Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/16OCBZteeBwYocUwcOhlfeB11vU.roa
File: 16OCBZteeBwYocUwcOhlfeB11vU.roa (raw, json)
Hash identifier: Bgi7+Et2sl+eGvaS2tObMBPMnuM0E8o8IXMXryikxVw=
Subject key identifier: D7:A3:82:05:9B:5E:78:1C:18:A1:C5:30:70:E8:65:7D:E0:75:D6:F5
Certificate issuer: /CN=a61f79a4778f4f553d4a6f8b4a7dda67f6386c09
Certificate serial: D527
Authority key identifier: A6:1F:79:A4:77:8F:4F:55:3D:4A:6F:8B:4A:7D:DA:67:F6:38:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/16OCBZteeBwYocUwcOhlfeB11vU.roa
Signing time: Thu 26 May 2022 17:20:14 +0000
ROA not before: Thu 26 May 2022 17:20:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60118
IP address blocks: 176.126.252.0/22 maxlen: 22
185.233.148.0/22 maxlen: 22
185.57.83.0/24 maxlen: 24
185.57.80.0/24 maxlen: 24
185.57.82.0/24 maxlen: 24
185.57.81.0/24 maxlen: 24
176.126.236.0/22 maxlen: 22
2a02:59e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54567 (0xd527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61f79a4778f4f553d4a6f8b4a7dda67f6386c09
Validity
Not Before: May 26 17:20:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7a382059b5e781c18a1c53070e8657de075d6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:5a:55:83:f1:3c:29:f0:d3:b6:fb:95:2c:
3a:69:bc:17:04:f6:6d:99:3f:a8:d2:f5:29:de:55:
3c:cc:43:24:43:9d:ca:78:b5:68:8b:3a:0f:25:b8:
bc:ed:93:e8:b7:57:a0:5b:83:a1:77:00:bc:64:16:
d5:c9:03:ad:41:ba:ae:71:99:ee:b2:de:7b:3a:71:
e9:9d:1c:73:83:90:f4:6a:6c:de:c2:a9:fb:6b:c3:
3b:ad:d2:43:8b:69:6c:0f:2d:94:9f:50:b8:bb:35:
b0:ed:fa:d3:f8:cd:86:f2:24:31:fc:6f:15:68:79:
09:bc:a1:b1:f4:35:af:f1:55:22:86:c9:87:bf:77:
a1:eb:99:c5:f1:1e:8e:6a:be:8b:77:23:fc:a5:b9:
00:ec:e1:15:c1:5a:55:2c:a9:7d:3e:fc:6e:ab:b1:
12:0b:93:36:48:59:90:c3:3f:97:6f:b7:eb:f8:79:
8b:bd:bb:1f:5f:9b:b6:ec:55:bd:a1:97:83:e6:42:
eb:35:40:8d:5c:28:b8:22:48:03:2d:6f:6c:c6:0b:
d7:21:e5:f8:09:91:cd:4b:82:d1:68:a9:32:04:79:
0b:7e:80:0a:d7:26:d2:2a:14:77:bc:ca:f2:45:43:
48:4d:cc:d7:9d:be:c7:03:8b:0f:35:ba:48:73:5b:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:82:05:9B:5E:78:1C:18:A1:C5:30:70:E8:65:7D:E0:75:D6:F5
X509v3 Authority Key Identifier:
keyid:A6:1F:79:A4:77:8F:4F:55:3D:4A:6F:8B:4A:7D:DA:67:F6:38:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/16OCBZteeBwYocUwcOhlfeB11vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.236.0/22
176.126.252.0/22
185.57.80.0/22
185.233.148.0/22
IPv6:
2a02:59e0::/48
Signature Algorithm: sha256WithRSAEncryption
54:29:ab:a1:fb:1e:f8:72:8f:e0:bd:83:ad:4c:63:9d:8f:7c:
c7:eb:3d:a6:f3:fb:a8:75:09:69:70:ff:92:35:95:a5:cd:c6:
fb:51:03:3c:da:ae:20:f8:2b:dd:63:c0:cc:64:da:ce:0c:7b:
de:0f:47:d0:3a:a4:24:3c:c9:01:71:da:80:c7:98:c6:47:b8:
23:02:44:17:c6:fc:70:78:50:d4:cc:5a:a9:a2:16:71:17:7e:
28:0b:ab:4b:ec:f7:3a:f0:33:b2:c8:67:c1:78:54:c0:61:46:
cc:83:b4:54:57:33:d4:31:10:06:26:c0:57:fc:01:ea:09:5e:
1d:f2:8c:04:4a:f5:a3:0b:04:18:94:15:59:ef:ea:7a:69:2f:
4f:e2:f1:5a:88:20:c9:fd:15:b0:7f:08:12:14:15:a4:02:32:
9d:a8:b0:1a:ef:fa:d9:c1:3a:7d:fe:ba:08:86:65:55:9c:1e:
be:70:14:e1:2a:eb:4a:d7:71:b4:4c:3f:86:c2:84:8b:64:85:
9a:c1:8b:81:85:c8:4c:08:46:3e:81:fd:36:2a:33:e6:0f:fa:
28:b4:25:84:94:65:67:48:76:1d:93:e2:6c:69:c1:9a:16:f9:
73:ba:ba:49:c2:c4:c7:f8:ec:04:dd:e1:21:66:3f:9e:73:c7:
86:54:32:f8
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIDANUnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE2
MWY3OWE0Nzc4ZjRmNTUzZDRhNmY4YjRhN2RkYTY3ZjYzODZjMDkwHhcNMjIwNTI2
MTcyMDE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkN2EzODIwNTliNWU3
ODFjMThhMWM1MzA3MGU4NjU3ZGUwNzVkNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2J9aVYPxPCnw07b7lSw6abwXBPZtmT+o0vUp3lU8zEMkQ53K
eLVoizoPJbi87ZPot1egW4OhdwC8ZBbVyQOtQbqucZnust57OnHpnRxzg5D0amze
wqn7a8M7rdJDi2lsDy2Un1C4uzWw7frT+M2G8iQx/G8VaHkJvKGx9DWv8VUihsmH
v3eh65nF8R6Oar6LdyP8pbkA7OEVwVpVLKl9Pvxuq7ESC5M2SFmQwz+Xb7fr+HmL
vbsfX5u27FW9oZeD5kLrNUCNXCi4IkgDLW9sxgvXIeX4CZHNS4LRaKkyBHkLfoAK
1ybSKhR3vMryRUNITczXnb7HA4sPNbpIc1v7QQIDAQABo4ICLDCCAigwHQYDVR0O
BBYEFNejggWbXngcGKHFMHDoZX3gddb1MB8GA1UdIwQYMBaAFKYfeaR3j09VPUpv
i0p92mf2OGwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cGg5NXBIZVBUMVU5U20tTFNuM2FaX1k0YkFrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMS82NTQ2ZjgtOTVmMS00MzFmLWFmMTUtMDA5NzM0ODIwYjJmLzEv
MTZPQ0JadGVlQndZb2NVd2NPaGxmZUIxMXZVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82
NTQ2ZjgtOTVmMS00MzFmLWFmMTUtMDA5NzM0ODIwYjJmLzEvcGg5NXBIZVBUMVU5
U20tTFNuM2FaX1k0YkFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIG
CCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCsH7sAwQCsH78AwQCuTlQAwQCuemU
MA8EAgACMAkDBwAqAlngAAAwDQYJKoZIhvcNAQELBQADggEBAFQpq6H7Hvhyj+C9
g61MY52PfMfrPabz+6h1CWlw/5I1laXNxvtRAzzariD4K91jwMxk2s4Me94PR9A6
pCQ8yQFx2oDHmMZHuCMCRBfG/HB4UNTMWqmiFnEXfigLq0vs9zrwM7LIZ8F4VMBh
RsyDtFRXM9QxEAYmwFf8AeoJXh3yjARK9aMLBBiUFVnv6nppL0/i8VqIIMn9FbB/
CBIUFaQCMp2osBrv+tnBOn3+ugiGZVWcHr5wFOEq60rXcbRMP4bChItkhZrBi4GF
yEwIRj6B/TYqM+YP+ii0JYSUZWdIdh2T4mxpwZoW+XO6uknCxMf47ATd4SFmP55z
x4ZUMvg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net