Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/uLtKMlz42jY1gFa2M1CGTDBjn_k.roa
File: uLtKMlz42jY1gFa2M1CGTDBjn_k.roa (raw, json)
Hash identifier: nSFMaJ2fmGbF+cPqMi2ctZhRtb8RZJyZxqF4+iCRlxc=
Subject key identifier: B8:BB:4A:32:5C:F8:DA:36:35:80:56:B6:33:50:86:4C:30:63:9F:F9
Certificate issuer: /CN=640e2db8c5e0fd2c726b0ab4780d97811843ad70
Certificate serial: 45A2EF
Authority key identifier: 64:0E:2D:B8:C5:E0:FD:2C:72:6B:0A:B4:78:0D:97:81:18:43:AD:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/uLtKMlz42jY1gFa2M1CGTDBjn_k.roa
Signing time: Sun 20 Feb 2022 05:09:59 +0000
ROA not before: Sun 20 Feb 2022 05:09:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.145.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4563695 (0x45a2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640e2db8c5e0fd2c726b0ab4780d97811843ad70
Validity
Not Before: Feb 20 05:09:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8bb4a325cf8da36358056b63350864c30639ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:27:cc:52:bc:aa:26:97:c8:36:3c:8a:bf:
ac:b5:43:27:ac:aa:dd:2a:a2:5e:04:27:00:71:bc:
1d:7e:c2:44:53:db:0b:1f:23:0e:8c:3b:d2:56:6e:
b7:ec:4f:d5:3b:93:d5:46:09:e5:cd:88:9d:99:ad:
9f:68:f9:61:6b:5c:4f:ec:ba:34:6a:2d:42:f9:49:
4f:a5:bd:2b:48:46:82:32:59:5e:70:36:b3:4d:ab:
78:4e:c7:85:dd:b8:95:6f:d7:ef:bb:97:a1:98:db:
e0:5f:72:c3:24:86:bd:1a:6b:af:09:67:bd:d2:d1:
48:59:e8:ce:ed:39:cc:b2:97:fb:6e:08:22:c1:8f:
03:03:4b:6a:98:6c:fb:fa:e8:04:20:5f:7f:11:21:
30:3c:76:37:cc:ce:64:24:93:cf:a9:09:40:aa:7b:
06:be:74:b3:09:ac:26:e9:2e:49:3f:e5:bf:4f:8b:
6a:93:e6:e3:b1:3a:47:6a:82:fb:2d:e8:b9:69:bc:
47:b6:76:d8:8e:9b:58:6d:14:a7:63:0f:be:8b:56:
51:92:ba:a8:6c:87:90:23:af:39:11:3f:a5:76:e2:
c9:58:53:23:86:0c:ee:3b:12:ce:92:8f:7c:65:4a:
09:17:99:12:a9:cc:83:f6:f1:fa:8f:a1:85:02:42:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BB:4A:32:5C:F8:DA:36:35:80:56:B6:33:50:86:4C:30:63:9F:F9
X509v3 Authority Key Identifier:
keyid:64:0E:2D:B8:C5:E0:FD:2C:72:6B:0A:B4:78:0D:97:81:18:43:AD:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/uLtKMlz42jY1gFa2M1CGTDBjn_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b4:4b:99:62:89:fd:92:09:d3:43:1c:6e:62:54:a3:90:ca:
91:df:35:26:2d:d2:8f:08:6b:19:c5:03:56:99:b1:48:14:59:
93:4e:8b:59:dc:f3:ee:76:82:85:e2:fe:23:08:59:4f:c1:69:
2f:dc:7d:a5:de:76:2b:e4:ad:66:85:03:b7:6d:d8:1d:33:40:
a0:a2:2e:92:93:fa:d2:eb:91:27:ba:cb:c1:3a:12:6f:2d:d9:
7a:0f:c0:91:b4:59:7b:59:b9:bb:b2:c3:bb:1c:7a:be:c7:4a:
ae:17:fb:90:8a:ae:1f:93:b0:a6:ec:0e:a5:86:f0:2d:36:45:
6f:6e:49:c8:33:38:a3:9d:c0:0a:c2:61:80:fb:73:8b:fc:57:
38:18:1c:a7:1d:54:52:35:00:6f:2d:48:87:db:4e:a6:b0:1d:
a3:cb:9c:1d:45:7e:ae:2f:2b:be:ca:bb:67:d5:4d:ce:96:af:
a6:9c:7b:5d:04:5a:ed:3f:e3:77:47:45:d6:0c:0f:7a:18:59:
89:0a:a8:30:ed:bd:b4:d8:28:b7:83:55:f0:9e:a0:9d:fd:71:
c3:60:b0:b6:04:ee:5d:08:56:40:97:31:84:ba:ce:f1:1d:0f:
d9:ab:7e:6b:32:41:57:be:fb:27:0d:ca:5d:7c:0f:db:f6:b8:
78:3c:8d:cc
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDRaLvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0
MGUyZGI4YzVlMGZkMmM3MjZiMGFiNDc4MGQ5NzgxMTg0M2FkNzAwHhcNMjIwMjIw
MDUwOTU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiOGJiNGEzMjVjZjhk
YTM2MzU4MDU2YjYzMzUwODY0YzMwNjM5ZmY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl0InzFK8qiaXyDY8ir+stUMnrKrdKqJeBCcAcbwdfsJEU9sL
HyMOjDvSVm637E/VO5PVRgnlzYidma2faPlha1xP7Lo0ai1C+UlPpb0rSEaCMlle
cDazTat4TseF3biVb9fvu5ehmNvgX3LDJIa9GmuvCWe90tFIWejO7TnMspf7bggi
wY8DA0tqmGz7+ugEIF9/ESEwPHY3zM5kJJPPqQlAqnsGvnSzCawm6S5JP+W/T4tq
k+bjsTpHaoL7Lei5abxHtnbYjptYbRSnYw++i1ZRkrqobIeQI685ET+lduLJWFMj
hgzuOxLOko98ZUoJF5kSqcyD9vH6j6GFAkL0IwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLi7SjJc+No2NYBWtjNQhkwwY5/5MB8GA1UdIwQYMBaAFGQOLbjF4P0scmsK
tHgNl4EYQ61wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WkE0dHVNWGdfU3h5YXdxMGVBMlhnUmhEclhBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lNC82ZjYzZjItYjQxMi00ZTU1LThiMmYtYmYzN2Q5NmU1Yjc3LzEv
dUx0S01sejQyalkxZ0ZhMk0xQ0dUREJqbl9rLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82
ZjYzZjItYjQxMi00ZTU1LThiMmYtYmYzN2Q5NmU1Yjc3LzEvWkE0dHVNWGdfU3h5
YXdxMGVBMlhnUmhEclhBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpHtMA0GCSqGSIb3DQEBCwUAA4IB
AQBStEuZYon9kgnTQxxuYlSjkMqR3zUmLdKPCGsZxQNWmbFIFFmTTotZ3PPudoKF
4v4jCFlPwWkv3H2l3nYr5K1mhQO3bdgdM0Cgoi6Sk/rS65EnusvBOhJvLdl6D8CR
tFl7Wbm7ssO7HHq+x0quF/uQiq4fk7Cm7A6lhvAtNkVvbknIMzijncAKwmGA+3OL
/Fc4GBynHVRSNQBvLUiH206msB2jy5wdRX6uLyu+yrtn1U3Olq+mnHtdBFrtP+N3
R0XWDA96GFmJCqgw7b202Ci3g1XwnqCd/XHDYLC2BO5dCFZAlzGEus7xHQ/Zq35r
MkFXvvsnDcpdfA/b9rh4PI3M
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net