Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/wLwkFKF292oTAzYzj5XdaVYerBE.roa
File: wLwkFKF292oTAzYzj5XdaVYerBE.roa (raw, json)
Hash identifier: 4T+LDZE55/bvOGLAD4lJPzHQZUguv8mw+/crurgB65I=
Subject key identifier: C0:BC:24:14:A1:76:F7:6A:13:03:36:33:8F:95:DD:69:56:1E:AC:11
Certificate issuer: /CN=3ea11ec3b0b19546d156c236b3f2798d18cb5f20
Certificate serial: 01856BCA2DB76BF9880823EE59B49B88993A
Authority key identifier: 3E:A1:1E:C3:B0:B1:95:46:D1:56:C2:36:B3:F2:79:8D:18:CB:5F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqEew7CxlUbRVsI2s_J5jRjLXyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/wLwkFKF292oTAzYzj5XdaVYerBE.roa
Signing time: Sun 01 Jan 2023 05:24:50 +0000
ROA not before: Sun 01 Jan 2023 05:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204697
IP address blocks: 185.246.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:2d:b7:6b:f9:88:08:23:ee:59:b4:9b:88:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea11ec3b0b19546d156c236b3f2798d18cb5f20
Validity
Not Before: Jan 1 05:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0bc2414a176f76a130336338f95dd69561eac11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:d0:98:5a:68:42:96:aa:ea:c6:d3:36:f1:
63:2b:5c:a3:db:e2:dc:91:3f:64:71:aa:7c:46:90:
6b:7b:6e:38:2d:26:79:31:93:ff:be:dd:c5:a7:b9:
80:e6:31:ae:e5:7c:98:26:34:23:82:4a:23:1a:fa:
66:d5:8e:c9:7f:15:09:2d:9f:db:ef:2c:9e:cc:68:
34:ee:b7:b4:e7:74:ce:cf:77:8c:11:15:c7:ff:a1:
65:79:00:e1:81:af:c6:b1:ee:23:22:d5:99:83:c0:
c0:05:fd:94:e4:b7:ed:6f:0f:2f:e1:cd:2b:00:94:
a9:d6:fd:9b:a7:f8:df:dd:6c:83:a4:b2:a2:79:8b:
02:e5:88:9a:93:e4:35:fd:8e:64:8b:01:85:b3:ba:
f7:86:48:ae:25:f9:ad:d4:3c:59:e0:0f:89:84:ec:
6d:62:ba:6b:ef:74:54:01:6d:06:cb:eb:55:ca:76:
7a:ed:35:05:37:8a:53:26:91:bd:dd:07:45:26:12:
f8:54:ae:5a:36:8e:91:5c:c9:b9:4d:1d:c1:1e:28:
87:3d:60:7e:43:d6:01:0c:95:e0:13:b0:25:9b:eb:
5a:54:21:4b:e6:9c:05:f1:96:a8:4a:4c:7e:c6:55:
12:30:fb:a9:09:b9:60:e3:b3:1a:ed:4f:75:71:a2:
63:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BC:24:14:A1:76:F7:6A:13:03:36:33:8F:95:DD:69:56:1E:AC:11
X509v3 Authority Key Identifier:
keyid:3E:A1:1E:C3:B0:B1:95:46:D1:56:C2:36:B3:F2:79:8D:18:CB:5F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqEew7CxlUbRVsI2s_J5jRjLXyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/wLwkFKF292oTAzYzj5XdaVYerBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/PqEew7CxlUbRVsI2s_J5jRjLXyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.171.0/24
Signature Algorithm: sha256WithRSAEncryption
16:18:ae:d0:e0:95:6a:b6:1b:1a:fd:7c:52:2c:d6:ff:00:a9:
41:33:da:f4:e7:27:6a:9f:b4:15:a1:a9:51:14:3e:34:8a:5b:
b8:b1:72:4b:1a:37:a3:93:86:3f:7d:de:8f:37:ac:86:71:af:
f6:5c:52:e6:b7:d1:17:e9:90:b9:a9:ce:6b:25:8e:34:ec:78:
02:58:af:f5:e9:f9:90:e3:26:9b:58:cf:44:6a:fa:fd:52:a8:
eb:07:66:83:ad:38:16:58:21:ca:07:bd:ab:9f:e4:08:c4:1c:
6a:4a:09:51:6a:ee:4d:ab:8f:ab:06:a0:85:f4:07:e6:69:45:
2e:53:d9:1c:ee:a5:a6:4b:cc:df:c8:1a:cf:1a:8c:da:d1:d6:
00:c1:94:72:7e:4a:e4:3f:2f:bd:90:22:74:9e:38:eb:30:87:
2d:9e:96:93:7c:fb:e1:0b:1b:c2:0f:23:70:ce:27:f8:5a:30:
ca:0c:b0:3e:cf:af:2d:35:7d:37:f6:34:15:37:2d:30:63:0a:
89:8c:9c:9b:b5:16:c8:d1:fd:46:51:60:7f:53:e0:d5:a3:21:
1f:d3:93:c4:c3:f8:36:ae:00:1e:c6:a3:37:8c:3f:c9:cf:d1:
90:07:96:cf:23:27:2c:72:d2:ac:fd:4d:a9:f6:6e:4f:cf:66:
41:ac:8c:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVryi23a/mICCPuWbSbiJk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTExZWMzYjBiMTk1NDZkMTU2YzIzNmIzZjI3OThkMThj
YjVmMjAwHhcNMjMwMTAxMDUyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGJjMjQxNGExNzZmNzZhMTMwMzM2MzM4Zjk1ZGQ2OTU2MWVhYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cnQmFpoQpaq6sbTNvFjK1yj2+Lc
kT9kcap8RpBre244LSZ5MZP/vt3Fp7mA5jGu5XyYJjQjgkojGvpm1Y7JfxUJLZ/b
7yyezGg07re053TOz3eMERXH/6FleQDhga/Gse4jItWZg8DABf2U5Lftbw8v4c0r
AJSp1v2bp/jf3WyDpLKieYsC5Yiak+Q1/Y5kiwGFs7r3hkiuJfmt1DxZ4A+JhOxt
Yrpr73RUAW0Gy+tVynZ67TUFN4pTJpG93QdFJhL4VK5aNo6RXMm5TR3BHiiHPWB+
Q9YBDJXgE7Alm+taVCFL5pwF8ZaoSkx+xlUSMPupCblg47Ma7U91caJjLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMC8JBShdvdqEwM2M4+V3WlWHqwRMB8GA1UdIwQY
MBaAFD6hHsOwsZVG0VbCNrPyeY0Yy18gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFFZXc3Q3hsVWJSVnNJMnNfSjVqUmpMWHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOWFkNmYtOGNiMC00YWM3LWE1ZWMt
ZGVkMjExMGM0YzkzLzEvd0x3a0ZLRjI5Mm9UQXpZemo1WGRhVlllckJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8wOWFkNmYtOGNiMC00YWM3LWE1ZWMtZGVkMjExMGM0Yzkz
LzEvUHFFZXc3Q3hsVWJSVnNJMnNfSjVqUmpMWHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufarMA0G
CSqGSIb3DQEBCwUAA4IBAQAWGK7Q4JVqthsa/XxSLNb/AKlBM9r05ydqn7QVoalR
FD40ilu4sXJLGjejk4Y/fd6PN6yGca/2XFLmt9EX6ZC5qc5rJY407HgCWK/16fmQ
4yabWM9Eavr9UqjrB2aDrTgWWCHKB72rn+QIxBxqSglRau5Nq4+rBqCF9AfmaUUu
U9kc7qWmS8zfyBrPGoza0dYAwZRyfkrkPy+9kCJ0njjrMIctnpaTfPvhCxvCDyNw
zif4WjDKDLA+z68tNX039jQVNy0wYwqJjJybtRbI0f1GUWB/U+DVoyEf05PEw/g2
rgAexqM3jD/Jz9GQB5bPIycsctKs/U2p9m5Pz2ZBrIwK
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net