Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/UaB7-kmlQPMFJCEUmUiXGP8OCwM.roa
File: UaB7-kmlQPMFJCEUmUiXGP8OCwM.roa (raw, json)
Hash identifier: XWxFzd+0J8jrMbq3P3yjUJCjbAWO4M/5fFsO7XsvyEA=
Subject key identifier: 51:A0:7B:FA:49:A5:40:F3:05:24:21:14:99:48:97:18:FF:0E:0B:03
Certificate issuer: /CN=084b2408adf9480e8268b7733be48127433ce4d4
Certificate serial: 0187297D48A8DD9E74BF838191FEE352685B
Authority key identifier: 08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/UaB7-kmlQPMFJCEUmUiXGP8OCwM.roa
Signing time: Tue 28 Mar 2023 18:31:29 +0000
ROA not before: Tue 28 Mar 2023 18:31:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150303
IP address blocks: 185.235.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:29:7d:48:a8:dd:9e:74:bf:83:81:91:fe:e3:52:68:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084b2408adf9480e8268b7733be48127433ce4d4
Validity
Not Before: Mar 28 18:31:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51a07bfa49a540f30524211499489718ff0e0b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:b3:b6:ef:84:aa:2e:cb:95:d7:1e:9d:df:
99:11:82:36:9f:90:b4:0b:0c:31:be:ae:52:7d:04:
bf:22:5d:be:22:90:fe:eb:b5:ae:1b:41:fd:2e:b1:
9d:22:f6:4f:be:5e:5a:39:6b:ed:e2:54:3b:14:1a:
f8:21:78:83:aa:83:34:d7:f6:eb:28:53:e5:9b:4a:
13:93:cb:52:15:db:f8:11:ec:87:67:b6:9f:de:79:
9f:a2:ca:87:6e:e5:ed:b6:ff:22:26:31:42:b0:bd:
48:65:43:bb:9c:93:20:d5:b8:28:92:09:85:9d:67:
22:30:3b:74:44:0b:ea:2d:46:e4:1d:44:c9:00:69:
f3:22:94:82:78:8b:96:b5:44:7a:e1:c8:5a:58:9d:
57:34:3f:0e:e0:47:f5:e7:7e:51:71:b0:d2:7d:b9:
1e:7d:17:12:a6:27:a3:82:0f:0f:dc:25:01:98:c6:
fb:37:98:84:1e:ee:b8:34:16:c8:5e:f8:57:7f:e1:
1e:6e:2c:1b:9c:0d:94:b1:45:1a:c0:55:47:0b:1b:
4a:06:2d:b1:cb:a8:f8:b1:dd:04:4a:2a:36:50:5b:
68:fe:c1:51:54:cd:3a:90:4f:1f:12:91:31:34:9a:
6d:36:de:3b:71:d2:a1:e9:b6:97:75:0f:78:31:f4:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:7B:FA:49:A5:40:F3:05:24:21:14:99:48:97:18:FF:0E:0B:03
X509v3 Authority Key Identifier:
keyid:08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/UaB7-kmlQPMFJCEUmUiXGP8OCwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/CEskCK35SA6CaLdzO-SBJ0M85NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:92:55:c6:b2:cf:03:6d:45:b4:90:c1:ce:3c:65:71:ed:a0:
3f:95:58:25:2b:49:ff:d3:12:ce:02:c3:08:f9:09:9c:63:2b:
20:d2:cb:72:88:65:dc:e8:94:01:d4:6c:83:e7:f3:c5:0b:51:
2b:50:32:b1:c6:2e:a1:a1:f9:c3:68:eb:78:ca:c8:2b:7a:54:
8f:51:27:6b:d5:9a:5e:01:ef:cf:9b:7d:9e:0a:93:df:1d:ce:
41:ce:68:01:5c:37:40:1d:b8:8e:4c:fa:36:01:77:13:5f:9e:
2a:cc:47:4b:4a:48:4e:cb:67:aa:65:fc:1e:6c:cb:07:d5:81:
a0:72:d6:f5:0b:aa:cf:85:6b:72:9f:37:de:6e:14:9a:b2:17:
08:a6:29:bf:a1:c3:8f:7e:e3:f8:65:ef:df:3e:19:19:14:70:
45:1f:41:54:2b:05:99:ae:1c:80:67:53:5b:67:4d:37:b2:42:
61:f6:d0:9e:84:a6:88:81:15:dd:bc:9b:3a:6f:b7:c1:82:89:
a4:2d:9e:96:ad:13:ef:84:94:45:6b:7f:1b:66:d7:12:21:63:
56:1d:62:9c:c3:6c:07:7c:7c:c9:53:5c:b4:7f:bc:7e:01:7e:
74:a1:10:df:2f:1b:a3:c0:9e:f7:98:4d:8d:0d:ce:cf:c6:e5:
cf:4f:73:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcpfUio3Z50v4OBkf7jUmhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NGIyNDA4YWRmOTQ4MGU4MjY4Yjc3MzNiZTQ4MTI3NDMz
Y2U0ZDQwHhcNMjMwMzI4MTgzMTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWEwN2JmYTQ5YTU0MGYzMDUyNDIxMTQ5OTQ4OTcxOGZmMGUwYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhImztu+Eqi7Lldcend+ZEYI2n5C0
Cwwxvq5SfQS/Il2+IpD+67WuG0H9LrGdIvZPvl5aOWvt4lQ7FBr4IXiDqoM01/br
KFPlm0oTk8tSFdv4EeyHZ7af3nmfosqHbuXttv8iJjFCsL1IZUO7nJMg1bgokgmF
nWciMDt0RAvqLUbkHUTJAGnzIpSCeIuWtUR64chaWJ1XND8O4Ef1535RcbDSfbke
fRcSpiejgg8P3CUBmMb7N5iEHu64NBbIXvhXf+EebiwbnA2UsUUawFVHCxtKBi2x
y6j4sd0ESio2UFto/sFRVM06kE8fEpExNJptNt47cdKh6baXdQ94MfQBlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGge/pJpUDzBSQhFJlIlxj/DgsDMB8GA1UdIwQY
MBaAFAhLJAit+UgOgmi3czvkgSdDPOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0Vza0NLMzVTQTZDYUxkek8tU0JKME04NU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jMTlkYTMtN2EzYi00OTM4LWI3Yzct
MTdmYjY0ZmQ4MjUwLzEvVWFCNy1rbWxRUE1GSkNFVW1VaVhHUDhPQ3dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jMTlkYTMtN2EzYi00OTM4LWI3YzctMTdmYjY0ZmQ4MjUw
LzEvQ0Vza0NLMzVTQTZDYUxkek8tU0JKME04NU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuevgMA0G
CSqGSIb3DQEBCwUAA4IBAQBOklXGss8DbUW0kMHOPGVx7aA/lVglK0n/0xLOAsMI
+QmcYysg0styiGXc6JQB1GyD5/PFC1ErUDKxxi6hofnDaOt4ysgrelSPUSdr1Zpe
Ae/Pm32eCpPfHc5BzmgBXDdAHbiOTPo2AXcTX54qzEdLSkhOy2eqZfwebMsH1YGg
ctb1C6rPhWtynzfebhSashcIpim/ocOPfuP4Ze/fPhkZFHBFH0FUKwWZrhyAZ1Nb
Z003skJh9tCehKaIgRXdvJs6b7fBgomkLZ6WrRPvhJRFa38bZtcSIWNWHWKcw2wH
fHzJU1y0f7x+AX50oRDfLxujwJ73mE2NDc7PxuXPT3Pn
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net