Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/k3VDJx3biuReCkJaHOzHJPlXvqQ.roa
File: k3VDJx3biuReCkJaHOzHJPlXvqQ.roa (raw, json)
Hash identifier: MQP8WJ4cx5OJy+jDGht6+0a+5wfswwaeaW1NQovhLeU=
Subject key identifier: 93:75:43:27:1D:DB:8A:E4:5E:0A:42:5A:1C:EC:C7:24:F9:57:BE:A4
Certificate issuer: /CN=9a73ba8f7d987bd186dbd647eaee9620030974d7
Certificate serial: 04B6A5C5
Authority key identifier: 9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/k3VDJx3biuReCkJaHOzHJPlXvqQ.roa
Signing time: Sat 01 Jan 2022 04:53:46 +0000
ROA not before: Sat 01 Jan 2022 04:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.138.94.0/23 maxlen: 23
185.138.92.0/22 maxlen: 22
185.138.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79078853 (0x4b6a5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a73ba8f7d987bd186dbd647eaee9620030974d7
Validity
Not Before: Jan 1 04:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=937543271ddb8ae45e0a425a1cecc724f957bea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2f:f3:38:66:3f:f2:d5:d6:5c:6c:02:43:f1:
90:76:6a:74:53:d6:bb:ea:cb:3d:bf:d8:6e:ef:a8:
e5:24:61:ad:b7:1c:00:a0:00:44:2b:4d:1e:78:88:
f1:e1:52:9e:16:59:d5:e1:5e:ba:c3:24:ce:73:68:
a8:f4:26:d1:b3:7c:9b:eb:53:99:a7:5b:32:d1:05:
d2:af:37:ec:18:e2:78:1c:25:57:0e:48:70:b4:75:
0e:a6:dd:85:ef:79:0c:a2:07:8f:97:97:47:da:ee:
63:b5:29:de:28:0b:0c:8c:38:30:47:d9:ad:38:9b:
85:90:ef:82:8b:8c:89:92:c2:37:a3:88:a6:9d:99:
08:bc:89:99:a4:2f:28:e7:7c:e8:6a:f9:61:5f:0a:
a7:9a:74:1d:c7:3a:b8:51:bc:f5:c1:31:fd:07:69:
d0:05:72:34:62:b3:fa:9d:63:eb:8c:22:68:af:03:
70:39:05:8d:b2:43:bc:48:e5:74:88:4b:5c:2c:3a:
12:d4:19:8d:e4:8a:52:81:e3:40:05:ad:b9:3f:18:
8a:7b:d3:2d:5e:3e:d2:53:45:e5:a2:a1:7c:b0:13:
64:35:6a:d4:47:8d:cb:6f:fa:f8:31:fc:31:f7:e1:
92:78:51:32:b5:f4:50:97:0f:b2:f7:c8:01:df:d2:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:43:27:1D:DB:8A:E4:5E:0A:42:5A:1C:EC:C7:24:F9:57:BE:A4
X509v3 Authority Key Identifier:
keyid:9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/k3VDJx3biuReCkJaHOzHJPlXvqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/mnO6j32Ye9GG29ZH6u6WIAMJdNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:46:d9:29:b8:37:15:0a:8f:f8:c5:71:e9:72:37:ec:72:df:
ed:df:c0:bf:86:2a:44:74:d2:64:9c:c2:48:0b:8c:f1:b6:24:
ce:47:50:5a:1d:fc:ee:0e:5e:b7:07:3b:cf:49:9d:de:a0:85:
77:8e:b3:3d:9c:f3:3a:46:23:05:b7:14:fe:a5:ec:4c:94:33:
95:69:2a:26:da:9c:5b:a1:92:70:ac:42:c3:f8:20:af:d9:71:
f7:f6:5d:9e:0b:7e:26:a1:10:81:00:4b:ed:94:c2:cf:34:75:
05:85:76:c9:91:8f:d6:d0:17:e1:19:bc:1c:86:b4:92:ef:3c:
a6:fc:3d:c2:00:93:9e:07:d4:91:61:fe:24:a1:e2:d9:aa:5a:
40:9e:cc:15:53:38:47:46:e5:c3:13:1e:14:56:97:ea:0a:68:
d5:62:e3:cb:9f:f1:1d:a1:24:90:7e:f9:2c:1d:1f:19:45:e3:
0e:0a:c9:3e:30:a5:b2:f0:aa:6f:0c:05:39:bc:2b:f1:86:8b:
00:9d:bf:ae:54:7a:92:7e:5c:54:89:e3:72:78:02:55:de:b8:
d2:b9:b8:a8:6b:e8:95:26:3a:db:1d:e4:56:db:16:9e:ae:24:
79:ef:f5:ec:9a:ea:cf:1d:bc:c7:b2:c9:6c:56:07:85:b5:94:
f8:23:94:14
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBLalxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YTczYmE4ZjdkOTg3YmQxODZkYmQ2NDdlYWVlOTYyMDAzMDk3NGQ3MB4XDTIyMDEw
MTA0NTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTM3NTQzMjcxZGRi
OGFlNDVlMGE0MjVhMWNlY2M3MjRmOTU3YmVhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPQv8zhmP/LV1lxsAkPxkHZqdFPWu+rLPb/Ybu+o5SRhrbcc
AKAARCtNHniI8eFSnhZZ1eFeusMkznNoqPQm0bN8m+tTmadbMtEF0q837BjieBwl
Vw5IcLR1Dqbdhe95DKIHj5eXR9ruY7Up3igLDIw4MEfZrTibhZDvgouMiZLCN6OI
pp2ZCLyJmaQvKOd86Gr5YV8Kp5p0Hcc6uFG89cEx/Qdp0AVyNGKz+p1j64wiaK8D
cDkFjbJDvEjldIhLXCw6EtQZjeSKUoHjQAWtuT8YinvTLV4+0lNF5aKhfLATZDVq
1EeNy2/6+DH8MffhknhRMrX0UJcPsvfIAd/SGQcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSTdUMnHduK5F4KQloc7Mck+Ve+pDAfBgNVHSMEGDAWgBSac7qPfZh70Ybb
1kfq7pYgAwl01zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21uTzZqMzJZZTlHRzI5Wkg2dTZXSUFNSmROYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvYjUyN2NkLTQ3MjEtNGM5NC1iZjA4LTdmZjY5YzgzOGViNi8x
L2szVkRKeDNiaXVSZUNrSmFIT3pISlBsWHZxUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
YjUyN2NkLTQ3MjEtNGM5NC1iZjA4LTdmZjY5YzgzOGViNi8xL21uTzZqMzJZZTlH
RzI5Wkg2dTZXSUFNSmROYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmKXDANBgkqhkiG9w0BAQsFAAOC
AQEAekbZKbg3FQqP+MVx6XI37HLf7d/Av4YqRHTSZJzCSAuM8bYkzkdQWh387g5e
twc7z0md3qCFd46zPZzzOkYjBbcU/qXsTJQzlWkqJtqcW6GScKxCw/ggr9lx9/Zd
ngt+JqEQgQBL7ZTCzzR1BYV2yZGP1tAX4Rm8HIa0ku88pvw9wgCTngfUkWH+JKHi
2apaQJ7MFVM4R0blwxMeFFaX6gpo1WLjy5/xHaEkkH75LB0fGUXjDgrJPjClsvCq
bwwFObwr8YaLAJ2/rlR6kn5cVInjcngCVd640rm4qGvolSY62x3kVtsWnq4kee/1
7Jrqzx28x7LJbFYHhbWU+COUFA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net