Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/1-_Pw4SM2UQVbThU2DrRrN31Cprc.roa
File: 1-_Pw4SM2UQVbThU2DrRrN31Cprc.roa (raw, json)
Hash identifier: rBAA5iNauSeU3l8kA7CweBwOSX9v2zmyVsW1cDajS+E=
Subject key identifier: FB:F3:F0:E1:23:36:51:05:5B:4E:15:36:0E:B4:6B:37:7D:42:A6:B7
Certificate issuer: /CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Certificate serial: 01856EB8F6C1E5FF4897CD21EB6BC4BEB679
Authority key identifier: 9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/1-_Pw4SM2UQVbThU2DrRrN31Cprc.roa
Signing time: Sun 01 Jan 2023 19:04:53 +0000
ROA not before: Sun 01 Jan 2023 19:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f6:c1:e5:ff:48:97:cd:21:eb:6b:c4:be:b6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Validity
Not Before: Jan 1 19:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbf3f0e1233651055b4e15360eb46b377d42a6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:40:63:56:07:51:37:e9:8b:88:61:e3:a7:
e0:7b:47:82:7f:ab:dd:33:67:e2:6e:7a:a5:f3:47:
a7:c6:26:2a:75:c7:6f:89:75:6b:19:80:8f:ee:ee:
2e:7f:a4:97:9d:fd:4e:ad:4e:33:dd:1b:97:4a:09:
33:48:cf:46:d7:65:81:29:fe:b5:ca:80:01:70:a3:
11:43:a8:49:94:f4:3e:08:58:a1:6b:35:aa:12:5a:
ac:13:9e:2d:28:c5:86:01:da:9f:23:35:0c:c4:68:
4e:49:35:9a:6e:56:d3:6b:f1:ab:1f:19:35:96:ae:
6c:7f:1a:5d:1b:88:9b:02:cd:16:d4:10:c0:c7:41:
5e:2e:57:86:4d:37:5d:64:c8:b9:07:bb:bb:09:0c:
f1:af:d2:e3:7d:7b:48:df:5a:bc:dd:b0:c1:83:af:
b3:ca:88:2f:47:8a:82:70:c0:f1:33:81:08:b5:ac:
92:ca:c4:b3:d5:31:ed:cb:af:1e:35:f9:69:c0:2f:
65:e9:51:4a:b7:13:93:5f:7e:ae:c9:dc:f1:1c:93:
ea:27:5f:de:cc:d9:21:6f:b7:3a:2a:bd:14:0e:5c:
33:8d:2c:1f:e4:58:39:c3:ba:6e:91:ad:ed:03:72:
96:51:99:4a:59:11:59:ab:6b:f8:32:7c:9e:8b:e4:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F3:F0:E1:23:36:51:05:5B:4E:15:36:0E:B4:6B:37:7D:42:A6:B7
X509v3 Authority Key Identifier:
keyid:9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/1-_Pw4SM2UQVbThU2DrRrN31Cprc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
35:54:69:1f:9f:b9:d1:30:4c:a2:37:ce:b1:c1:6d:b3:ab:0b:
f6:a4:1e:d1:b1:6a:6e:8d:47:8e:26:8e:59:b1:d5:90:f3:d3:
06:89:76:65:52:25:f6:15:7a:3d:85:8d:e5:1b:3f:87:0d:19:
76:47:13:cf:ad:ad:3e:6b:9a:90:ff:1d:60:1c:67:8b:ab:cf:
64:86:90:bf:1e:e4:34:91:e3:00:df:52:1c:51:fe:cc:14:18:
44:7c:e9:d9:c2:cb:a8:7d:e4:b4:de:c1:71:e2:fe:f8:96:d1:
30:a8:7d:52:dc:47:74:06:a0:61:e9:8a:eb:b6:6e:93:b9:f5:
66:37:1a:bd:6c:fd:f9:21:1d:2b:d8:3c:cf:73:15:49:1d:c2:
7e:74:9a:1a:63:dd:3a:ae:20:02:64:fe:40:8a:c1:70:58:52:
37:72:55:65:01:1b:c4:f9:28:4b:a4:26:48:dd:d8:da:0d:7c:
d6:12:92:09:2e:d0:38:f5:bb:6e:84:40:53:86:28:77:b1:06:
b5:2e:62:08:4f:b4:cd:ad:84:7d:d1:81:a1:46:fc:20:35:d5:
54:a9:4a:0c:ff:5d:10:27:71:04:f5:5b:5f:a9:ea:27:16:2c:
f1:cc:3e:69:99:8d:ed:81:a7:34:3d:1a:0b:33:13:78:dc:b3:
f0:b5:9e:fc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVuuPbB5f9Il80h62vEvrZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDExNThmOWUzNDAxMWMzMmEwMTAyNTYxYTMzMWQ2NGRk
OGFhOTYwHhcNMjMwMTAxMTkwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmYzZjBlMTIzMzY1MTA1NWI0ZTE1MzYwZWI0NmIzNzdkNDJhNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW1AY1YHUTfpi4hh46fge0eCf6vd
M2fibnql80enxiYqdcdviXVrGYCP7u4uf6SXnf1OrU4z3RuXSgkzSM9G12WBKf61
yoABcKMRQ6hJlPQ+CFihazWqElqsE54tKMWGAdqfIzUMxGhOSTWablbTa/GrHxk1
lq5sfxpdG4ibAs0W1BDAx0FeLleGTTddZMi5B7u7CQzxr9LjfXtI31q83bDBg6+z
yogvR4qCcMDxM4EItaySysSz1THty68eNflpwC9l6VFKtxOTX36uydzxHJPqJ1/e
zNkhb7c6Kr0UDlwzjSwf5Fg5w7puka3tA3KWUZlKWRFZq2v4Mnyei+SO1wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvz8OEjNlEFW04VNg60azd9Qqa3MB8GA1UdIwQY
MBaAFJ/RFY+eNAEcMqAQJWGjMdZN2KqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjlFVmo1NDBBUnd5b0JBbFlhTXgxazNZcXBZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTU0ODAtMmUyNi00NjYyLWE3YzQt
NzBjOGE0YmNhYjBkLzEvMS1fUHc0U00yVVFWYlRoVTJEclJyTjMxQ3ByYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDQvYzk1NDgwLTJlMjYtNDY2Mi1hN2M0LTcwYzhhNGJjYWIw
ZC8xL245RVZqNTQwQVJ3eW9CQWxZYU14MWszWXFwWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANlyLjAN
BgkqhkiG9w0BAQsFAAOCAQEANVRpH5+50TBMojfOscFts6sL9qQe0bFqbo1HjiaO
WbHVkPPTBol2ZVIl9hV6PYWN5Rs/hw0ZdkcTz62tPmuakP8dYBxni6vPZIaQvx7k
NJHjAN9SHFH+zBQYRHzp2cLLqH3ktN7BceL++JbRMKh9UtxHdAagYemK67Zuk7n1
ZjcavWz9+SEdK9g8z3MVSR3CfnSaGmPdOq4gAmT+QIrBcFhSN3JVZQEbxPkoS6Qm
SN3Y2g181hKSCS7QOPW7boRAU4Yod7EGtS5iCE+0za2EfdGBoUb8IDXVVKlKDP9d
ECdxBPVbX6nqJxYs8cw+aZmN7YGnND0aCzMTeNyz8LWe/A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net