Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/C321hHkaAEwDZIIeSYhk-palfrQ.roa
File: C321hHkaAEwDZIIeSYhk-palfrQ.roa (raw, json)
Hash identifier: +tu14edj39FG7wniIg/P2Gg+WssFZkI17kekUKEnwII=
Subject key identifier: 0B:7D:B5:84:79:1A:00:4C:03:64:82:1E:49:88:64:FA:96:A5:7E:B4
Certificate issuer: /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial: 0187AF039A46FA07EB433FD80B7CC9675B48
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/C321hHkaAEwDZIIeSYhk-palfrQ.roa
Signing time: Sun 23 Apr 2023 16:47:41 +0000
ROA not before: Sun 23 Apr 2023 16:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.91.224.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:af:03:9a:46:fa:07:eb:43:3f:d8:0b:7c:c9:67:5b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
Validity
Not Before: Apr 23 16:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b7db584791a004c0364821e498864fa96a57eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:54:38:4c:1c:d1:7c:8b:c5:39:b0:a7:08:
0f:a1:81:43:9d:26:54:15:d2:d7:43:16:e5:cc:2d:
11:dd:9e:21:33:6f:32:43:c7:c5:a6:1c:fe:07:ff:
01:04:f5:cc:c4:e0:1c:5e:1c:4f:26:18:08:aa:b4:
48:22:97:55:15:65:5f:2d:ae:7e:aa:7e:2c:24:06:
8a:b9:a3:a8:c7:64:fe:dc:4b:c8:ec:98:91:10:cf:
b1:b7:6c:67:51:ae:52:39:48:0b:be:e5:dc:3c:28:
f3:e5:4e:04:2a:b3:42:ab:84:c5:6c:42:d8:6f:8f:
ad:33:17:6b:d7:a3:a3:1a:05:59:b0:1a:b1:c8:cd:
72:69:6e:37:b0:51:53:2d:8f:f1:3b:00:e7:8f:c7:
38:a4:5f:f5:85:74:07:2b:95:b8:0d:50:f5:bc:1a:
20:43:9f:cc:bc:dd:72:ed:bc:7d:c5:c7:5a:d5:12:
d0:f9:2c:34:cd:6d:82:e2:25:73:f8:a2:d2:6e:ff:
5f:bd:3b:84:7b:20:1a:8d:57:5f:5c:26:ad:d1:75:
61:32:e5:1e:40:08:e5:a3:57:1b:db:d4:34:9a:b5:
16:e3:97:c8:61:b5:df:79:8b:7b:c2:b1:55:a9:a3:
12:03:ca:79:7f:89:01:96:28:82:d4:22:b9:af:96:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:B5:84:79:1A:00:4C:03:64:82:1E:49:88:64:FA:96:A5:7E:B4
X509v3 Authority Key Identifier:
keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/C321hHkaAEwDZIIeSYhk-palfrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.224.0/24
45.91.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:14:08:32:8c:e9:fb:21:f7:21:25:c3:86:bc:46:43:68:be:
48:b2:25:e8:ad:b5:26:95:23:73:7c:12:24:c4:c2:cb:03:78:
f6:3c:ab:b0:06:8d:cf:79:99:6f:06:22:a8:7b:13:77:be:fb:
ca:87:4b:a3:f6:0f:b7:0e:4e:b0:84:12:b3:e7:75:7f:f6:3f:
69:f5:eb:4b:a6:95:98:69:47:43:35:17:6e:37:39:ce:0f:ba:
e5:26:d6:c8:5a:4c:4d:be:fc:98:a3:9a:3a:82:07:88:07:d0:
97:20:da:ea:1a:ba:a1:1b:f4:00:e7:7e:98:2c:16:d2:10:a3:
7d:9b:d7:d7:cd:ad:62:6c:c2:aa:0d:c8:8a:e7:53:56:ff:06:
c0:7a:9c:aa:32:4d:08:7f:26:17:e0:21:3a:5a:a4:2f:56:7f:
20:25:46:a4:bd:81:49:b3:1c:89:2f:ba:2f:26:c2:d1:86:69:
7d:f8:b5:d0:c9:1d:1c:09:e5:94:43:06:e2:2f:22:18:ea:97:
ac:96:fe:21:77:35:34:31:61:50:b9:a1:df:88:54:80:5e:2b:
d5:b0:8a:3d:27:57:99:12:a7:cd:65:1c:23:06:ac:04:7f:8a:
b9:61:69:76:01:43:4c:34:af:c1:07:35:ab:22:6b:f4:7b:03:
47:ac:12:c5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYevA5pG+gfrQz/YC3zJZ1tIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGEwNjI1OTUzNGRjNDUyMDg5ZDI5MWFkMjc3ZWVhYzE2
Y2Q0MmEwHhcNMjMwNDIzMTY0NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjdkYjU4NDc5MWEwMDRjMDM2NDgyMWU0OTg4NjRmYTk2YTU3ZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp15UOEwc0XyLxTmwpwgPoYFDnSZU
FdLXQxblzC0R3Z4hM28yQ8fFphz+B/8BBPXMxOAcXhxPJhgIqrRIIpdVFWVfLa5+
qn4sJAaKuaOox2T+3EvI7JiREM+xt2xnUa5SOUgLvuXcPCjz5U4EKrNCq4TFbELY
b4+tMxdr16OjGgVZsBqxyM1yaW43sFFTLY/xOwDnj8c4pF/1hXQHK5W4DVD1vBog
Q5/MvN1y7bx9xcda1RLQ+Sw0zW2C4iVz+KLSbv9fvTuEeyAajVdfXCat0XVhMuUe
QAjlo1cb29Q0mrUW45fIYbXfeYt7wrFVqaMSA8p5f4kBliiC1CK5r5aFywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAt9tYR5GgBMA2SCHkmIZPqWpX60MB8GA1UdIwQY
MBaAFALaBiWVNNxFIInSka0nfurBbNQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXRvR0paVTAzRVVnaWRLUnJTZC02c0ZzMUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zZjVjMjEtN2IzYi00MGY3LTg4NTEt
Y2QzMmYwZDQwODZiLzEvQzMyMWhIa2FBRXdEWklJZVNZaGstcGFsZnJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zZjVjMjEtN2IzYi00MGY3LTg4NTEtY2QzMmYwZDQwODZi
LzEvQXRvR0paVTAzRVVnaWRLUnJTZC02c0ZzMUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVvgAwQA
LVvjMA0GCSqGSIb3DQEBCwUAA4IBAQCfFAgyjOn7IfchJcOGvEZDaL5IsiXorbUm
lSNzfBIkxMLLA3j2PKuwBo3PeZlvBiKoexN3vvvKh0uj9g+3Dk6whBKz53V/9j9p
9etLppWYaUdDNRduNznOD7rlJtbIWkxNvvyYo5o6ggeIB9CXINrqGrqhG/QA536Y
LBbSEKN9m9fXza1ibMKqDciK51NW/wbAepyqMk0IfyYX4CE6WqQvVn8gJUakvYFJ
sxyJL7ovJsLRhml9+LXQyR0cCeWUQwbiLyIY6peslv4hdzU0MWFQuaHfiFSAXivV
sIo9J1eZEqfNZRwjBqwEf4q5YWl2AUNMNK/BBzWrImv0ewNHrBLF
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net