Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03598f-2a33-455c-8599-e0d7a53adfa5/1/j6r7o1AJjyOgYr1BHq95Mt3KDNs.roa
File: j6r7o1AJjyOgYr1BHq95Mt3KDNs.roa (raw, json)
Hash identifier: iZSBpeiA/GnqlD8WMuk5AFjgYA9otjfyGlSSuCOSc54=
Subject key identifier: 8F:AA:FB:A3:50:09:8F:23:A0:62:BD:41:1E:AF:79:32:DD:CA:0C:DB
Certificate issuer: /CN=c101e1eaf9d0a501cd48c3ebb0e15da962308504
Certificate serial: A12B39
Authority key identifier: C1:01:E1:EA:F9:D0:A5:01:CD:48:C3:EB:B0:E1:5D:A9:62:30:85:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHh6vnQpQHNSMPrsOFdqWIwhQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03598f-2a33-455c-8599-e0d7a53adfa5/1/j6r7o1AJjyOgYr1BHq95Mt3KDNs.roa
Signing time: Sat 01 Jan 2022 03:51:55 +0000
ROA not before: Sat 01 Jan 2022 03:51:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 91.242.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10562361 (0xa12b39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101e1eaf9d0a501cd48c3ebb0e15da962308504
Validity
Not Before: Jan 1 03:51:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8faafba350098f23a062bd411eaf7932ddca0cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:be:8a:38:6f:b7:8d:49:1d:c2:1d:0a:08:
40:12:31:57:68:40:cc:d5:c8:84:e2:dd:f3:5b:f6:
e8:c4:66:99:74:81:5d:8a:03:53:19:28:91:00:db:
4d:06:d5:ef:95:46:5e:d9:b6:c2:e8:5d:43:f9:58:
db:49:8d:a4:6e:19:24:f1:2b:02:85:f8:bf:64:ee:
5f:ff:59:e8:60:0f:5d:ed:f4:f5:d1:71:e1:b1:49:
02:3c:72:e5:96:7d:4e:3e:d3:2b:c3:98:69:8d:b5:
b1:47:eb:8a:aa:44:32:5e:59:38:89:f2:02:30:02:
63:e1:e0:a4:44:17:e8:5a:3f:c9:df:2a:e1:7b:41:
94:2e:d7:54:c6:aa:f6:1c:d1:13:01:6d:29:bc:c9:
98:5b:cc:e7:2b:c2:9f:75:33:78:37:2a:c9:9d:63:
a0:d3:f3:4d:82:6b:33:22:6d:e6:36:58:77:14:a5:
ee:1d:96:db:5e:76:b3:08:e5:60:5f:50:b9:46:64:
12:ec:15:63:f9:09:fa:be:47:3d:28:79:77:f8:e0:
23:a5:98:93:2d:54:26:e2:02:c9:c5:08:b9:21:03:
1e:c6:25:4b:35:fc:ff:57:f3:aa:93:7e:39:cf:8c:
ec:94:82:52:b1:e5:e8:b6:af:b6:41:1f:49:4b:c4:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:FB:A3:50:09:8F:23:A0:62:BD:41:1E:AF:79:32:DD:CA:0C:DB
X509v3 Authority Key Identifier:
keyid:C1:01:E1:EA:F9:D0:A5:01:CD:48:C3:EB:B0:E1:5D:A9:62:30:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHh6vnQpQHNSMPrsOFdqWIwhQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03598f-2a33-455c-8599-e0d7a53adfa5/1/j6r7o1AJjyOgYr1BHq95Mt3KDNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03598f-2a33-455c-8599-e0d7a53adfa5/1/wQHh6vnQpQHNSMPrsOFdqWIwhQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8a:41:97:28:02:af:bc:cf:b9:67:2f:bb:1b:83:94:5b:df:
41:42:f3:f4:72:a6:d1:50:3b:e6:fc:94:8f:11:88:e4:81:dd:
b5:75:51:cf:11:0f:27:05:08:e4:c1:c6:52:1c:57:15:f5:81:
60:29:fc:61:ff:bd:05:02:83:5c:89:e0:60:29:e4:71:49:cc:
3c:69:57:80:13:f9:56:be:d2:d2:ae:87:02:4e:96:ab:46:26:
ad:51:3d:97:46:0e:8e:b0:36:f7:52:c5:fa:30:bf:7e:68:05:
94:a7:20:86:d6:11:85:21:6d:a6:1b:43:8f:bb:31:0d:b7:7f:
0e:a7:07:f6:70:c8:7f:b9:4a:b5:c8:4e:29:0d:59:7a:0b:6a:
3c:8e:dc:3f:05:6a:5a:97:0d:a1:8e:74:88:ea:e8:91:46:b9:
aa:4e:60:6b:7c:e2:5e:1d:43:2b:85:e6:67:d7:cc:0f:6a:c8:
ef:97:d5:6f:0e:fc:2c:63:28:ae:b5:1b:a5:cc:6a:a4:9f:a6:
80:33:49:b2:b1:f6:fd:8c:49:26:42:2b:34:af:1e:b0:20:a0:
93:bd:5f:19:12:fd:11:ec:c2:81:ef:b3:29:48:6b:08:61:b1:
a5:d7:84:d7:03:be:dd:b6:81:47:ea:7f:59:93:bd:27:2c:c6:
dc:71:b6:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAKErOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MTAxZTFlYWY5ZDBhNTAxY2Q0OGMzZWJiMGUxNWRhOTYyMzA4NTA0MB4XDTIyMDEw
MTAzNTE1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGZhYWZiYTM1MDA5
OGYyM2EwNjJiZDQxMWVhZjc5MzJkZGNhMGNkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANw3voo4b7eNSR3CHQoIQBIxV2hAzNXIhOLd81v26MRmmXSB
XYoDUxkokQDbTQbV75VGXtm2wuhdQ/lY20mNpG4ZJPErAoX4v2TuX/9Z6GAPXe30
9dFx4bFJAjxy5ZZ9Tj7TK8OYaY21sUfriqpEMl5ZOInyAjACY+HgpEQX6Fo/yd8q
4XtBlC7XVMaq9hzREwFtKbzJmFvM5yvCn3UzeDcqyZ1joNPzTYJrMyJt5jZYdxSl
7h2W2152swjlYF9QuUZkEuwVY/kJ+r5HPSh5d/jgI6WYky1UJuICycUIuSEDHsYl
SzX8/1fzqpN+Oc+M7JSCUrHl6LavtkEfSUvElRkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSPqvujUAmPI6BivUEer3ky3coM2zAfBgNVHSMEGDAWgBTBAeHq+dClAc1I
w+uw4V2pYjCFBDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dRSGg2dm5RcFFITlNNUHJzT0ZkcVdJd2hRUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvMDM1OThmLTJhMzMtNDU1Yy04NTk5LWUwZDdhNTNhZGZhNS8x
L2o2cjdvMUFKanlPZ1lyMUJIcTk1TXQzS0ROcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
MDM1OThmLTJhMzMtNDU1Yy04NTk5LWUwZDdhNTNhZGZhNS8xL3dRSGg2dm5RcFFI
TlNNUHJzT0ZkcVdJd2hRUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvy8DANBgkqhkiG9w0BAQsFAAOC
AQEAoYpBlygCr7zPuWcvuxuDlFvfQULz9HKm0VA75vyUjxGI5IHdtXVRzxEPJwUI
5MHGUhxXFfWBYCn8Yf+9BQKDXIngYCnkcUnMPGlXgBP5Vr7S0q6HAk6Wq0YmrVE9
l0YOjrA291LF+jC/fmgFlKcghtYRhSFtphtDj7sxDbd/DqcH9nDIf7lKtchOKQ1Z
egtqPI7cPwVqWpcNoY50iOrokUa5qk5ga3ziXh1DK4XmZ9fMD2rI75fVbw78LGMo
rrUbpcxqpJ+mgDNJsrH2/YxJJkIrNK8esCCgk71fGRL9EezCge+zKUhrCGGxpdeE
1wO+3baBR+p/WZO9JyzG3HG2wQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:32 2023 by rpki-client on console.sobornost.net