Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/P5QwhK5Qk3s09158-SadYq0zf_M.roa
File: P5QwhK5Qk3s09158-SadYq0zf_M.roa (raw, json)
Hash identifier: vUWrQqJIDar0drIPKERo3DuozTVsJp7db2k4IA5lGxs=
Subject key identifier: 3F:94:30:84:AE:50:93:7B:34:F7:5E:7C:F9:26:9D:62:AD:33:7F:F3
Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial: 018CC8016F75B6AF8C3E2EC51D7D65FD1D24
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/P5QwhK5Qk3s09158-SadYq0zf_M.roa
Signing time: Tue 02 Jan 2024 02:29:46 +0000
ROA not before: Tue 02 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35574
IP address blocks: 194.187.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6f:75:b6:af:8c:3e:2e:c5:1d:7d:65:fd:1d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f943084ae50937b34f75e7cf9269d62ad337ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:8c:a0:2a:91:ac:3d:0e:76:84:15:18:1f:
77:77:d7:57:50:7d:fe:93:c7:f0:84:37:2b:bb:79:
3d:1e:d0:dc:d4:97:49:9c:43:2f:29:17:a3:1b:48:
1c:60:b8:f1:e6:22:30:5c:f0:bc:9a:1f:2d:cb:1a:
c9:e2:93:f2:6b:46:81:dc:5d:b9:50:db:0a:ca:d2:
d6:ea:d5:61:5f:25:de:6a:c0:14:d3:ab:e6:a0:ef:
55:37:b3:ab:c1:8e:db:46:c2:e6:6a:97:03:d9:d5:
10:64:77:34:40:05:7a:69:59:3e:57:30:64:9f:28:
a1:c5:db:2e:3d:e0:52:d3:85:37:36:5b:16:6a:9c:
96:12:f8:d3:c7:af:3e:80:a3:29:94:27:69:8b:21:
1b:1d:50:63:44:22:ed:1f:a0:8e:64:75:52:24:13:
6e:0a:c1:0f:cd:61:ff:5d:f7:89:e5:6b:09:bf:dd:
7a:9b:26:09:75:88:23:4f:6a:a5:1e:87:8a:84:32:
2c:45:c7:ed:71:b1:b7:7c:f2:94:b6:e9:c1:70:4f:
43:f4:04:80:6b:68:18:66:4c:13:96:77:96:f7:f6:
0d:50:17:2b:9f:c9:1f:b6:5c:7c:a7:4d:6c:48:f1:
34:7e:f2:0e:44:6c:cc:64:69:b4:0c:58:c7:86:af:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:94:30:84:AE:50:93:7B:34:F7:5E:7C:F9:26:9D:62:AD:33:7F:F3
X509v3 Authority Key Identifier:
keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/P5QwhK5Qk3s09158-SadYq0zf_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:2b:19:2c:0b:43:ae:2c:cf:78:21:19:37:cb:ae:a8:b4:21:
66:98:da:46:fc:04:e5:3a:83:13:85:89:fc:62:e3:e9:ca:c9:
73:58:ad:07:c1:fd:28:96:08:95:62:67:72:53:18:0d:c2:91:
ab:66:d9:37:f9:5a:86:f4:0b:f2:60:56:f3:52:21:ee:15:36:
d1:20:8a:05:b1:30:27:5e:3b:6e:f4:a3:1b:af:06:2d:d2:00:
db:b0:60:e2:67:39:ab:78:d3:e4:17:a2:4f:8c:20:b4:c3:6e:
fd:b4:c3:82:92:49:00:37:f4:f1:79:51:dd:71:22:7e:b4:f8:
82:7a:12:98:b0:11:12:03:28:de:7b:90:fa:bf:66:98:29:4a:
52:e0:f5:cc:58:81:22:fd:59:6c:65:25:21:be:00:7e:87:5f:
a1:4e:87:d6:cc:3f:40:f6:3a:74:ec:5e:e3:76:80:cc:e3:6e:
86:2d:b1:1f:d3:f9:0e:34:6c:80:c3:58:a6:7f:cc:19:c7:d8:
16:b3:e8:64:fd:d4:50:65:4f:0b:63:52:71:ae:4e:cb:b7:ba:
c6:e2:ba:1b:e9:6e:49:98:97:d9:de:49:2b:64:ca:1d:6c:87:
0b:e3:b3:b5:58:42:89:bd:ab:22:b3:d2:9f:c6:72:41:f8:65:
c9:54:36:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAW91tq+MPi7FHX1l/R0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmE5ODY2OTgwMDVkNTdlN2I5MmY3YTM4ZDIxOWJiYjgw
ZmUxZmYwHhcNMjQwMTAyMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjk0MzA4NGFlNTA5MzdiMzRmNzVlN2NmOTI2OWQ2MmFkMzM3ZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOiMoCqRrD0OdoQVGB93d9dXUH3+
k8fwhDcru3k9HtDc1JdJnEMvKRejG0gcYLjx5iIwXPC8mh8tyxrJ4pPya0aB3F25
UNsKytLW6tVhXyXeasAU06vmoO9VN7OrwY7bRsLmapcD2dUQZHc0QAV6aVk+VzBk
nyihxdsuPeBS04U3NlsWapyWEvjTx68+gKMplCdpiyEbHVBjRCLtH6COZHVSJBNu
CsEPzWH/XfeJ5WsJv916myYJdYgjT2qlHoeKhDIsRcftcbG3fPKUtunBcE9D9ASA
a2gYZkwTlneW9/YNUBcrn8kftlx8p01sSPE0fvIORGzMZGm0DFjHhq8K8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD+UMISuUJN7NPdefPkmnWKtM3/zMB8GA1UdIwQY
MBaAFBZqmGaYAF1X57kvejjSGbu4D+H/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAt
ZGM3NzYyNTRjYmY2LzEvUDVRd2hLNVFrM3MwOTE1OC1TYWRZcTB6Zl9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAtZGM3NzYyNTRjYmY2
LzEvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrusMA0G
CSqGSIb3DQEBCwUAA4IBAQBMKxksC0OuLM94IRk3y66otCFmmNpG/ATlOoMThYn8
YuPpyslzWK0Hwf0olgiVYmdyUxgNwpGrZtk3+VqG9AvyYFbzUiHuFTbRIIoFsTAn
Xjtu9KMbrwYt0gDbsGDiZzmreNPkF6JPjCC0w279tMOCkkkAN/TxeVHdcSJ+tPiC
ehKYsBESAyjee5D6v2aYKUpS4PXMWIEi/VlsZSUhvgB+h1+hTofWzD9A9jp07F7j
doDM426GLbEf0/kONGyAw1imf8wZx9gWs+hk/dRQZU8LY1Jxrk7Lt7rG4rob6W5J
mJfZ3kkrZModbIcL47O1WEKJvasis9KfxnJB+GXJVDZ9
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net