Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/_2vOGhrwdPQvy3fNg6s80ZfJrlg.roa
File: _2vOGhrwdPQvy3fNg6s80ZfJrlg.roa (raw, json)
Hash identifier: Xrqr4y4iLMUs44aHKU+XQcX8sZdhGbEZd6AcjI9xYy8=
Subject key identifier: FF:6B:CE:1A:1A:F0:74:F4:2F:CB:77:CD:83:AB:3C:D1:97:C9:AE:58
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01843D5E70C8750CB0F28B3823F0648AA638
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/_2vOGhrwdPQvy3fNg6s80ZfJrlg.roa
Signing time: Thu 03 Nov 2022 12:01:49 +0000
ROA not before: Thu 03 Nov 2022 12:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57355
IP address blocks: 2.57.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:5e:70:c8:75:0c:b0:f2:8b:38:23:f0:64:8a:a6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Nov 3 12:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff6bce1a1af074f42fcb77cd83ab3cd197c9ae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f8:ef:b9:17:81:a4:0e:de:3b:74:e4:dc:3a:
a0:47:65:62:72:23:5b:46:e3:36:f7:f7:f3:34:1e:
19:5b:28:8d:4f:07:13:77:48:1f:07:af:27:b9:d4:
6e:2d:c9:51:d4:a3:e9:c6:35:44:bb:94:0c:85:a7:
db:31:12:08:a6:8b:da:02:ea:fa:bc:e0:95:5f:3c:
47:7d:8c:f9:3b:36:45:c7:88:3b:59:0a:07:ed:7a:
0c:5f:34:47:7c:00:75:22:7c:61:18:f0:de:bd:36:
05:cb:09:b5:ca:2f:6f:d6:82:0a:24:be:7b:b7:c8:
36:50:49:1c:f0:c6:2e:26:6e:aa:a4:0c:49:74:94:
a7:ac:20:53:d7:de:36:d3:3b:8e:a6:1e:0a:c2:a5:
28:78:17:ef:04:a8:b6:1b:59:43:64:f5:9c:75:a2:
41:49:d4:6c:a2:e4:d0:8a:d6:35:ac:e7:be:91:8e:
45:ce:2f:65:63:5d:d0:59:90:f9:0c:c0:ca:6d:a8:
d3:cb:8c:3d:de:4c:44:b2:1b:7d:bb:67:cc:41:a8:
30:00:05:ea:26:a3:da:d9:db:71:62:09:37:71:1d:
69:ad:12:aa:51:79:e6:be:98:82:69:4f:49:47:72:
01:fc:d9:9f:99:97:45:88:6f:b3:7f:e1:16:06:61:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6B:CE:1A:1A:F0:74:F4:2F:CB:77:CD:83:AB:3C:D1:97:C9:AE:58
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/_2vOGhrwdPQvy3fNg6s80ZfJrlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.149.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e0:df:6a:86:a6:f4:92:13:de:79:9a:56:29:da:2b:52:8a:
ce:e1:2a:fd:16:2c:5a:5f:ae:54:1c:e9:95:96:d1:75:b1:e3:
fe:36:63:a1:02:90:ce:51:c5:ad:c7:19:7c:87:77:e4:60:1b:
f3:de:e1:71:51:a8:08:c0:46:22:8a:3e:44:b9:31:26:e9:16:
49:41:47:50:46:d4:af:59:3a:71:9e:c1:82:15:62:c9:a7:35:
7f:97:fe:28:36:41:b2:32:89:9b:4f:26:83:19:80:77:e6:f7:
eb:7a:ba:54:3a:84:e7:2e:4a:4f:2e:5f:04:c5:cb:8f:ab:4c:
3d:62:64:7e:db:6f:6b:49:0d:5c:bd:71:1f:e9:35:32:91:27:
67:00:a0:57:1b:83:43:15:f5:31:54:44:a7:3a:fb:59:2e:ae:
bf:65:1d:98:67:38:5b:a2:38:e4:7b:fa:ac:00:01:dd:32:0d:
b3:14:ab:ba:6b:81:96:6b:13:ab:fa:53:3f:5d:37:80:e7:8b:
c7:0e:75:53:05:86:57:0d:14:5d:1c:fd:66:f2:a6:d9:5f:7b:
6d:fa:f4:c9:13:f1:e8:cf:96:9d:1a:e6:22:11:da:2f:fd:f3:
0f:86:87:5d:9f:47:3e:20:79:64:57:1d:6e:3b:64:38:a3:a2:
ee:05:52:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ9XnDIdQyw8os4I/BkiqY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2NjMWY1OGJkZDI1OGM4ZDkyZDM0MmJlZTZhMmFkNGNl
M2Y3NDQwHhcNMjIxMTAzMTIwMTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjZiY2UxYTFhZjA3NGY0MmZjYjc3Y2Q4M2FiM2NkMTk3YzlhZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/jvuReBpA7eO3Tk3DqgR2ViciNb
RuM29/fzNB4ZWyiNTwcTd0gfB68nudRuLclR1KPpxjVEu5QMhafbMRIIpovaAur6
vOCVXzxHfYz5OzZFx4g7WQoH7XoMXzRHfAB1InxhGPDevTYFywm1yi9v1oIKJL57
t8g2UEkc8MYuJm6qpAxJdJSnrCBT19420zuOph4KwqUoeBfvBKi2G1lDZPWcdaJB
SdRsouTQitY1rOe+kY5Fzi9lY13QWZD5DMDKbajTy4w93kxEsht9u2fMQagwAAXq
JqPa2dtxYgk3cR1prRKqUXnmvpiCaU9JR3IB/NmfmZdFiG+zf+EWBmELfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP9rzhoa8HT0L8t3zYOrPNGXya5YMB8GA1UdIwQY
MBaAFEt8wfWL3SWMjZLTQr7moq1M4/dEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUt
YWM4MjM2YmRjODhjLzEvXzJ2T0docndkUFF2eTNmTmc2czgwWmZKcmxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kNDdmODctYjM0Zi00OWNlLWJmMWUtYWM4MjM2YmRjODhj
LzEvUzN6QjlZdmRKWXlOa3ROQ3Z1YWlyVXpqOTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjmVMA0G
CSqGSIb3DQEBCwUAA4IBAQA14N9qhqb0khPeeZpWKdorUorO4Sr9FixaX65UHOmV
ltF1seP+NmOhApDOUcWtxxl8h3fkYBvz3uFxUagIwEYiij5EuTEm6RZJQUdQRtSv
WTpxnsGCFWLJpzV/l/4oNkGyMombTyaDGYB35vfrerpUOoTnLkpPLl8ExcuPq0w9
YmR+229rSQ1cvXEf6TUykSdnAKBXG4NDFfUxVESnOvtZLq6/ZR2YZzhbojjke/qs
AAHdMg2zFKu6a4GWaxOr+lM/XTeA54vHDnVTBYZXDRRdHP1m8qbZX3tt+vTJE/Ho
z5adGuYiEdov/fMPhoddn0c+IHlkVx1uO2Q4o6LuBVLe
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net