Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3032a0-2f7c-4d9c-a712-6521b7c98cd0/1/bPVfG77Xf89UTdKI83AA_aqdC1E.roa
File: bPVfG77Xf89UTdKI83AA_aqdC1E.roa (raw, json)
Hash identifier: W8pE2e2uw6Zpd+VD05zzcNxpM6BwHBmPtjwYQSkoosg=
Subject key identifier: 6C:F5:5F:1B:BE:D7:7F:CF:54:4D:D2:88:F3:70:00:FD:AA:9D:0B:51
Certificate issuer: /CN=fc6dee2cd62f95cebea791270412463d539885fe
Certificate serial: 021DFFCE
Authority key identifier: FC:6D:EE:2C:D6:2F:95:CE:BE:A7:91:27:04:12:46:3D:53:98:85:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_G3uLNYvlc6-p5EnBBJGPVOYhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3032a0-2f7c-4d9c-a712-6521b7c98cd0/1/bPVfG77Xf89UTdKI83AA_aqdC1E.roa
Signing time: Sat 01 Jan 2022 01:53:59 +0000
ROA not before: Sat 01 Jan 2022 01:53:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.187.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35520462 (0x21dffce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6dee2cd62f95cebea791270412463d539885fe
Validity
Not Before: Jan 1 01:53:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cf55f1bbed77fcf544dd288f37000fdaa9d0b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:8e:ff:20:91:81:03:6f:78:77:15:e4:04:
99:9c:f3:36:5e:0e:04:26:5a:50:ae:0b:02:c2:33:
17:4e:38:f4:05:1a:24:53:52:86:57:18:82:f9:3c:
6f:6d:f3:15:93:d8:d6:fd:03:9c:1e:35:f9:3a:53:
27:84:3f:3f:ef:a4:fa:36:1d:4b:62:a2:9c:62:f1:
3a:a8:e1:71:d4:e3:ba:21:c3:e0:f8:f2:42:3d:fa:
82:4e:7c:3d:3f:d8:ee:dd:96:5f:1c:0e:20:5c:53:
da:a4:6c:4d:fe:08:55:b7:c2:53:72:5f:75:55:46:
c0:d5:62:b0:9d:5d:e1:0c:76:7e:78:a3:fc:81:74:
f5:e8:de:e5:fc:99:d9:c4:72:bb:80:55:11:33:e3:
04:d1:c4:e2:e7:f7:87:ad:a5:02:a7:85:44:1c:0f:
bf:84:e3:32:9b:73:2c:d5:af:d3:38:db:27:a0:8b:
24:d6:9e:ea:58:8e:70:49:b5:d3:17:c8:b0:86:a1:
43:2b:12:36:4b:b4:22:ce:13:af:1b:4f:88:1c:f0:
44:52:d7:99:f5:f7:09:8b:08:69:c3:35:1d:9c:4e:
f0:ea:2a:44:9c:f4:26:52:b2:37:e5:9a:36:c1:b5:
0b:b2:7b:f5:ac:4f:00:0d:5d:c2:24:b0:1f:86:b9:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:5F:1B:BE:D7:7F:CF:54:4D:D2:88:F3:70:00:FD:AA:9D:0B:51
X509v3 Authority Key Identifier:
keyid:FC:6D:EE:2C:D6:2F:95:CE:BE:A7:91:27:04:12:46:3D:53:98:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_G3uLNYvlc6-p5EnBBJGPVOYhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3032a0-2f7c-4d9c-a712-6521b7c98cd0/1/bPVfG77Xf89UTdKI83AA_aqdC1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3032a0-2f7c-4d9c-a712-6521b7c98cd0/1/_G3uLNYvlc6-p5EnBBJGPVOYhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:f3:9c:24:c7:51:10:95:86:ca:7d:ec:f0:ef:83:aa:8f:0d:
61:70:d5:7d:61:c2:20:3b:9d:38:ff:19:02:6c:dc:a3:2f:ae:
6a:60:37:a5:bc:b4:81:a5:42:2d:50:d0:8f:d2:d6:22:7d:4c:
75:c0:92:9a:2c:2c:6f:88:5c:2a:9a:93:fa:2c:1b:cc:a2:b0:
b0:05:cc:64:7f:cf:04:14:9f:42:1b:dd:a3:60:13:77:e2:e5:
1f:f3:2c:ad:22:ae:ae:b1:1a:c7:63:7a:93:cf:bf:65:99:ce:
d4:62:26:c5:72:cb:0b:9b:d9:e9:6d:33:22:c2:0d:c7:f4:52:
74:eb:fd:34:45:28:ba:08:26:d5:c9:0a:2a:4a:0d:c8:2a:3c:
6c:62:c0:9c:27:b3:5f:1a:ea:c0:24:21:31:83:40:b5:41:4d:
97:7e:29:6b:88:9a:2c:4a:9e:b8:56:3f:f7:fc:d2:bd:90:95:
4e:0d:0c:b9:0f:54:e7:a8:10:ea:92:72:c6:b4:37:ac:e6:cf:
fb:16:19:15:5a:c3:8d:1d:0a:ac:e0:65:11:7d:5c:93:88:d4:
d1:50:ac:dc:9f:f2:38:13:0d:92:54:16:7f:00:1d:59:34:ec:
84:a7:31:66:03:8b:42:05:15:86:e2:39:87:9c:90:b8:5d:4d:
3f:93:4c:9c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAh3/zjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YzZkZWUyY2Q2MmY5NWNlYmVhNzkxMjcwNDEyNDYzZDUzOTg4NWZlMB4XDTIyMDEw
MTAxNTM1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmNmNTVmMWJiZWQ3
N2ZjZjU0NGRkMjg4ZjM3MDAwZmRhYTlkMGI1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL58jv8gkYEDb3h3FeQEmZzzNl4OBCZaUK4LAsIzF0449AUa
JFNShlcYgvk8b23zFZPY1v0DnB41+TpTJ4Q/P++k+jYdS2KinGLxOqjhcdTjuiHD
4PjyQj36gk58PT/Y7t2WXxwOIFxT2qRsTf4IVbfCU3JfdVVGwNVisJ1d4Qx2fnij
/IF09eje5fyZ2cRyu4BVETPjBNHE4uf3h62lAqeFRBwPv4TjMptzLNWv0zjbJ6CL
JNae6liOcEm10xfIsIahQysSNku0Is4TrxtPiBzwRFLXmfX3CYsIacM1HZxO8Ooq
RJz0JlKyN+WaNsG1C7J79axPAA1dwiSwH4a5gg8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRs9V8bvtd/z1RN0ojzcAD9qp0LUTAfBgNVHSMEGDAWgBT8be4s1i+Vzr6n
kScEEkY9U5iF/jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19HM3VMTll2bGM2LXA1RW5CQkpHUFZPWWhmNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDMvMzAzMmEwLTJmN2MtNGQ5Yy1hNzEyLTY1MjFiN2M5OGNkMC8x
L2JQVmZHNzdYZjg5VVRkS0k4M0FBX2FxZEMxRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
MzAzMmEwLTJmN2MtNGQ5Yy1hNzEyLTY1MjFiN2M5OGNkMC8xL19HM3VMTll2bGM2
LXA1RW5CQkpHUFZPWWhmNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsG7bDANBgkqhkiG9w0BAQsFAAOC
AQEASvOcJMdREJWGyn3s8O+Dqo8NYXDVfWHCIDudOP8ZAmzcoy+uamA3pby0gaVC
LVDQj9LWIn1MdcCSmiwsb4hcKpqT+iwbzKKwsAXMZH/PBBSfQhvdo2ATd+LlH/Ms
rSKurrEax2N6k8+/ZZnO1GImxXLLC5vZ6W0zIsINx/RSdOv9NEUouggm1ckKKkoN
yCo8bGLAnCezXxrqwCQhMYNAtUFNl34pa4iaLEqeuFY/9/zSvZCVTg0MuQ9U56gQ
6pJyxrQ3rObP+xYZFVrDjR0KrOBlEX1ck4jU0VCs3J/yOBMNklQWfwAdWTTshKcx
ZgOLQgUVhuI5h5yQuF1NP5NMnA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net