Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/qhwF5tZn3V_mFopauWMjHIvmEVY.roa
File: qhwF5tZn3V_mFopauWMjHIvmEVY.roa (raw, json)
Hash identifier: bfu7BI2Ehw8eiLM3w29SVO8oINk1DAD1UF0DPlzVHPU=
Subject key identifier: AA:1C:05:E6:D6:67:DD:5F:E6:16:8A:5A:B9:63:23:1C:8B:E6:11:56
Certificate issuer: /CN=a5915bc8a982fe61eb4aed5418323288329504d7
Certificate serial: 018CC7955C33E44815B18E1D8016634E4BFA
Authority key identifier: A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/qhwF5tZn3V_mFopauWMjHIvmEVY.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48669
IP address blocks: 195.225.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5c:33:e4:48:15:b1:8e:1d:80:16:63:4e:4b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5915bc8a982fe61eb4aed5418323288329504d7
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa1c05e6d667dd5fe6168a5ab963231c8be61156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:33:b0:59:28:d0:51:fe:b4:c9:03:ad:71:
93:e6:c2:cb:47:6a:a8:33:0d:c8:ae:fb:c9:ee:15:
e0:74:c4:ae:4b:57:a9:0b:bb:7b:b4:8f:23:ff:54:
a2:d5:ac:24:50:0d:65:c3:24:57:0e:7f:a2:9e:d0:
07:ea:90:5e:c9:b5:7d:bd:47:dc:cf:d6:ec:36:c7:
5c:15:2c:b6:cb:24:f8:bc:e7:89:5d:ed:99:3f:04:
cd:8c:00:c2:c2:29:3b:ad:f4:7d:e5:e3:3a:57:33:
be:fd:d9:68:27:66:3a:5a:56:86:d6:f4:29:9c:8f:
bd:95:78:40:77:6e:c3:79:dc:b5:78:e1:96:57:f4:
34:d8:4b:f8:91:e4:5a:ce:f6:de:97:de:60:64:0a:
6d:8d:a1:72:38:25:64:91:02:bf:6a:3b:00:c8:ed:
25:ba:d6:3a:a0:fb:4f:8f:a9:dc:fd:bd:b2:25:78:
7d:7b:17:9f:28:a7:c4:ef:9b:d7:c9:48:63:8d:9a:
56:5d:24:cd:e3:cc:d4:40:da:35:3f:5c:e8:dd:41:
d0:d6:a6:55:63:b9:28:1b:6f:d7:87:a6:ef:ba:ab:
b4:0a:44:25:34:22:fc:5a:f7:b2:a4:83:e3:ec:b8:
c4:c2:bf:32:72:5a:d2:92:ea:0b:5b:de:46:c8:5b:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:05:E6:D6:67:DD:5F:E6:16:8A:5A:B9:63:23:1C:8B:E6:11:56
X509v3 Authority Key Identifier:
keyid:A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/qhwF5tZn3V_mFopauWMjHIvmEVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/pZFbyKmC_mHrSu1UGDIyiDKVBNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:74:45:50:e4:d9:23:31:25:ff:74:09:50:24:e3:9c:d2:cc:
d8:8a:4f:b7:40:3c:19:d9:81:d7:68:94:08:3e:88:3e:90:42:
d6:a0:0a:15:fc:f3:bb:c1:7e:00:55:2d:58:a7:db:2d:3b:a6:
73:c4:63:1a:77:c9:b4:30:cb:69:0e:35:e1:c6:82:b1:9a:1c:
3b:06:ff:70:53:d8:74:83:ae:6a:31:5d:62:b6:4d:13:4f:93:
f3:d4:00:e7:39:98:42:7a:3c:62:8c:94:2f:f1:8e:fb:8b:c0:
5e:6e:2d:54:0d:b8:70:85:b2:b2:89:06:04:4e:aa:91:1e:71:
8e:ac:6d:1d:97:ad:46:86:83:46:55:6d:b9:74:ff:52:f8:37:
ac:ce:7f:17:35:72:b2:4d:96:ae:9f:33:c2:72:02:b2:6d:0e:
44:d5:66:93:e8:63:5e:38:ab:9c:ef:58:9a:86:25:bd:45:05:
b7:5e:b8:3d:6e:86:96:62:56:e5:d3:ef:d2:d0:f0:f6:f8:f0:
85:d6:19:67:6b:7c:a9:a7:c3:5b:57:f1:91:34:77:58:e6:72:
2c:75:7b:e1:6a:65:19:6a:6b:32:5b:b4:c6:36:c8:db:00:15:
59:fc:90:0c:96:80:f7:ef:5b:d5:3f:d9:d0:51:38:44:8e:52:
4c:7a:1a:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlVwz5EgVsY4dgBZjTkv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTE1YmM4YTk4MmZlNjFlYjRhZWQ1NDE4MzIzMjg4MzI5
NTA0ZDcwHhcNMjQwMTAyMDAzMTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTFjMDVlNmQ2NjdkZDVmZTYxNjhhNWFiOTYzMjMxYzhiZTYxMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlAzsFko0FH+tMkDrXGT5sLLR2qo
Mw3IrvvJ7hXgdMSuS1epC7t7tI8j/1Si1awkUA1lwyRXDn+intAH6pBeybV9vUfc
z9bsNsdcFSy2yyT4vOeJXe2ZPwTNjADCwik7rfR95eM6VzO+/dloJ2Y6WlaG1vQp
nI+9lXhAd27Dedy1eOGWV/Q02Ev4keRazvbel95gZAptjaFyOCVkkQK/ajsAyO0l
utY6oPtPj6nc/b2yJXh9exefKKfE75vXyUhjjZpWXSTN48zUQNo1P1zo3UHQ1qZV
Y7koG2/Xh6bvuqu0CkQlNCL8WveypIPj7LjEwr8yclrSkuoLW95GyFvmlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKocBebWZ91f5haKWrljIxyL5hFWMB8GA1UdIwQY
MBaAFKWRW8ipgv5h60rtVBgyMogylQTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpGYnlLbUNfbUhyU3UxVUdESXlpREtWQk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZTM3ZDMtYzYzMi00OGI4LTliMGIt
NTAxMjA1NGY5ZDI2LzEvcWh3RjV0Wm4zVl9tRm9wYXVXTWpISXZtRVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84ZTM3ZDMtYzYzMi00OGI4LTliMGItNTAxMjA1NGY5ZDI2
LzEvcFpGYnlLbUNfbUhyU3UxVUdESXlpREtWQk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+E6MA0G
CSqGSIb3DQEBCwUAA4IBAQC4dEVQ5NkjMSX/dAlQJOOc0szYik+3QDwZ2YHXaJQI
Pog+kELWoAoV/PO7wX4AVS1Yp9stO6ZzxGMad8m0MMtpDjXhxoKxmhw7Bv9wU9h0
g65qMV1itk0TT5Pz1ADnOZhCejxijJQv8Y77i8Bebi1UDbhwhbKyiQYETqqRHnGO
rG0dl61GhoNGVW25dP9S+Deszn8XNXKyTZaunzPCcgKybQ5E1WaT6GNeOKuc71ia
hiW9RQW3Xrg9boaWYlbl0+/S0PD2+PCF1hlna3ypp8NbV/GRNHdY5nIsdXvhamUZ
amsyW7TGNsjbABVZ/JAMloD371vVP9nQUThEjlJMehqs
-----END CERTIFICATE-----
Generated at Wed Mar 6 21:41:31 2024 by rpki-client on console.sobornost.net