Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/ohj0ujecIjmn5fB4kY1yCmQPunA.roa
File: ohj0ujecIjmn5fB4kY1yCmQPunA.roa (raw, json)
Hash identifier: GRJajgZWwYMdU76rmg3MCC/1Nlh31iqJHh0JwpK+9Ss=
Subject key identifier: A2:18:F4:BA:37:9C:22:39:A7:E5:F0:78:91:8D:72:0A:64:0F:BA:70
Certificate issuer: /CN=3e44aaa9e5063511b6120b37f004855197916d2c
Certificate serial: 013DC8
Authority key identifier: 3E:44:AA:A9:E5:06:35:11:B6:12:0B:37:F0:04:85:51:97:91:6D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkSqqeUGNRG2Egs38ASFUZeRbSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/ohj0ujecIjmn5fB4kY1yCmQPunA.roa
Signing time: Fri 21 Jan 2022 10:10:20 +0000
ROA not before: Fri 21 Jan 2022 10:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197950
IP address blocks: 91.233.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81352 (0x13dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e44aaa9e5063511b6120b37f004855197916d2c
Validity
Not Before: Jan 21 10:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a218f4ba379c2239a7e5f078918d720a640fba70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:a2:a0:ec:45:93:c3:bf:20:02:21:6b:69:
0f:5c:1d:7d:eb:20:28:86:ec:c6:41:6a:55:dd:00:
cf:3d:0e:88:fc:a6:67:13:68:52:f1:52:63:5e:9e:
f7:99:f7:00:ce:4d:3c:54:fa:c9:ad:9f:ee:46:1e:
cb:ab:72:d5:31:4a:7f:86:55:88:b3:af:84:a4:71:
a6:6f:6f:81:4a:af:c3:d7:04:55:9c:87:4a:bc:74:
c7:f5:e7:3e:b8:77:1e:21:cb:76:a8:6b:25:e5:bf:
f2:c9:09:7e:a0:90:1b:09:da:80:81:64:4b:b4:8a:
3a:be:7a:41:fc:6d:26:a5:b3:92:76:f0:48:00:c3:
17:e9:83:72:bd:8e:2b:c3:07:ff:c5:60:be:b1:e7:
a5:ef:c0:12:19:6c:75:35:b1:f0:82:c8:e4:e8:f6:
41:d6:af:6e:40:b5:17:1d:ba:d2:e6:f9:82:cc:56:
ec:23:86:7e:6f:0e:31:6f:b2:ab:50:24:b6:33:80:
c6:5b:5c:e9:4c:3d:45:08:19:5d:30:cc:67:94:65:
8f:69:92:fb:b8:5d:25:df:2d:88:98:37:94:87:c3:
e7:7d:17:3c:23:ff:f5:a8:fb:20:4e:03:e0:93:13:
b4:14:7f:0b:90:b1:33:23:3b:b6:df:b8:27:03:f2:
41:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:F4:BA:37:9C:22:39:A7:E5:F0:78:91:8D:72:0A:64:0F:BA:70
X509v3 Authority Key Identifier:
keyid:3E:44:AA:A9:E5:06:35:11:B6:12:0B:37:F0:04:85:51:97:91:6D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkSqqeUGNRG2Egs38ASFUZeRbSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/ohj0ujecIjmn5fB4kY1yCmQPunA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/PkSqqeUGNRG2Egs38ASFUZeRbSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.104.0/24
Signature Algorithm: sha256WithRSAEncryption
54:db:4f:22:96:2c:04:4b:dc:a4:99:24:09:1e:65:e1:69:49:
8f:ca:59:af:5f:b1:18:dc:4d:a9:51:a0:fa:db:4b:18:ce:83:
2e:65:65:3a:e9:c9:d5:3a:10:47:90:b5:00:a0:1b:4c:cf:ac:
fe:57:4d:a8:0f:31:95:77:ee:ff:b5:7b:b8:ab:d6:07:10:8a:
00:5e:a3:8f:bc:d1:32:e1:90:30:b4:cf:d7:ba:d7:14:bf:a9:
86:ea:38:1d:ac:7a:cf:11:bb:d6:b5:16:8e:e2:20:07:4a:63:
5e:e5:02:7b:3f:2c:c0:f1:c7:eb:c5:ac:9f:e5:3a:46:3d:1a:
34:02:e0:a6:b3:c5:fc:f2:ff:7a:b0:3d:03:f4:2f:ec:3b:61:
c9:01:1a:e4:dc:20:80:c5:3a:52:16:c5:9b:9c:33:05:cc:23:
65:de:52:87:cd:58:50:6c:e6:8d:f0:ea:de:e0:ec:e6:91:56:
24:85:dd:cb:b6:66:18:07:c0:d3:d9:2e:81:77:f1:3a:84:df:
c1:e2:2b:60:8f:c1:06:c1:05:96:7b:11:a1:eb:9c:65:e2:46:
b4:c6:5e:24:d1:ad:14:34:a3:69:7e:79:9b:21:fd:32:27:41:
67:a4:62:09:6f:9c:75:42:2b:e2:1e:9d:e9:b0:9f:0f:0d:24:
b0:5b:7a:ae
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAT3IMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNl
NDRhYWE5ZTUwNjM1MTFiNjEyMGIzN2YwMDQ4NTUxOTc5MTZkMmMwHhcNMjIwMTIx
MTAxMDIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMjE4ZjRiYTM3OWMy
MjM5YTdlNWYwNzg5MThkNzIwYTY0MGZiYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs1GioOxFk8O/IAIha2kPXB196yAohuzGQWpV3QDPPQ6I/KZn
E2hS8VJjXp73mfcAzk08VPrJrZ/uRh7Lq3LVMUp/hlWIs6+EpHGmb2+BSq/D1wRV
nIdKvHTH9ec+uHceIct2qGsl5b/yyQl+oJAbCdqAgWRLtIo6vnpB/G0mpbOSdvBI
AMMX6YNyvY4rwwf/xWC+seel78ASGWx1NbHwgsjk6PZB1q9uQLUXHbrS5vmCzFbs
I4Z+bw4xb7KrUCS2M4DGW1zpTD1FCBldMMxnlGWPaZL7uF0l3y2ImDeUh8PnfRc8
I//1qPsgTgPgkxO0FH8LkLEzIzu237gnA/JBiQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFKIY9Lo3nCI5p+XweJGNcgpkD7pwMB8GA1UdIwQYMBaAFD5EqqnlBjURthIL
N/AEhVGXkW0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UGtTcXFlVUdOUkcyRWdzMzhBU0ZVWmVSYlN3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMi82NjE2MDktY2ZiYS00N2VkLWFkNGYtMDY2YjNjZDg3ZDY5LzEv
b2hqMHVqZWNJam1uNWZCNGtZMXlDbVFQdW5BLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82
NjE2MDktY2ZiYS00N2VkLWFkNGYtMDY2YjNjZDg3ZDY5LzEvUGtTcXFlVUdOUkcy
RWdzMzhBU0ZVWmVSYlN3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+loMA0GCSqGSIb3DQEBCwUAA4IB
AQBU208iliwES9ykmSQJHmXhaUmPylmvX7EY3E2pUaD620sYzoMuZWU66cnVOhBH
kLUAoBtMz6z+V02oDzGVd+7/tXu4q9YHEIoAXqOPvNEy4ZAwtM/XutcUv6mG6jgd
rHrPEbvWtRaO4iAHSmNe5QJ7PyzA8cfrxayf5TpGPRo0AuCms8X88v96sD0D9C/s
O2HJARrk3CCAxTpSFsWbnDMFzCNl3lKHzVhQbOaN8Ore4OzmkVYkhd3LtmYYB8DT
2S6Bd/E6hN/B4itgj8EGwQWWexGh65xl4ka0xl4k0a0UNKNpfnmbIf0yJ0FnpGIJ
b5x1QiviHp3psJ8PDSSwW3qu
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net