Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iulNn9TmPAJ5s16j1Vu8zFPK-oI.roa
File: iulNn9TmPAJ5s16j1Vu8zFPK-oI.roa (raw, json)
Hash identifier: q4iZpSsuDT/RKjU3sbDGGgfdkvMcRv350Xv8QXUD3CI=
Subject key identifier: 8A:E9:4D:9F:D4:E6:3C:02:79:B3:5E:A3:D5:5B:BC:CC:53:CA:FA:82
Certificate issuer: /CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Certificate serial: 01856C53A111BE6EA36B628AFC7E7ADA0E84
Authority key identifier: 89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iulNn9TmPAJ5s16j1Vu8zFPK-oI.roa
Signing time: Sun 01 Jan 2023 07:54:58 +0000
ROA not before: Sun 01 Jan 2023 07:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 37.72.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:a1:11:be:6e:a3:6b:62:8a:fc:7e:7a:da:0e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Validity
Not Before: Jan 1 07:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ae94d9fd4e63c0279b35ea3d55bbccc53cafa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:a9:13:ff:d0:9b:9c:2f:f4:4e:91:4f:6a:
73:a7:aa:c6:33:5c:40:42:bf:c6:3c:dc:2b:b3:38:
37:11:1c:e1:d9:ef:37:a3:3b:46:35:c3:bf:16:42:
1e:44:d6:7f:c7:fd:eb:3c:a3:f7:c8:9c:07:7c:bc:
a8:83:0c:c1:d7:a1:c5:be:23:39:1b:48:08:98:9f:
d1:43:9a:e8:1d:36:24:1d:27:db:e5:e9:a5:76:4b:
c9:c9:a6:cd:4b:b8:6e:18:5b:ce:62:16:72:e3:be:
5e:f4:be:00:46:3d:b0:e7:96:d4:b5:c7:b4:31:8a:
5d:87:f7:5a:49:ad:67:c0:d7:db:4b:99:6b:04:e7:
6a:b8:c9:43:dd:9c:1b:6e:fd:31:b4:77:b5:00:91:
26:c8:f9:0e:8e:ce:94:e7:fe:aa:fd:93:1b:1b:a2:
1a:07:f3:22:38:db:60:21:25:f4:17:19:79:e7:50:
86:19:fc:ab:21:a7:1f:bc:d3:6e:d8:9e:18:3e:fe:
37:a2:03:65:3f:ab:e6:62:fb:0a:52:1e:15:67:15:
a8:2c:54:58:3b:fc:52:da:09:ce:4d:45:b1:ee:77:
ec:ac:96:35:ec:a8:e2:2a:30:56:5a:35:f9:41:39:
bc:cd:d4:15:05:dd:cb:f9:df:27:11:0b:5e:5f:3c:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:4D:9F:D4:E6:3C:02:79:B3:5E:A3:D5:5B:BC:CC:53:CA:FA:82
X509v3 Authority Key Identifier:
keyid:89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iulNn9TmPAJ5s16j1Vu8zFPK-oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:15:83:c4:8d:b4:6b:9e:2a:b0:39:86:50:44:7b:c6:4d:36:
64:ed:aa:ff:79:7f:d7:c6:c8:18:c0:58:24:f3:31:ea:0d:16:
b0:c4:1d:44:73:8b:c3:72:94:5d:3f:8c:fc:bb:6e:55:69:f4:
8b:c8:16:8b:fe:f2:ff:44:8b:11:1f:05:67:ec:31:65:07:cd:
27:5e:75:cb:cf:69:c4:84:01:f3:bd:72:17:71:dd:a7:ac:7d:
8c:a9:f0:0d:01:81:e4:a3:6c:90:84:11:90:64:fb:a2:a7:4e:
7b:06:7b:86:9d:73:bf:36:b6:83:77:6e:fc:ee:26:88:72:16:
e5:d0:84:6d:b9:57:e6:6f:67:c1:8d:ee:ab:1a:b5:8d:07:3c:
02:15:93:04:e1:b6:76:3b:ab:e5:00:0c:d6:c9:26:07:b8:50:
b4:9a:90:d6:e2:01:f9:94:9e:8e:bc:7e:30:d7:63:16:b7:ea:
a6:b5:85:c0:c1:a9:de:61:2a:c8:28:3d:10:76:7f:67:52:b9:
34:99:7e:00:90:08:28:69:53:63:51:7b:56:f7:56:de:9d:a9:
5f:c7:9f:0e:58:8d:12:30:8c:2c:db:b4:65:b0:40:ad:b8:6e:
3b:f3:3b:c3:2c:73:16:fb:3c:d1:77:4d:05:8f:ca:7f:60:a2:
72:ac:9f:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU6ERvm6ja2KK/H562g6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2NmYWRjNmRiYzFkZDliYTBlNDc0MDZjZWRiMzA2YzZh
ODU5NTcwHhcNMjMwMTAxMDc1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWU5NGQ5ZmQ0ZTYzYzAyNzliMzVlYTNkNTViYmNjYzUzY2FmYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7ipE//Qm5wv9E6RT2pzp6rGM1xA
Qr/GPNwrszg3ERzh2e83oztGNcO/FkIeRNZ/x/3rPKP3yJwHfLyogwzB16HFviM5
G0gImJ/RQ5roHTYkHSfb5emldkvJyabNS7huGFvOYhZy475e9L4ARj2w55bUtce0
MYpdh/daSa1nwNfbS5lrBOdquMlD3Zwbbv0xtHe1AJEmyPkOjs6U5/6q/ZMbG6Ia
B/MiONtgISX0Fxl551CGGfyrIacfvNNu2J4YPv43ogNlP6vmYvsKUh4VZxWoLFRY
O/xS2gnOTUWx7nfsrJY17KjiKjBWWjX5QTm8zdQVBd3L+d8nEQteXzzk3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIrpTZ/U5jwCebNeo9VbvMxTyvqCMB8GA1UdIwQY
MBaAFIk8+txtvB3Zug5HQGztswbGqFlXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVR6NjNHMjhIZG02RGtkQWJPMnpCc2FvV1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi85NjUzZTUtNzliZC00OGFlLTg2ZWQt
ZjliZDM4NGY2MjE1LzEvaXVsTm45VG1QQUo1czE2ajFWdTh6RlBLLW9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi85NjUzZTUtNzliZC00OGFlLTg2ZWQtZjliZDM4NGY2MjE1
LzEvaVR6NjNHMjhIZG02RGtkQWJPMnpCc2FvV1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJUiNMA0G
CSqGSIb3DQEBCwUAA4IBAQB8FYPEjbRrniqwOYZQRHvGTTZk7ar/eX/XxsgYwFgk
8zHqDRawxB1Ec4vDcpRdP4z8u25VafSLyBaL/vL/RIsRHwVn7DFlB80nXnXLz2nE
hAHzvXIXcd2nrH2MqfANAYHko2yQhBGQZPuip057BnuGnXO/NraDd2787iaIchbl
0IRtuVfmb2fBje6rGrWNBzwCFZME4bZ2O6vlAAzWySYHuFC0mpDW4gH5lJ6OvH4w
12MWt+qmtYXAwaneYSrIKD0Qdn9nUrk0mX4AkAgoaVNjUXtW91benalfx58OWI0S
MIws27RlsECtuG478zvDLHMW+zzRd00Fj8p/YKJyrJ8p
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:57 2023 by rpki-client on console.sobornost.net