Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/KcVyhgCSsX74OVWAXtgp9ZWCkVY.roa
File: KcVyhgCSsX74OVWAXtgp9ZWCkVY.roa (raw, json)
Hash identifier: 3IEiFEGrKt2hfJPboGIuZ6idGmcisdNKHUNYlZydb6w=
Subject key identifier: 29:C5:72:86:00:92:B1:7E:F8:39:55:80:5E:D8:29:F5:95:82:91:56
Certificate issuer: /CN=af651eb6a9e64793d3605f42983c43a52af89175
Certificate serial: 018457E877B673B8A0B1DC40EE3B91007EE8
Authority key identifier: AF:65:1E:B6:A9:E6:47:93:D3:60:5F:42:98:3C:43:A5:2A:F8:91:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2UetqnmR5PTYF9CmDxDpSr4kXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/KcVyhgCSsX74OVWAXtgp9ZWCkVY.roa
Signing time: Tue 08 Nov 2022 15:42:43 +0000
ROA not before: Tue 08 Nov 2022 15:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136787
IP address blocks: 31.222.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:e8:77:b6:73:b8:a0:b1:dc:40:ee:3b:91:00:7e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af651eb6a9e64793d3605f42983c43a52af89175
Validity
Not Before: Nov 8 15:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29c572860092b17ef83955805ed829f595829156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:78:74:41:31:50:1d:11:21:a0:ac:e8:9f:
6d:53:29:0c:40:15:63:a8:1c:f7:e9:1c:33:18:4e:
57:1c:de:4d:02:67:61:82:ed:f9:1b:5a:2c:cc:25:
0a:28:25:bb:0a:5b:22:42:67:f2:cc:f9:67:d1:5c:
31:ca:c3:41:b8:49:92:c8:47:15:34:44:df:57:36:
11:8c:b0:21:32:08:d1:b6:94:00:18:73:3e:5b:fa:
6e:2f:0e:74:95:fe:7d:d6:c8:75:6a:ad:ac:ef:51:
b9:b2:60:24:85:a4:13:d2:71:00:0a:9d:6f:ef:67:
16:f2:44:c5:97:2c:71:3f:9d:98:e2:6d:8c:21:3c:
07:39:a8:20:55:c7:a0:02:41:6c:fe:4d:08:fc:f6:
81:e4:98:80:3c:e1:d3:87:99:d4:67:20:72:87:c8:
3b:a6:ef:1f:ce:3a:2b:46:8c:07:c5:f2:85:ad:9c:
08:e9:a0:a7:7a:6a:be:ca:bb:c9:5a:cb:d2:5c:14:
f5:6e:37:a8:ec:0f:4f:42:8d:e3:2d:3f:be:c9:2d:
62:63:0e:92:fb:c3:56:1c:5c:8a:ea:7c:25:0a:28:
fa:ca:e6:d0:58:52:f2:8f:1b:80:c8:7b:a7:b8:4b:
27:58:de:e0:b7:39:dd:5e:40:02:cb:5e:7a:ab:8b:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C5:72:86:00:92:B1:7E:F8:39:55:80:5E:D8:29:F5:95:82:91:56
X509v3 Authority Key Identifier:
keyid:AF:65:1E:B6:A9:E6:47:93:D3:60:5F:42:98:3C:43:A5:2A:F8:91:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2UetqnmR5PTYF9CmDxDpSr4kXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/KcVyhgCSsX74OVWAXtgp9ZWCkVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/r2UetqnmR5PTYF9CmDxDpSr4kXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.254.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0e:fb:ec:e0:13:ca:99:25:a2:82:51:62:af:9d:df:d5:90:
0f:3c:42:5c:c9:59:99:22:80:4f:44:e8:50:9d:e9:1a:9e:0d:
6c:7f:ea:12:73:01:23:2b:cb:1c:59:47:80:5a:63:d2:4b:4f:
57:c4:6c:75:bf:a6:9e:ae:d2:e3:67:a7:df:b0:04:c9:71:04:
7c:de:f8:47:d5:a8:6e:7f:62:3a:c7:14:d3:17:d8:fc:9c:b1:
9d:2b:70:0b:f3:46:43:38:b7:f8:8c:ee:32:20:a1:94:06:12:
a9:ce:38:db:77:60:6f:de:0b:df:ab:12:3e:62:98:50:2f:a9:
c8:65:69:64:34:88:20:98:bc:28:67:38:bb:3a:73:0f:6b:59:
9c:66:fc:e5:5d:cf:b2:35:2e:28:46:de:84:c1:a7:00:1b:62:
f4:70:3e:98:aa:ba:54:f3:46:34:00:71:e0:39:e3:8f:61:10:
52:63:6d:4f:96:79:72:85:49:2c:f7:e8:52:99:eb:01:2f:73:
80:0b:ae:3d:29:9e:bd:9f:c8:5e:df:26:5a:60:8f:46:90:e9:
bd:c4:1e:8c:18:94:ce:e0:16:ce:0f:cb:c2:71:cf:a7:6d:4f:
94:dc:fd:42:95:75:f5:69:11:87:23:b1:60:16:3c:57:f1:99:
97:35:80:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRX6He2c7igsdxA7juRAH7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNjUxZWI2YTllNjQ3OTNkMzYwNWY0Mjk4M2M0M2E1MmFm
ODkxNzUwHhcNMjIxMTA4MTU0MjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWM1NzI4NjAwOTJiMTdlZjgzOTU1ODA1ZWQ4MjlmNTk1ODI5MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX14dEExUB0RIaCs6J9tUykMQBVj
qBz36RwzGE5XHN5NAmdhgu35G1oszCUKKCW7ClsiQmfyzPln0VwxysNBuEmSyEcV
NETfVzYRjLAhMgjRtpQAGHM+W/puLw50lf591sh1aq2s71G5smAkhaQT0nEACp1v
72cW8kTFlyxxP52Y4m2MITwHOaggVcegAkFs/k0I/PaB5JiAPOHTh5nUZyByh8g7
pu8fzjorRowHxfKFrZwI6aCnemq+yrvJWsvSXBT1bjeo7A9PQo3jLT++yS1iYw6S
+8NWHFyK6nwlCij6yubQWFLyjxuAyHunuEsnWN7gtzndXkACy156q4ujlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCnFcoYAkrF++DlVgF7YKfWVgpFWMB8GA1UdIwQY
MBaAFK9lHrap5keT02BfQpg8Q6Uq+JF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJVZXRxbm1SNVBUWUY5Q21EeERwU3I0a1hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mODkwY2EtNjMwOS00MTBkLTk1MjUt
YjQzODkxYjI4ZWRjLzEvS2NWeWhnQ1NzWDc0T1ZXQVh0Z3A5WldDa1ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mODkwY2EtNjMwOS00MTBkLTk1MjUtYjQzODkxYjI4ZWRj
LzEvcjJVZXRxbm1SNVBUWUY5Q21EeERwU3I0a1hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH97+MA0G
CSqGSIb3DQEBCwUAA4IBAQBkDvvs4BPKmSWiglFir53f1ZAPPEJcyVmZIoBPROhQ
nekang1sf+oScwEjK8scWUeAWmPSS09XxGx1v6aertLjZ6ffsATJcQR83vhH1ahu
f2I6xxTTF9j8nLGdK3AL80ZDOLf4jO4yIKGUBhKpzjjbd2Bv3gvfqxI+YphQL6nI
ZWlkNIggmLwoZzi7OnMPa1mcZvzlXc+yNS4oRt6EwacAG2L0cD6YqrpU80Y0AHHg
OeOPYRBSY21PlnlyhUks9+hSmesBL3OAC649KZ69n8he3yZaYI9GkOm9xB6MGJTO
4BbOD8vCcc+nbU+U3P1ClXX1aRGHI7FgFjxX8ZmXNYCd
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:03 2023 by rpki-client on console.sobornost.net