Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/IvKo7rwYRyClNV6IffbfhuZWcOg.roa
File: IvKo7rwYRyClNV6IffbfhuZWcOg.roa (raw, json)
Hash identifier: 5CcfcOzTX/UXmFz1cAlyMW+EqEP8jfUFunUTAtMshRU=
Subject key identifier: 22:F2:A8:EE:BC:18:47:20:A5:35:5E:88:7D:F6:DF:86:E6:56:70:E8
Certificate issuer: /CN=b98b79836afe75370a680bb136c1b99bc88d4519
Certificate serial: 0188AFE86D3A64BCCF9FA743E18D66C33761
Authority key identifier: B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/IvKo7rwYRyClNV6IffbfhuZWcOg.roa
Signing time: Mon 12 Jun 2023 14:00:24 +0000
ROA not before: Mon 12 Jun 2023 14:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.191.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:e8:6d:3a:64:bc:cf:9f:a7:43:e1:8d:66:c3:37:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98b79836afe75370a680bb136c1b99bc88d4519
Validity
Not Before: Jun 12 14:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22f2a8eebc184720a5355e887df6df86e65670e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:36:57:97:62:07:02:b3:13:fa:8b:eb:b4:
4e:98:f0:c2:c7:0e:4d:61:a1:43:77:3d:94:a2:3f:
34:87:e6:40:a6:72:56:a4:2a:8d:87:a4:a4:42:56:
44:8d:86:c7:4e:50:ea:9d:de:44:c4:3f:19:8d:83:
af:22:93:6c:01:fa:9f:5d:30:bf:f0:9e:a5:fb:25:
b5:69:72:14:0d:5c:58:b8:35:c6:8d:71:c0:02:ce:
d0:3f:7a:62:88:a6:a5:e7:6a:fb:13:aa:b8:ac:03:
1f:b8:ed:b1:4a:fb:b0:ef:64:b5:32:b0:37:7c:fc:
14:83:e0:6d:53:5c:dc:ee:e5:75:a3:dd:60:4b:ce:
4d:0f:33:1d:a5:c7:e4:2c:dd:90:4d:4e:2d:d0:9f:
2e:9c:0f:78:7a:76:0b:8c:13:cd:ad:45:e1:70:4a:
f5:8e:e6:76:dc:25:c0:2b:ad:67:e8:18:46:de:3a:
40:78:35:70:7b:c5:dd:1d:86:9d:f4:01:71:8a:55:
7e:88:cb:24:d1:f0:6f:5f:88:a6:9a:48:5a:68:f4:
44:74:20:b6:b4:99:b2:f8:c4:4d:65:86:15:29:3c:
51:2a:74:4f:59:a2:81:7b:f2:9c:13:95:16:66:fd:
5f:f6:c9:a7:f5:d1:54:9c:d5:5c:68:ad:43:ca:3e:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F2:A8:EE:BC:18:47:20:A5:35:5E:88:7D:F6:DF:86:E6:56:70:E8
X509v3 Authority Key Identifier:
keyid:B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/IvKo7rwYRyClNV6IffbfhuZWcOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:06:fa:20:10:00:ce:14:46:3a:d6:83:3a:2c:06:fb:d8:2f:
f6:29:61:d8:91:7b:3e:8e:ea:c0:9e:28:50:10:f6:79:c2:c3:
98:cf:a4:7b:90:ce:8e:e1:c2:11:23:18:ee:7e:45:0e:20:c8:
d0:c5:be:ae:82:b0:65:0f:08:2a:d9:74:fc:58:de:80:5f:6e:
01:0a:c8:f3:36:af:51:3f:12:49:3d:2b:3d:05:c7:ca:91:a8:
52:94:93:c4:24:18:52:b0:17:7f:9b:24:70:df:00:49:ba:4d:
f9:f3:38:26:ab:b5:21:e7:1c:63:c5:e4:3f:5d:e7:63:9d:b6:
90:07:fb:ab:96:48:b7:a3:16:a9:71:bb:5e:ab:2b:d6:19:f4:
de:33:66:ce:1f:37:58:ad:0e:3b:86:2b:1b:6f:6e:df:79:2d:
69:1f:91:e0:a2:2d:85:d5:0a:89:99:ea:40:29:35:74:09:17:
70:fb:74:56:45:f1:99:e0:5f:6e:1d:98:65:e9:98:a7:e1:33:
02:f7:9a:48:e5:2f:79:be:f8:10:04:ed:6c:06:65:95:79:96:
00:05:d9:2c:87:37:15:5d:43:ca:4d:3b:1b:8b:b9:88:48:b8:
81:e1:82:d5:6e:65:ae:18:f0:f8:b2:ed:9a:3a:20:05:7b:d1:
4e:80:c2:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiv6G06ZLzPn6dD4Y1mwzdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OGI3OTgzNmFmZTc1MzcwYTY4MGJiMTM2YzFiOTliYzg4
ZDQ1MTkwHhcNMjMwNjEyMTQwMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmYyYThlZWJjMTg0NzIwYTUzNTVlODg3ZGY2ZGY4NmU2NTY3MGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCE2V5diBwKzE/qL67ROmPDCxw5N
YaFDdz2Uoj80h+ZApnJWpCqNh6SkQlZEjYbHTlDqnd5ExD8ZjYOvIpNsAfqfXTC/
8J6l+yW1aXIUDVxYuDXGjXHAAs7QP3piiKal52r7E6q4rAMfuO2xSvuw72S1MrA3
fPwUg+BtU1zc7uV1o91gS85NDzMdpcfkLN2QTU4t0J8unA94enYLjBPNrUXhcEr1
juZ23CXAK61n6BhG3jpAeDVwe8XdHYad9AFxilV+iMsk0fBvX4immkhaaPREdCC2
tJmy+MRNZYYVKTxRKnRPWaKBe/KcE5UWZv1f9smn9dFUnNVcaK1Dyj5anwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLyqO68GEcgpTVeiH3234bmVnDoMB8GA1UdIwQY
MBaAFLmLeYNq/nU3CmgLsTbBuZvIjUUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVl0NWcyci1kVGNLYUF1eE5zRzVtOGlOUlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iOTQyNDItY2ZkOC00N2IyLWIwMGQt
YWFjMGJlZmZmNGI2LzEvSXZLbzdyd1lSeUNsTlY2SWZmYmZodVpXY09nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iOTQyNDItY2ZkOC00N2IyLWIwMGQtYWFjMGJlZmZmNGI2
LzEvdVl0NWcyci1kVGNLYUF1eE5zRzVtOGlOUlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7/nMA0G
CSqGSIb3DQEBCwUAA4IBAQAOBvogEADOFEY61oM6LAb72C/2KWHYkXs+jurAnihQ
EPZ5wsOYz6R7kM6O4cIRIxjufkUOIMjQxb6ugrBlDwgq2XT8WN6AX24BCsjzNq9R
PxJJPSs9BcfKkahSlJPEJBhSsBd/myRw3wBJuk358zgmq7Uh5xxjxeQ/XedjnbaQ
B/urlki3oxapcbteqyvWGfTeM2bOHzdYrQ47hisbb27feS1pH5Hgoi2F1QqJmepA
KTV0CRdw+3RWRfGZ4F9uHZhl6Zin4TMC95pI5S95vvgQBO1sBmWVeZYABdkshzcV
XUPKTTsbi7mISLiB4YLVbmWuGPD4su2aOiAFe9FOgMLK
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net