Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/44tyYUD3geeD4GzYjG86w_OxVc4.roa
File: 44tyYUD3geeD4GzYjG86w_OxVc4.roa (raw, json)
Hash identifier: U4skPD7J6XATQSRQf05C0C288xX636MQuQUUBEtsIfQ=
Subject key identifier: E3:8B:72:61:40:F7:81:E7:83:E0:6C:D8:8C:6F:3A:C3:F3:B1:55:CE
Certificate issuer: /CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Certificate serial: 0191DB3B66804B3C75F0C2E55AFE3E30026C
Authority key identifier: 04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/44tyYUD3geeD4GzYjG86w_OxVc4.roa
Signing time: Tue 10 Sep 2024 09:19:48 +0000
ROA not before: Tue 10 Sep 2024 09:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16236
IP address blocks: 151.88.0.0/16 maxlen: 16
151.92.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:3b:66:80:4b:3c:75:f0:c2:e5:5a:fe:3e:30:02:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Validity
Not Before: Sep 10 09:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e38b726140f781e783e06cd88c6f3ac3f3b155ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:31:25:4e:a6:3c:6a:13:30:c4:7c:ca:bb:
75:1f:5e:ce:7d:9b:72:01:6b:df:36:39:c2:1d:8a:
66:7b:88:03:d1:35:17:60:60:f6:b5:47:bd:08:43:
73:79:26:4b:ec:e9:9d:b1:0d:d4:8b:69:0e:2a:0e:
50:5f:98:85:ed:47:41:55:38:67:1d:6c:80:8c:de:
4c:e7:7a:c3:17:49:ba:b1:07:c1:1f:9f:c4:d4:b2:
64:ef:a0:83:93:cc:99:62:a4:08:b1:e9:e7:59:1c:
4c:5a:16:fe:b5:9a:45:cd:03:97:ff:63:7f:52:8e:
6c:e2:ea:c1:2c:4f:53:d5:33:c5:4a:63:49:11:ef:
8b:6a:4d:ee:f2:52:4a:a4:2a:77:d0:81:fb:68:d0:
71:fa:e0:36:ae:38:63:17:12:89:51:36:d8:c4:79:
2b:c3:f7:98:d1:a7:f1:ba:19:65:7d:13:06:b5:f8:
56:ac:94:0b:ae:d8:85:83:fd:93:df:9f:d0:53:04:
ab:62:8c:66:8f:45:f9:b6:39:2d:a9:73:4c:92:c1:
0c:ba:40:7b:92:86:20:c4:68:06:e0:30:2d:cd:6c:
c7:46:b9:bc:b9:fe:93:16:46:3d:a4:a5:db:72:54:
61:1d:2f:e5:6c:f1:a6:5a:4b:08:88:16:59:d5:91:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8B:72:61:40:F7:81:E7:83:E0:6C:D8:8C:6F:3A:C3:F3:B1:55:CE
X509v3 Authority Key Identifier:
keyid:04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/44tyYUD3geeD4GzYjG86w_OxVc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.88.0.0/16
151.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:fd:aa:9d:f6:1d:bc:b8:36:d1:55:42:4c:be:cc:54:85:98:
f0:d6:c9:d9:5a:c2:fd:f3:84:13:6f:ac:a5:09:c4:f6:34:9f:
28:db:42:c0:70:38:2a:25:65:ff:5d:cb:f1:bc:14:59:ce:fc:
2a:c5:ea:59:ff:44:83:f2:ed:2f:8c:a8:a0:cb:8f:3d:77:e9:
25:59:e9:0d:67:8f:c8:64:be:9e:02:57:c9:09:4c:24:f0:62:
65:05:ff:e4:8c:3a:76:f9:8f:76:6f:8a:c5:03:22:ed:3a:43:
0b:2e:71:c1:5c:3d:4c:c7:f8:ad:49:aa:e6:1c:10:13:61:65:
d7:88:bb:53:98:d2:7e:b2:fe:83:7c:c1:db:51:7d:3a:bc:40:
ce:2a:68:fa:39:18:a6:f7:dd:6f:3e:69:00:77:89:0d:ed:ce:
d8:62:23:c9:74:94:6c:5f:cf:5b:24:b0:26:72:1d:75:c4:83:
50:35:d5:b1:4a:e9:99:fb:3b:02:5b:4b:ca:de:bb:0b:ca:0b:
94:f0:bf:5e:69:b2:a1:33:98:e1:9b:70:c0:be:d6:a3:a2:69:
f5:29:c7:37:a6:d9:29:b8:1f:12:46:9b:05:d1:2b:3f:13:3f:
75:ea:c0:7d:27:d0:8e:e4:79:f1:fa:3b:2e:25:b9:4d:ed:4f:
a1:e7:03:dc
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZHbO2aASzx18MLlWv4+MAJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YWFmZjg3ZjZkYzBkMzY5OWJjMjkzN2EzNGRjNzE3Zjk0
ZjAwN2UwHhcNMjQwOTEwMDkxOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzhiNzI2MTQwZjc4MWU3ODNlMDZjZDg4YzZmM2FjM2YzYjE1NWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhMxJU6mPGoTMMR8yrt1H17OfZty
AWvfNjnCHYpme4gD0TUXYGD2tUe9CENzeSZL7OmdsQ3Ui2kOKg5QX5iF7UdBVThn
HWyAjN5M53rDF0m6sQfBH5/E1LJk76CDk8yZYqQIsennWRxMWhb+tZpFzQOX/2N/
Uo5s4urBLE9T1TPFSmNJEe+Lak3u8lJKpCp30IH7aNBx+uA2rjhjFxKJUTbYxHkr
w/eY0afxuhllfRMGtfhWrJQLrtiFg/2T35/QUwSrYoxmj0X5tjktqXNMksEMukB7
koYgxGgG4DAtzWzHRrm8uf6TFkY9pKXbclRhHS/lbPGmWksIiBZZ1ZEByQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFOOLcmFA94Hng+Bs2IxvOsPzsVXOMB8GA1UdIwQY
MBaAFASq/4f23A02mbwpN6NNxxf5TwB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktyX2hfYmNEVGFadkNrM28wM0hGX2xQQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZjJlMzEtOWFkNi00MzhlLWFkN2Mt
ZTNlMGMyZGJmMDY3LzEvNDR0eVlVRDNnZWVENEd6WWpHODZ3X094VmM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81ZjJlMzEtOWFkNi00MzhlLWFkN2MtZTNlMGMyZGJmMDY3
LzEvQktyX2hfYmNEVGFadkNrM28wM0hGX2xQQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAl1gDAwCX
XDANBgkqhkiG9w0BAQsFAAOCAQEAr/2qnfYdvLg20VVCTL7MVIWY8NbJ2VrC/fOE
E2+spQnE9jSfKNtCwHA4KiVl/13L8bwUWc78KsXqWf9Eg/LtL4yooMuPPXfpJVnp
DWePyGS+ngJXyQlMJPBiZQX/5Iw6dvmPdm+KxQMi7TpDCy5xwVw9TMf4rUmq5hwQ
E2Fl14i7U5jSfrL+g3zB21F9OrxAzipo+jkYpvfdbz5pAHeJDe3O2GIjyXSUbF/P
WySwJnIddcSDUDXVsUrpmfs7AltLyt67C8oLlPC/XmmyoTOY4ZtwwL7Wo6Jp9SnH
N6bZKbgfEkabBdErPxM/derAfSfQjuR58fo7LiW5Te1PoecD3A==
-----END CERTIFICATE-----
Generated at Fri Sep 27 20:10:54 2024 by rpki-client on console.sobornost.net