Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/fzGn4F47ZamYsaEjLXnWNJai92g.roa
File: fzGn4F47ZamYsaEjLXnWNJai92g.roa (raw, json)
Hash identifier: U3dY1Gyik1JSexS7msUnFCwg9sgdTKWsk1qOh1gGMl8=
Subject key identifier: 7F:31:A7:E0:5E:3B:65:A9:98:B1:A1:23:2D:79:D6:34:96:A2:F7:68
Certificate issuer: /CN=2f2ac25de2d9ba70c463fa95ef3aa5a412c87498
Certificate serial: 8D512C
Authority key identifier: 2F:2A:C2:5D:E2:D9:BA:70:C4:63:FA:95:EF:3A:A5:A4:12:C8:74:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyrCXeLZunDEY_qV7zqlpBLIdJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/fzGn4F47ZamYsaEjLXnWNJai92g.roa
Signing time: Sat 01 Jan 2022 02:55:13 +0000
ROA not before: Sat 01 Jan 2022 02:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 94.154.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9261356 (0x8d512c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2ac25de2d9ba70c463fa95ef3aa5a412c87498
Validity
Not Before: Jan 1 02:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f31a7e05e3b65a998b1a1232d79d63496a2f768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:d3:0f:6e:c3:01:c5:a5:88:0b:09:db:48:
22:ba:04:e7:a8:8b:20:fc:b2:b0:6d:fe:73:67:8d:
9e:90:cb:cb:ab:86:89:b7:c4:41:f8:30:fd:0c:0a:
8d:0d:82:f3:9d:ec:a3:22:f1:64:f5:2a:62:33:ad:
13:86:96:49:dd:b0:e9:d2:15:81:b6:05:75:29:3d:
65:75:e8:88:43:e7:9c:ed:e5:87:6a:77:35:4f:c2:
a8:95:84:9b:0e:a5:7d:65:f9:52:a4:46:54:ce:bb:
76:9e:43:f6:73:30:46:11:60:d4:7d:46:80:8a:dc:
8d:08:4b:22:f4:a2:60:e2:51:d6:8f:7b:2c:65:79:
d4:f6:13:ea:96:93:1f:32:61:73:05:5a:55:50:48:
54:f9:39:d2:21:c7:c7:f5:1e:ba:17:7c:01:2a:ac:
6e:28:a2:9f:ba:0c:a8:b8:7d:5a:29:5c:95:b9:31:
ff:3d:51:33:90:44:a7:e0:1c:b6:e7:11:3c:94:d2:
af:15:8e:83:c2:51:0f:75:8f:a3:51:71:fb:c4:ba:
12:53:2a:45:3c:77:b0:7b:3e:57:ad:dc:59:be:09:
2f:df:6e:0f:7a:f8:41:18:1a:96:91:02:d8:fe:23:
6c:b2:bf:f4:6c:71:6c:05:ad:71:33:7d:69:f7:d4:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:A7:E0:5E:3B:65:A9:98:B1:A1:23:2D:79:D6:34:96:A2:F7:68
X509v3 Authority Key Identifier:
keyid:2F:2A:C2:5D:E2:D9:BA:70:C4:63:FA:95:EF:3A:A5:A4:12:C8:74:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyrCXeLZunDEY_qV7zqlpBLIdJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/fzGn4F47ZamYsaEjLXnWNJai92g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/LyrCXeLZunDEY_qV7zqlpBLIdJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.127.0/24
Signature Algorithm: sha256WithRSAEncryption
73:24:81:9b:2b:fc:9e:49:2f:66:54:0d:2f:45:71:69:30:5b:
3f:dc:8d:40:7a:0a:c8:7a:80:2e:30:02:6b:78:02:6e:00:ee:
d2:d4:44:a3:9b:83:07:ef:11:d4:4b:a6:06:8b:0a:26:6d:aa:
f2:45:8f:cf:f3:4b:19:6a:f2:e9:61:82:dd:a8:07:1c:49:3a:
25:af:e3:da:d0:5d:dc:d0:aa:63:04:bb:63:0f:35:ac:25:7b:
8d:f2:46:b6:94:fb:05:be:72:94:c5:8f:ce:ff:49:e1:44:67:
e9:f6:4b:f5:c0:6d:e0:8f:39:98:9c:ff:4c:f6:18:a5:52:00:
5c:f9:d5:e4:0c:f7:0b:eb:69:a1:fe:83:20:a2:32:bb:87:03:
3b:ce:98:5c:98:e3:e9:c6:78:6f:67:f4:26:1a:61:2e:36:8e:
02:17:6c:ee:57:e8:03:1e:de:0e:3f:dc:8b:fe:72:66:59:f5:
01:34:2d:90:de:8e:86:6a:19:67:ca:d8:ad:17:32:03:dc:30:
3b:04:80:9c:5a:c1:f6:e4:ee:7f:5d:c0:ce:62:43:14:55:52:
1c:50:f4:99:ed:cf:21:ce:0c:77:16:bc:bc:73:7d:7b:42:2d:
23:8a:fe:33:a3:fd:f4:96:95:f4:01:72:48:d4:41:58:b9:41:
c9:78:0c:f7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAI1RLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZjJhYzI1ZGUyZDliYTcwYzQ2M2ZhOTVlZjNhYTVhNDEyYzg3NDk4MB4XDTIyMDEw
MTAyNTUxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2YzMWE3ZTA1ZTNi
NjVhOTk4YjFhMTIzMmQ3OWQ2MzQ5NmEyZjc2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALms0w9uwwHFpYgLCdtIIroE56iLIPyysG3+c2eNnpDLy6uG
ibfEQfgw/QwKjQ2C853soyLxZPUqYjOtE4aWSd2w6dIVgbYFdSk9ZXXoiEPnnO3l
h2p3NU/CqJWEmw6lfWX5UqRGVM67dp5D9nMwRhFg1H1GgIrcjQhLIvSiYOJR1o97
LGV51PYT6paTHzJhcwVaVVBIVPk50iHHx/Ueuhd8ASqsbiiin7oMqLh9Wilclbkx
/z1RM5BEp+ActucRPJTSrxWOg8JRD3WPo1Fx+8S6ElMqRTx3sHs+V63cWb4JL99u
D3r4QRgalpEC2P4jbLK/9GxxbAWtcTN9affU+TsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR/MafgXjtlqZixoSMtedY0lqL3aDAfBgNVHSMEGDAWgBQvKsJd4tm6cMRj
+pXvOqWkEsh0mDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0x5ckNYZUxadW5ERVlfcVY3enFscEJMSWRKZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvMzcyMTQzLTVkYmEtNGRjMy1hMDRiLTlmYTFlNjkxMDNiMC8x
L2Z6R240RjQ3WmFtWXNhRWpMWG5XTkphaTkyZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
MzcyMTQzLTVkYmEtNGRjMy1hMDRiLTlmYTFlNjkxMDNiMC8xL0x5ckNYZUxadW5E
RVlfcVY3enFscEJMSWRKZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF6afzANBgkqhkiG9w0BAQsFAAOC
AQEAcySBmyv8nkkvZlQNL0VxaTBbP9yNQHoKyHqALjACa3gCbgDu0tREo5uDB+8R
1EumBosKJm2q8kWPz/NLGWry6WGC3agHHEk6Ja/j2tBd3NCqYwS7Yw81rCV7jfJG
tpT7Bb5ylMWPzv9J4URn6fZL9cBt4I85mJz/TPYYpVIAXPnV5Az3C+tpof6DIKIy
u4cDO86YXJjj6cZ4b2f0JhphLjaOAhds7lfoAx7eDj/ci/5yZln1ATQtkN6OhmoZ
Z8rYrRcyA9wwOwSAnFrB9uTuf13AzmJDFFVSHFD0me3PIc4Mdxa8vHN9e0ItI4r+
M6P99JaV9AFySNRBWLlByXgM9w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net