Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/tisCeHwNlqTAT0zbzDjRgPymvZY.roa
File: tisCeHwNlqTAT0zbzDjRgPymvZY.roa (raw, json)
Hash identifier: x9R42QJU0dqMWgvA6rlr6diSlsDa46G6spX9g69rVUE=
Subject key identifier: B6:2B:02:78:7C:0D:96:A4:C0:4F:4C:DB:CC:38:D1:80:FC:A6:BD:96
Certificate issuer: /CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Certificate serial: 01856EB8F7614DB5B3F7CD20E73F2BBFA82D
Authority key identifier: 9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/tisCeHwNlqTAT0zbzDjRgPymvZY.roa
Signing time: Sun 01 Jan 2023 19:04:53 +0000
ROA not before: Sun 01 Jan 2023 19:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31732
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f7:61:4d:b5:b3:f7:cd:20:e7:3f:2b:bf:a8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Validity
Not Before: Jan 1 19:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b62b02787c0d96a4c04f4cdbcc38d180fca6bd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:01:1a:14:10:50:51:2d:67:f6:c9:82:c4:
dc:c0:14:e2:34:d2:c4:67:eb:5c:bc:95:06:0d:85:
aa:bd:ac:1b:9c:e6:43:0b:2f:d9:40:e8:8b:d0:93:
9c:b7:8d:5f:09:84:26:88:c9:91:27:55:f8:33:e4:
f6:fe:05:e2:67:f5:a0:76:9e:af:94:7d:f9:19:9c:
ca:17:5f:28:5c:b5:22:c5:b6:0d:ed:26:23:25:0c:
c6:9c:ec:bc:15:2a:b1:64:55:38:9a:f5:0b:6f:73:
ea:71:e6:bc:0c:b9:67:e2:1c:96:4d:bf:00:4c:73:
6d:d5:f0:9f:45:d6:b1:20:98:30:cf:8a:ae:49:ab:
bf:28:bd:b8:0b:1c:d1:f7:24:fb:cd:b9:85:c2:84:
f9:8d:60:50:5b:78:94:66:3a:c2:ab:34:f8:c5:e6:
fa:b4:81:64:c2:01:91:dc:6e:c4:05:9b:40:90:4f:
23:d6:b1:2b:2e:2d:47:11:d6:55:e2:95:f2:6b:fc:
1f:cb:fe:e5:a8:86:9b:65:e8:b2:17:43:0b:89:13:
2e:9e:37:73:da:38:34:c1:50:de:90:e1:b2:5a:cb:
dc:7a:29:5d:c4:8b:9b:a7:a5:2b:49:27:e6:3d:b5:
0c:75:56:b2:d3:94:c3:65:6d:60:98:c2:a7:bc:db:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2B:02:78:7C:0D:96:A4:C0:4F:4C:DB:CC:38:D1:80:FC:A6:BD:96
X509v3 Authority Key Identifier:
keyid:9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/tisCeHwNlqTAT0zbzDjRgPymvZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
09:23:d3:31:0e:c0:69:cf:40:e7:2d:88:13:10:b3:7f:fc:80:
8a:a7:7f:6b:b8:2b:7b:64:7c:0e:c5:62:eb:3c:fc:58:d6:c2:
19:5c:59:71:6b:69:7a:19:ae:0d:e2:3f:ee:fd:a9:aa:40:13:
67:0d:f0:a6:75:6c:92:fb:a0:f2:06:d1:e4:ac:71:0b:10:ce:
0a:4e:2c:16:ba:82:bb:1a:db:08:99:9d:32:62:53:9f:81:c6:
c8:a1:70:49:67:34:ac:7d:88:a5:19:52:6f:02:2c:37:32:e7:
4d:f1:52:e1:0e:4c:b8:b1:16:83:19:eb:8d:75:ca:c0:df:4b:
47:15:57:5e:6a:9d:17:64:d9:91:c2:99:06:a4:cd:1c:a1:bc:
9f:68:75:f9:03:d9:92:4b:33:2d:30:07:91:1d:b7:ea:b2:4a:
d8:be:25:9a:d1:82:83:4b:1e:9f:a7:09:90:2c:8e:e5:b4:af:
c0:c2:54:31:d9:c6:19:5a:f0:49:49:ce:cb:f2:b2:d0:88:5b:
b6:55:b2:d1:44:05:f3:6a:db:13:0b:26:62:87:cc:39:c4:7d:
a0:3e:74:74:13:18:83:98:9e:2b:a1:ce:8d:36:c7:60:8c:c3:
e4:f4:fb:99:1e:1a:76:3f:39:55:56:cd:ef:ed:a5:00:5b:66:
1a:7c:30:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuuPdhTbWz980g5z8rv6gtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDExNThmOWUzNDAxMWMzMmEwMTAyNTYxYTMzMWQ2NGRk
OGFhOTYwHhcNMjMwMTAxMTkwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjJiMDI3ODdjMGQ5NmE0YzA0ZjRjZGJjYzM4ZDE4MGZjYTZiZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/gBGhQQUFEtZ/bJgsTcwBTiNNLE
Z+tcvJUGDYWqvawbnOZDCy/ZQOiL0JOct41fCYQmiMmRJ1X4M+T2/gXiZ/Wgdp6v
lH35GZzKF18oXLUixbYN7SYjJQzGnOy8FSqxZFU4mvULb3Pqcea8DLln4hyWTb8A
THNt1fCfRdaxIJgwz4quSau/KL24CxzR9yT7zbmFwoT5jWBQW3iUZjrCqzT4xeb6
tIFkwgGR3G7EBZtAkE8j1rErLi1HEdZV4pXya/wfy/7lqIabZeiyF0MLiRMunjdz
2jg0wVDekOGyWsvceildxIubp6UrSSfmPbUMdVay05TDZW1gmMKnvNvbxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLYrAnh8DZakwE9M28w40YD8pr2WMB8GA1UdIwQY
MBaAFJ/RFY+eNAEcMqAQJWGjMdZN2KqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjlFVmo1NDBBUnd5b0JBbFlhTXgxazNZcXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTU0ODAtMmUyNi00NjYyLWE3YzQt
NzBjOGE0YmNhYjBkLzEvdGlzQ2VId05scVRBVDB6YnpEalJnUHltdlpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jOTU0ODAtMmUyNi00NjYyLWE3YzQtNzBjOGE0YmNhYjBk
LzEvbjlFVmo1NDBBUnd5b0JBbFlhTXgxazNZcXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XIuMA0G
CSqGSIb3DQEBCwUAA4IBAQAJI9MxDsBpz0DnLYgTELN//ICKp39ruCt7ZHwOxWLr
PPxY1sIZXFlxa2l6Ga4N4j/u/amqQBNnDfCmdWyS+6DyBtHkrHELEM4KTiwWuoK7
GtsImZ0yYlOfgcbIoXBJZzSsfYilGVJvAiw3MudN8VLhDky4sRaDGeuNdcrA30tH
FVdeap0XZNmRwpkGpM0cobyfaHX5A9mSSzMtMAeRHbfqskrYviWa0YKDSx6fpwmQ
LI7ltK/AwlQx2cYZWvBJSc7L8rLQiFu2VbLRRAXzatsTCyZih8w5xH2gPnR0ExiD
mJ4roc6NNsdgjMPk9PuZHhp2PzlVVs3v7aUAW2YafDBh
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net