Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/2Nx_EjgH2tBMIylh6PCrnXTfsW4.roa
File: 2Nx_EjgH2tBMIylh6PCrnXTfsW4.roa (raw, json)
Hash identifier: TH0mcdS0/lNVWOKzC67bWTEvd1D/zbuNdoPgEDdIB4g=
Subject key identifier: D8:DC:7F:12:38:07:DA:D0:4C:23:29:61:E8:F0:AB:9D:74:DF:B1:6E
Certificate issuer: /CN=6a4ca009bea3d1d89bea5ed9d333595323ee8bae
Certificate serial: 01857246C1845E9193436FBD05B5C72D9310
Authority key identifier: 6A:4C:A0:09:BE:A3:D1:D8:9B:EA:5E:D9:D3:33:59:53:23:EE:8B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akygCb6j0dib6l7Z0zNZUyPui64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/2Nx_EjgH2tBMIylh6PCrnXTfsW4.roa
Signing time: Mon 02 Jan 2023 11:38:37 +0000
ROA not before: Mon 02 Jan 2023 11:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59934
IP address blocks: 193.3.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c1:84:5e:91:93:43:6f:bd:05:b5:c7:2d:93:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4ca009bea3d1d89bea5ed9d333595323ee8bae
Validity
Not Before: Jan 2 11:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8dc7f123807dad04c232961e8f0ab9d74dfb16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:20:d5:12:b5:62:07:c2:4b:c9:30:92:5b:
14:1e:92:13:da:a6:94:74:6e:3c:49:65:98:2c:eb:
8a:9a:20:9b:ac:6b:8e:fb:bf:f3:70:91:91:2a:dd:
36:25:17:ae:3d:28:ae:44:86:49:66:3a:92:d6:31:
94:ab:31:99:05:0d:21:8a:ce:82:25:52:5e:5f:5b:
bf:89:a3:da:07:e7:17:ec:2b:5e:44:1e:6f:54:27:
7e:d1:5b:fb:95:8a:0d:29:a1:7a:07:72:df:dc:46:
b0:ba:01:55:d3:49:1b:1c:c3:d8:63:bd:f7:4f:41:
62:60:35:57:fe:14:91:96:02:28:41:35:e7:85:35:
6b:f4:1c:ef:e9:6f:e7:d3:bc:bb:66:f3:ca:fe:84:
e9:d3:ec:1c:a3:71:ac:47:1d:1f:5d:0f:99:a4:08:
2c:95:e4:ac:27:c6:b2:f2:f2:e4:89:89:b9:25:69:
ed:0d:b7:94:01:96:d9:38:f0:97:ae:fb:a0:8e:30:
d4:fb:bd:04:97:e9:ab:8e:4a:89:db:2d:49:e9:db:
52:de:1c:9b:3a:3b:4f:5a:6e:c8:b6:c5:00:e7:eb:
27:1a:57:56:81:67:16:d7:10:fb:ba:77:8a:0a:84:
49:fc:5f:57:39:cc:80:7e:54:b8:79:5d:b2:77:5f:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:7F:12:38:07:DA:D0:4C:23:29:61:E8:F0:AB:9D:74:DF:B1:6E
X509v3 Authority Key Identifier:
keyid:6A:4C:A0:09:BE:A3:D1:D8:9B:EA:5E:D9:D3:33:59:53:23:EE:8B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akygCb6j0dib6l7Z0zNZUyPui64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/2Nx_EjgH2tBMIylh6PCrnXTfsW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/akygCb6j0dib6l7Z0zNZUyPui64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.55.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a7:0f:c6:25:1c:bf:45:f9:b2:ca:7f:d5:f7:bd:96:03:2b:
5c:64:23:d0:0a:de:d3:5d:7b:27:d1:9a:61:83:a3:7f:0f:1e:
2f:e2:aa:79:ca:86:00:9b:6f:af:89:b3:74:cc:4e:f4:fd:87:
69:d4:49:a5:86:19:0f:f0:7d:3c:2f:4f:74:ea:ad:bf:9a:38:
81:2e:19:6f:5c:df:81:8d:34:85:1d:cc:ca:cd:0b:d2:04:21:
87:a4:26:c8:e3:50:dd:82:f4:5a:94:37:15:74:32:72:5f:3f:
95:f3:44:4b:58:24:b7:de:22:04:2a:d4:ca:6f:26:c9:7b:89:
9e:7d:b4:7d:d9:6c:98:27:36:1a:83:81:39:ed:aa:3e:75:ee:
3d:79:a0:6d:79:97:1f:30:2f:70:ad:15:e7:62:2c:10:e4:59:
b4:cc:14:bb:27:e1:e7:bd:f4:36:75:72:9e:13:c1:55:4d:fe:
57:e1:61:44:d0:c6:dc:20:bc:95:71:1d:dd:5a:56:81:32:eb:
5f:a1:d2:bd:8d:f6:ec:30:f6:7f:fe:85:8e:3e:2b:36:50:17:
bc:4c:a9:4f:e6:c8:e1:2b:1f:76:a1:8e:c7:be:be:5a:bf:0e:
fd:7c:e6:ec:68:d9:a6:68:4c:cd:df:99:55:d6:90:a5:1d:65:
19:74:b7:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRsGEXpGTQ2+9BbXHLZMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNGNhMDA5YmVhM2QxZDg5YmVhNWVkOWQzMzM1OTUzMjNl
ZThiYWUwHhcNMjMwMTAyMTEzODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGRjN2YxMjM4MDdkYWQwNGMyMzI5NjFlOGYwYWI5ZDc0ZGZiMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWYg1RK1YgfCS8kwklsUHpIT2qaU
dG48SWWYLOuKmiCbrGuO+7/zcJGRKt02JReuPSiuRIZJZjqS1jGUqzGZBQ0his6C
JVJeX1u/iaPaB+cX7CteRB5vVCd+0Vv7lYoNKaF6B3Lf3EawugFV00kbHMPYY733
T0FiYDVX/hSRlgIoQTXnhTVr9Bzv6W/n07y7ZvPK/oTp0+wco3GsRx0fXQ+ZpAgs
leSsJ8ay8vLkiYm5JWntDbeUAZbZOPCXrvugjjDU+70El+mrjkqJ2y1J6dtS3hyb
OjtPWm7ItsUA5+snGldWgWcW1xD7uneKCoRJ/F9XOcyAflS4eV2yd19jjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjcfxI4B9rQTCMpYejwq51037FuMB8GA1UdIwQY
MBaAFGpMoAm+o9HYm+pe2dMzWVMj7ouuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWt5Z0NiNmowZGliNmw3WjB6TlpVeVB1aTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hOTNjMmQtNmQxMi00Y2IyLTlmYzUt
MjJkZWIzYmY1OTkxLzEvMk54X0VqZ0gydEJNSXlsaDZQQ3JuWFRmc1c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9hOTNjMmQtNmQxMi00Y2IyLTlmYzUtMjJkZWIzYmY1OTkx
LzEvYWt5Z0NiNmowZGliNmw3WjB6TlpVeVB1aTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQM3MA0G
CSqGSIb3DQEBCwUAA4IBAQCVpw/GJRy/Rfmyyn/V972WAytcZCPQCt7TXXsn0Zph
g6N/Dx4v4qp5yoYAm2+vibN0zE70/Ydp1EmlhhkP8H08L0906q2/mjiBLhlvXN+B
jTSFHczKzQvSBCGHpCbI41DdgvRalDcVdDJyXz+V80RLWCS33iIEKtTKbybJe4me
fbR92WyYJzYag4E57ao+de49eaBteZcfMC9wrRXnYiwQ5Fm0zBS7J+HnvfQ2dXKe
E8FVTf5X4WFE0MbcILyVcR3dWlaBMutfodK9jfbsMPZ//oWOPis2UBe8TKlP5sjh
Kx92oY7Hvr5avw79fObsaNmmaEzN35lV1pClHWUZdLc3
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net