a6:ae:52:cc:53:a5:3f:95:
3f:09:66:08:f5:b3:c4:27:89:88:f5:34:42:92:d0:a1:50:01:
db:b7:dd:02:70:61:48:92:3d:d7:70:aa:db:6f:6c:f2:83:9d:
6b:77:84:89:41:9f:e6:56:87:cb:bc:16:04:47:b8:e3:68:38:
02:56:69:37:23:05:01:de:7f:b1:23:5e:be:93:93:24:58:80:
0c:b0:ba:89:aa:0a:13:bc:4a:78:9c:20:81:30:75:58:a8:1a:
28:c9:f6:5a:80:9b:f7:0b:73:3e:3b:c4:24:fe:01:c8:4e:1e:
e7:38:bd:79:d8:e3:34:f1:f7:2a:df:cb:d2:02:95:af:9c:16:
a9:16:bc:c3:12:37:92:bb:c4:34:f5:4a:14:d6:11:71:d8:71:
60:b3:97:13:e0:d0:7f:3a:a5:7f:ab:ac:75:25:22:71:f3:7b:
c1:79:87:c1:cd:94:e8:b9:96:8f:21:71:65:bd:cb:28:1a:d3:
bf:05:35:27:20:21:36:0c:39:62:4c:56:4a:46:7e:d0:b6:2f:
21:66:8a:e2:3f:33:ab:84:3a:73:19:9e:e7:61:6b:8b:e9:cd:
9b:92:17:10:02:07:1d:d1:12:61:16:b2:a0:de:c0:c6:6d:d8:
8f:56:94:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQfOmP8wV/l2fZ5DNZIaCvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YjUyYjI0YzFkYTUyMmVkM2ZmZWU3MTM2MmRiYzE1Yzlk
YWU2ZmEwHhcNMjIxMDI4MTUzMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjk4MWViMDVhZGJjYmQzYjFiNTVmMTVhNzI5MzNjYmNlYWE0NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTYKXxo0yDjOJrKsrAJ/E6xzrHKO
DuJs+ebr5d+MzQWGwUXwj411Zb0GibFIQm8LLcPAIeEZkFH2B/bFhcjD0+8l/S+q
hBQ68NSKSbtY9QU2vd3AYXEvtbDa99chj327P9ZafxuOpbucRSeZST60TrLrxjhW
1uXY6vbxSQCJY6iIZIXWQE7DNS2CWO2Yriji16HMbJrt6W/3UzuDjBfcNTMSoHrS
HCr8Ae5I/PBI/q6Sc+D0d/EfUkt7RZhfyWKg5spnrhMUdNnR9n92SREF59sQOmXr
Spx39HjXMOYfBWY9FJleqDpAfMTT7pJ3XzNOtSYYzR0I1Cwrliag/nsD5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGuYHrBa28vTsbVfFacpM8vOqkRRMB8GA1UdIwQY
MBaAFKe1KyTB2lIu0//ucTYtvBXJ2ub6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDdVckpNSGFVaTdUXy01eE5pMjhGY25hNXZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kZDA2OGEtMmVhNC00ZThkLTkzMDAt
YTA1NjgwZmI5ZTUwLzEvYTVnZXNGcmJ5OU94dFY4VnB5a3p5ODZxUkZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kZDA2OGEtMmVhNC00ZThkLTkzMDAtYTA1NjgwZmI5ZTUw
LzEvcDdVckpNSGFVaTdUXy01eE5pMjhGY25hNXZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH5pMA0G
CSqGSIb3DQEBCwUAA4IBAQA0cFuwy+2OMnHxpq5SzFOlP5U/CWYI9bPEJ4mI9TRC
ktChUAHbt90CcGFIkj3XcKrbb2zyg51rd4SJQZ/mVofLvBYER7jjaDgCVmk3IwUB
3n+xI16+k5MkWIAMsLqJqgoTvEp4nCCBMHVYqBooyfZagJv3C3M+O8Qk/gHITh7n
OL152OM08fcq38vSApWvnBapFrzDEjeSu8Q09UoU1hFx2HFgs5cT4NB/OqV/q6x1
JSJx83vBeYfBzZTouZaPIXFlvcsoGtO/BTUnICE2DDliTFZKRn7Qti8hZoriPzOr
hDpzGZ7nYWuL6c2bkhcQAgcd0RJhFrKg3sDGbdiPVpRB
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net