Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/12de0a-8cc1-41b0-aead-7d2cbfa170a6/1/KsDh3RQ0dt6OdA2dF4lleU5TxnY.roa
File: KsDh3RQ0dt6OdA2dF4lleU5TxnY.roa (raw, json)
Hash identifier: KUt1Zhd3r1zGtOgzdSBjZmbQXNGQr+QSTGFsK3mk+gM=
Subject key identifier: 2A:C0:E1:DD:14:34:76:DE:8E:74:0D:9D:17:89:65:79:4E:53:C6:76
Certificate issuer: /CN=167fe60ee7b078af23cfa5f62d75627b3f9c8de5
Certificate serial: 0189654AC297123E56CC307DB9E202E89C43
Authority key identifier: 16:7F:E6:0E:E7:B0:78:AF:23:CF:A5:F6:2D:75:62:7B:3F:9C:8D:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn_mDueweK8jz6X2LXViez-cjeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/12de0a-8cc1-41b0-aead-7d2cbfa170a6/1/KsDh3RQ0dt6OdA2dF4lleU5TxnY.roa
Signing time: Mon 17 Jul 2023 19:19:04 +0000
ROA not before: Mon 17 Jul 2023 19:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 84.246.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c2:97:12:3e:56:cc:30:7d:b9:e2:02:e8:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167fe60ee7b078af23cfa5f62d75627b3f9c8de5
Validity
Not Before: Jul 17 19:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ac0e1dd143476de8e740d9d178965794e53c676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:bc:63:6a:5d:11:c7:81:03:6e:fa:14:07:
5f:1a:f7:d6:b0:a5:1b:9b:2b:7c:b7:41:fa:34:bc:
83:88:80:16:ea:9a:c4:73:5d:b5:bf:2f:55:6e:0c:
58:f5:aa:08:bd:38:df:62:1c:ed:87:b5:de:6d:dc:
9b:ea:5a:d9:a9:e4:4f:71:5d:e3:df:31:ae:a8:0c:
df:2d:54:a5:8f:95:02:4d:a2:6a:e0:90:9d:7b:ea:
c0:81:7c:d9:8f:ef:47:16:54:f6:e3:f8:22:8a:60:
87:34:9d:5e:d5:a7:65:e3:49:5b:49:9c:3a:18:54:
49:14:41:6c:2c:0b:f8:2a:8c:4f:2d:81:9d:fb:64:
14:a4:cd:63:2c:a9:de:5d:53:cb:b5:94:73:04:a7:
3b:a4:d3:3c:b0:b5:ba:f4:ca:83:6e:74:ba:77:a6:
cd:90:a0:d2:0c:2b:59:91:9b:d5:1e:2a:a0:76:b9:
f7:98:e1:77:da:7a:f3:51:6c:88:c3:0d:3c:21:b3:
a7:f4:08:90:3e:a9:0b:79:fc:e6:4b:0d:90:f4:b7:
f9:8f:a2:35:64:2d:3a:92:16:3a:a7:84:d8:9f:fb:
df:f1:8b:72:99:a8:10:b9:ed:48:34:d4:f2:dc:a4:
49:ff:d4:a0:a2:4e:1f:a4:dd:df:2f:e9:4e:8b:09:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C0:E1:DD:14:34:76:DE:8E:74:0D:9D:17:89:65:79:4E:53:C6:76
X509v3 Authority Key Identifier:
keyid:16:7F:E6:0E:E7:B0:78:AF:23:CF:A5:F6:2D:75:62:7B:3F:9C:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn_mDueweK8jz6X2LXViez-cjeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/12de0a-8cc1-41b0-aead-7d2cbfa170a6/1/KsDh3RQ0dt6OdA2dF4lleU5TxnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/12de0a-8cc1-41b0-aead-7d2cbfa170a6/1/Fn_mDueweK8jz6X2LXViez-cjeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.81.0/24
Signature Algorithm: sha256WithRSAEncryption
26:21:73:82:cd:e0:80:30:92:b5:a1:53:47:dc:ca:87:19:89:
75:a4:f0:d9:38:25:30:fc:be:8e:eb:24:2b:94:2e:38:af:a4:
6f:e4:2b:41:7f:27:59:b6:92:8e:8a:9d:1c:25:85:40:bd:d0:
0f:50:ab:4c:a3:a6:9c:78:bd:7a:07:fe:5c:60:d5:f9:93:01:
24:bb:5f:d9:25:2c:ff:5f:af:1b:8f:ed:59:88:9e:12:15:c0:
6b:49:2e:7d:5b:ab:02:8d:3e:9c:29:3c:8a:21:f2:53:df:c5:
b9:96:53:46:24:2f:ff:d8:0d:63:3b:14:84:db:3a:99:05:26:
18:39:43:14:70:38:11:28:89:45:87:a6:4c:61:fb:ca:f8:a5:
61:dd:5c:26:27:a0:d9:9e:75:93:e6:23:29:0b:94:07:16:f0:
32:02:05:8a:b0:0a:7c:87:c1:20:db:91:a1:ba:31:08:ec:c1:
35:27:91:1a:40:40:c1:54:8b:fa:77:d0:89:42:81:19:f7:0d:
50:85:cd:36:28:0b:27:0e:5b:de:ff:41:53:df:9e:26:ba:ab:
fa:a1:e6:b2:57:6a:1c:6c:71:66:ce:7e:51:7a:1d:8b:ad:8a:
6c:4c:f2:65:74:f5:6f:d0:bc:18:d6:80:eb:62:1d:9a:12:c0:
07:8f:6e:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYllSsKXEj5WzDB9ueIC6JxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2N2ZlNjBlZTdiMDc4YWYyM2NmYTVmNjJkNzU2MjdiM2Y5
YzhkZTUwHhcNMjMwNzE3MTkxOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWMwZTFkZDE0MzQ3NmRlOGU3NDBkOWQxNzg5NjU3OTRlNTNjNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10u8Y2pdEceBA276FAdfGvfWsKUb
myt8t0H6NLyDiIAW6prEc121vy9VbgxY9aoIvTjfYhzth7Xebdyb6lrZqeRPcV3j
3zGuqAzfLVSlj5UCTaJq4JCde+rAgXzZj+9HFlT24/giimCHNJ1e1adl40lbSZw6
GFRJFEFsLAv4KoxPLYGd+2QUpM1jLKneXVPLtZRzBKc7pNM8sLW69MqDbnS6d6bN
kKDSDCtZkZvVHiqgdrn3mOF32nrzUWyIww08IbOn9AiQPqkLefzmSw2Q9Lf5j6I1
ZC06khY6p4TYn/vf8YtymagQue1INNTy3KRJ/9Sgok4fpN3fL+lOiwl2KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCrA4d0UNHbejnQNnReJZXlOU8Z2MB8GA1UdIwQY
MBaAFBZ/5g7nsHivI8+l9i11Yns/nI3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5fbUR1ZXdlSzhqejZYMkxYVmllei1jamVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xMmRlMGEtOGNjMS00MWIwLWFlYWQt
N2QyY2JmYTE3MGE2LzEvS3NEaDNSUTBkdDZPZEEyZEY0bGxlVTVUeG5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xMmRlMGEtOGNjMS00MWIwLWFlYWQtN2QyY2JmYTE3MGE2
LzEvRm5fbUR1ZXdlSzhqejZYMkxYVmllei1jamVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPZRMA0G
CSqGSIb3DQEBCwUAA4IBAQAmIXOCzeCAMJK1oVNH3MqHGYl1pPDZOCUw/L6O6yQr
lC44r6Rv5CtBfydZtpKOip0cJYVAvdAPUKtMo6aceL16B/5cYNX5kwEku1/ZJSz/
X68bj+1ZiJ4SFcBrSS59W6sCjT6cKTyKIfJT38W5llNGJC//2A1jOxSE2zqZBSYY
OUMUcDgRKIlFh6ZMYfvK+KVh3VwmJ6DZnnWT5iMpC5QHFvAyAgWKsAp8h8Eg25Gh
ujEI7ME1J5EaQEDBVIv6d9CJQoEZ9w1Qhc02KAsnDlve/0FT354muqv6oeayV2oc
bHFmzn5Reh2LrYpsTPJldPVv0LwY1oDrYh2aEsAHj25W
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:51 2023 by rpki-client on console.sobornost.net