Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/v036Ji3RlPJxdqhYMYzN5ErKpJg.roa
File: v036Ji3RlPJxdqhYMYzN5ErKpJg.roa (raw, json)
Hash identifier: 70KPQlPfZuB64eR2mCeP5eOesAgFCX9elcASx9LZZnQ=
Subject key identifier: BF:4D:FA:26:2D:D1:94:F2:71:76:A8:58:31:8C:CD:E4:4A:CA:A4:98
Certificate issuer: /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial: 07D1AA28
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/v036Ji3RlPJxdqhYMYzN5ErKpJg.roa
Signing time: Sun 20 Mar 2022 19:46:53 +0000
ROA not before: Sun 20 Mar 2022 19:46:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20860
IP address blocks: 193.37.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131181096 (0x7d1aa28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Validity
Not Before: Mar 20 19:46:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf4dfa262dd194f27176a858318ccde44acaa498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:6b:d3:c4:33:95:3f:22:ee:e3:a7:cc:63:
a9:78:ce:de:d1:c2:2b:31:d0:f4:96:af:1f:c0:b3:
8e:a8:50:3f:85:55:81:50:b3:4d:ce:06:40:82:9c:
95:35:bc:49:49:d1:77:34:71:ca:dd:7c:9d:87:92:
80:d8:f0:00:2a:2d:e7:e8:d8:ce:13:3b:1d:1f:38:
f8:c6:34:05:92:61:05:14:95:18:99:27:e8:36:03:
f4:1c:bd:29:a1:56:01:39:3e:22:a7:50:5a:9b:cb:
92:32:4b:8f:46:da:28:a1:87:7e:15:73:cd:14:46:
b6:eb:57:70:ac:78:16:d0:a6:96:89:3e:3f:68:ba:
53:55:a9:99:93:7e:e3:30:10:37:da:dc:ef:fe:b9:
3f:af:1b:d2:b1:67:57:44:7e:e2:58:c5:8f:a3:a5:
3f:74:5d:41:13:50:7a:86:60:4b:c5:09:b1:ea:45:
52:7b:e9:4d:05:85:d7:f6:f1:a0:e6:db:76:72:36:
f7:38:38:15:b9:50:a2:35:0e:d3:f6:bb:2b:7b:cb:
5d:d9:c1:30:fa:0e:0c:c3:33:3b:a7:39:2c:9a:e8:
95:b7:0f:8d:3e:45:62:6a:19:ca:38:3d:34:14:33:
e0:5f:f2:b2:8d:7d:16:14:45:4a:9f:9c:40:79:99:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4D:FA:26:2D:D1:94:F2:71:76:A8:58:31:8C:CD:E4:4A:CA:A4:98
X509v3 Authority Key Identifier:
keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/v036Ji3RlPJxdqhYMYzN5ErKpJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.72.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:d6:95:13:0c:a1:64:32:43:5c:a6:ef:55:05:51:0c:71:2c:
20:dd:4a:07:4a:d2:51:d1:39:26:6d:6a:02:de:4e:f4:f8:43:
70:d1:d3:cd:5a:4c:6c:56:80:43:13:00:c1:d7:53:ed:40:a9:
e1:53:3b:4e:8d:23:b8:e8:62:44:e0:08:8d:32:02:44:0b:2f:
3e:8a:27:7c:35:1e:38:be:8b:af:c7:97:f0:36:96:ed:63:15:
37:0a:a2:29:53:d3:e4:63:2b:78:3c:3e:c8:b1:73:f1:7b:8a:
b6:1b:d6:e6:c4:85:f0:58:a2:ee:ea:ad:2f:da:e6:2d:8b:83:
11:5c:84:f3:79:0c:cc:f4:cb:d5:89:fc:3d:be:85:b8:4e:e8:
02:5d:ac:07:dd:44:d1:30:69:f2:16:96:83:4c:32:6f:7d:90:
89:94:c8:21:07:ac:11:3f:cf:c5:da:a8:ea:93:73:5e:94:e5:
0f:21:fc:de:a7:93:3d:95:3d:ea:15:9f:70:21:06:f1:4d:9c:
66:93:e8:15:e2:4e:1b:c4:e2:d7:e9:dd:8f:ba:56:9b:2d:db:
a2:29:cb:fb:0b:9f:7e:55:a2:6a:53:bd:6e:4f:b8:b8:12:a3:
05:40:76:c1:05:3a:b8:b2:eb:a1:63:ba:07:7d:66:66:84:d6:
31:83:ec:4a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB9GqKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjY2MWFkY2JmNjk2MmVlZWM4MjVjNmQ0ZGU5YjQ0OWYwMmU4NDFkMB4XDTIyMDMy
MDE5NDY1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmY0ZGZhMjYyZGQx
OTRmMjcxNzZhODU4MzE4Y2NkZTQ0YWNhYTQ5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvWa9PEM5U/Iu7jp8xjqXjO3tHCKzHQ9JavH8CzjqhQP4VV
gVCzTc4GQIKclTW8SUnRdzRxyt18nYeSgNjwACot5+jYzhM7HR84+MY0BZJhBRSV
GJkn6DYD9By9KaFWATk+IqdQWpvLkjJLj0baKKGHfhVzzRRGtutXcKx4FtCmlok+
P2i6U1WpmZN+4zAQN9rc7/65P68b0rFnV0R+4ljFj6OlP3RdQRNQeoZgS8UJsepF
UnvpTQWF1/bxoObbdnI29zg4FblQojUO0/a7K3vLXdnBMPoODMMzO6c5LJrolbcP
jT5FYmoZyjg9NBQz4F/yso19FhRFSp+cQHmZkY8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS/TfomLdGU8nF2qFgxjM3kSsqkmDAfBgNVHSMEGDAWgBRbZhrcv2li7uyC
XG1N6bRJ8C6EHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cyWWEzTDlwWXU3c2dseHRUZW0wU2ZBdWhCMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvY2ZmMzFjLTI1ZDAtNGQwMi1hNjk2LTRiY2I2MjlkYTU0NS8x
L3YwMzZKaTNSbFBKeGRxaFlNWXpONUVyS3BKZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
Y2ZmMzFjLTI1ZDAtNGQwMi1hNjk2LTRiY2I2MjlkYTU0NS8xL1cyWWEzTDlwWXU3
c2dseHRUZW0wU2ZBdWhCMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsElSDANBgkqhkiG9w0BAQsFAAOC
AQEAvdaVEwyhZDJDXKbvVQVRDHEsIN1KB0rSUdE5Jm1qAt5O9PhDcNHTzVpMbFaA
QxMAwddT7UCp4VM7To0juOhiROAIjTICRAsvPoonfDUeOL6Lr8eX8DaW7WMVNwqi
KVPT5GMreDw+yLFz8XuKthvW5sSF8Fii7uqtL9rmLYuDEVyE83kMzPTL1Yn8Pb6F
uE7oAl2sB91E0TBp8haWg0wyb32QiZTIIQesET/Pxdqo6pNzXpTlDyH83qeTPZU9
6hWfcCEG8U2cZpPoFeJOG8Ti1+ndj7pWmy3boinL+wufflWialO9bk+4uBKjBUB2
wQU6uLLroWO6B31mZoTWMYPsSg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net