Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f5dd4b-bd74-48cb-b468-7c6afd085c4e/1/0jR9Rcf5144L5MnPewpOQFjV4DY.roa
File: 0jR9Rcf5144L5MnPewpOQFjV4DY.roa (raw, json)
Hash identifier: VuIJIaeJWOIu39/lrPuEYuk8q2ug+e0ds+n3fja5o5Q=
Subject key identifier: D2:34:7D:45:C7:F9:D7:8E:0B:E4:C9:CF:7B:0A:4E:40:58:D5:E0:36
Certificate issuer: /CN=019b3116ee4b29d1c6b54f29b80efd92bcc01190
Certificate serial: 01856C9CC4C2D3E413775FAB922B95E5B0A8
Authority key identifier: 01:9B:31:16:EE:4B:29:D1:C6:B5:4F:29:B8:0E:FD:92:BC:C0:11:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZsxFu5LKdHGtU8puA79krzAEZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f5dd4b-bd74-48cb-b468-7c6afd085c4e/1/0jR9Rcf5144L5MnPewpOQFjV4DY.roa
Signing time: Sun 01 Jan 2023 09:14:51 +0000
ROA not before: Sun 01 Jan 2023 09:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35280
IP address blocks: 185.196.72.0/24 maxlen: 24
185.196.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:c4:c2:d3:e4:13:77:5f:ab:92:2b:95:e5:b0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019b3116ee4b29d1c6b54f29b80efd92bcc01190
Validity
Not Before: Jan 1 09:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2347d45c7f9d78e0be4c9cf7b0a4e4058d5e036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:ea:1d:11:56:87:38:9e:89:84:3c:46:87:
8f:31:0c:5b:57:7b:9b:12:0c:67:34:70:dc:59:31:
66:49:91:cc:13:14:a0:52:65:c3:b6:fe:e1:17:5a:
eb:97:21:df:87:55:c1:38:fb:a8:70:a3:60:1e:12:
36:b6:27:c2:51:1b:7c:a3:64:30:2e:ea:57:df:27:
ba:1a:05:96:59:ce:d6:8e:56:2c:e5:fb:45:44:4c:
20:49:91:58:aa:08:04:56:a3:f1:a8:96:2e:dc:8b:
1e:14:89:14:9c:da:6b:8a:3b:a9:8d:b6:a0:ff:b2:
04:f9:65:d3:5c:fd:17:4a:0c:e4:75:1f:45:c4:c3:
d6:63:ba:9d:65:0b:f4:ed:6b:99:f9:1e:92:1c:1c:
e2:15:2c:b5:f8:07:a0:e7:43:ab:31:5a:2a:94:2a:
30:28:ff:4e:90:d3:94:91:8d:7b:00:4c:12:aa:a2:
22:52:20:45:74:a6:9d:66:b2:8a:ae:f9:26:ed:42:
c4:be:e6:3e:49:f6:6b:a3:c9:0a:57:34:34:88:c3:
16:c9:ae:26:3b:96:db:9a:8a:b7:39:f8:4e:01:92:
e7:e6:be:01:5e:36:dd:1f:73:cd:36:4d:64:d3:35:
bb:b8:04:e0:01:6b:95:01:55:99:be:57:13:2a:c9:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:34:7D:45:C7:F9:D7:8E:0B:E4:C9:CF:7B:0A:4E:40:58:D5:E0:36
X509v3 Authority Key Identifier:
keyid:01:9B:31:16:EE:4B:29:D1:C6:B5:4F:29:B8:0E:FD:92:BC:C0:11:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZsxFu5LKdHGtU8puA79krzAEZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f5dd4b-bd74-48cb-b468-7c6afd085c4e/1/0jR9Rcf5144L5MnPewpOQFjV4DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f5dd4b-bd74-48cb-b468-7c6afd085c4e/1/AZsxFu5LKdHGtU8puA79krzAEZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.72.0/24
185.196.75.0/24
Signature Algorithm: sha256WithRSAEncryption
10:75:70:a0:7f:a8:13:be:97:a5:ac:f5:75:d6:26:88:bb:7c:
b7:5c:97:ee:80:41:5d:72:8f:45:3c:40:43:ba:4f:c7:02:c7:
5a:af:d8:77:21:cd:d9:b3:2f:86:1e:57:24:5d:44:b3:7f:d6:
d7:df:39:97:db:95:b9:8b:33:ab:54:cc:dc:88:ea:3e:58:66:
66:b6:d3:cf:b3:75:ce:f7:5f:14:64:61:3c:3a:8a:88:e9:8c:
9c:ac:37:62:50:b0:21:0d:8d:a1:a3:32:dd:31:43:c7:6a:b0:
c2:fc:cb:1a:50:56:e3:30:d5:1e:f6:26:6e:a8:c9:ff:1c:73:
3b:b0:0d:4d:9f:92:8c:51:a9:19:cd:a1:70:9b:96:e1:ec:8a:
fa:32:8d:f3:46:86:75:4b:18:e1:f8:e0:39:89:3e:e2:d7:e9:
f9:49:7b:12:44:1b:fc:a9:3b:eb:5b:b8:09:0f:9c:18:84:e1:
57:a5:94:b3:8e:df:fc:9f:58:bd:10:e2:6b:16:32:b9:73:7e:
18:57:01:a8:84:e5:30:65:1b:b3:33:34:03:8c:1d:be:4c:2b:
91:c3:25:0b:98:de:ff:79:74:b8:97:0d:09:54:0f:47:37:73:
2e:62:61:00:36:bc:ac:f7:b4:ee:f3:29:df:05:d4:02:08:42:
b3:8b:54:12
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsnMTC0+QTd1+rkiuV5bCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOWIzMTE2ZWU0YjI5ZDFjNmI1NGYyOWI4MGVmZDkyYmNj
MDExOTAwHhcNMjMwMTAxMDkxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjM0N2Q0NWM3ZjlkNzhlMGJlNGM5Y2Y3YjBhNGU0MDU4ZDVlMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5/qHRFWhzieiYQ8RoePMQxbV3ub
EgxnNHDcWTFmSZHMExSgUmXDtv7hF1rrlyHfh1XBOPuocKNgHhI2tifCURt8o2Qw
LupX3ye6GgWWWc7WjlYs5ftFREwgSZFYqggEVqPxqJYu3IseFIkUnNprijupjbag
/7IE+WXTXP0XSgzkdR9FxMPWY7qdZQv07WuZ+R6SHBziFSy1+Aeg50OrMVoqlCow
KP9OkNOUkY17AEwSqqIiUiBFdKadZrKKrvkm7ULEvuY+SfZro8kKVzQ0iMMWya4m
O5bbmoq3OfhOAZLn5r4BXjbdH3PNNk1k0zW7uATgAWuVAVWZvlcTKsnTEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNI0fUXH+deOC+TJz3sKTkBY1eA2MB8GA1UdIwQY
MBaAFAGbMRbuSynRxrVPKbgO/ZK8wBGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpzeEZ1NUxLZEhHdFU4cHVBNzlrcnpBRVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mNWRkNGItYmQ3NC00OGNiLWI0Njgt
N2M2YWZkMDg1YzRlLzEvMGpSOVJjZjUxNDRMNU1uUGV3cE9RRmpWNERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9mNWRkNGItYmQ3NC00OGNiLWI0NjgtN2M2YWZkMDg1YzRl
LzEvQVpzeEZ1NUxLZEhHdFU4cHVBNzlrcnpBRVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucRIAwQA
ucRLMA0GCSqGSIb3DQEBCwUAA4IBAQAQdXCgf6gTvpelrPV11iaIu3y3XJfugEFd
co9FPEBDuk/HAsdar9h3Ic3Zsy+GHlckXUSzf9bX3zmX25W5izOrVMzciOo+WGZm
ttPPs3XO918UZGE8OoqI6YycrDdiULAhDY2hozLdMUPHarDC/MsaUFbjMNUe9iZu
qMn/HHM7sA1Nn5KMUakZzaFwm5bh7Ir6Mo3zRoZ1Sxjh+OA5iT7i1+n5SXsSRBv8
qTvrW7gJD5wYhOFXpZSzjt/8n1i9EOJrFjK5c34YVwGohOUwZRuzMzQDjB2+TCuR
wyULmN7/eXS4lw0JVA9HN3MuYmEANrys97Tu8ynfBdQCCEKzi1QS
-----END CERTIFICATE-----
Generated at Fri Dec 29 13:54:07 2023 by rpki-client on console.sobornost.net