Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/krjb2BvZV9VNOPLyYq6cSBYXyFk.roa
File: krjb2BvZV9VNOPLyYq6cSBYXyFk.roa (raw, json)
Hash identifier: fGo19JCGlA22lKvSnnFZwItWhczjjmJf+Zv/WVcWP00=
Subject key identifier: 92:B8:DB:D8:1B:D9:57:D5:4D:38:F2:F2:62:AE:9C:48:16:17:C8:59
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0186CAEF6A773203C41ED40BB57C6D25FC1A
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/krjb2BvZV9VNOPLyYq6cSBYXyFk.roa
Signing time: Fri 10 Mar 2023 09:52:13 +0000
ROA not before: Fri 10 Mar 2023 09:52:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:ef:6a:77:32:03:c4:1e:d4:0b:b5:7c:6d:25:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 10 09:52:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92b8dbd81bd957d54d38f2f262ae9c481617c859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:d6:77:4e:8b:e8:78:33:f7:58:88:93:d2:
b3:52:67:c0:b0:23:48:21:3b:8f:a2:77:da:0a:d2:
f1:9f:4c:cd:59:b7:21:a6:a3:50:c5:9b:1a:41:a3:
08:76:70:7f:41:3d:63:fa:42:d0:45:e0:c5:22:9f:
f0:8b:d8:e3:86:29:c9:46:e1:89:d6:e5:fb:46:22:
fa:42:43:92:a4:9d:83:9c:18:84:48:0d:ed:d1:8f:
79:7a:5b:00:8f:b3:46:5d:0f:80:c0:f0:49:75:71:
39:96:9f:6d:17:b1:f7:b8:ce:86:d5:cc:fc:af:ad:
3c:9b:f3:35:ff:e5:73:0a:d1:06:90:fd:1a:1a:a1:
ac:33:01:da:e0:a9:9b:23:97:9e:e2:7b:f6:b4:99:
96:b3:72:f9:2c:89:b8:12:bf:80:3e:1b:6f:1f:18:
c3:c4:e5:8f:b0:18:69:e5:e2:44:2a:56:3a:9f:1d:
ae:ce:71:ec:a3:ce:29:ef:2d:c4:c8:9d:5e:07:3b:
05:64:27:c2:32:36:a4:5c:df:a6:39:1a:83:ef:83:
3e:c9:fd:9c:81:5c:52:3c:4c:b3:29:5f:0c:ca:26:
2e:3e:fa:ba:96:30:d2:f8:4a:8a:c6:4c:bd:2f:d1:
e7:b3:59:bc:0b:3f:cd:5e:27:88:0f:20:d6:63:93:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B8:DB:D8:1B:D9:57:D5:4D:38:F2:F2:62:AE:9C:48:16:17:C8:59
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/krjb2BvZV9VNOPLyYq6cSBYXyFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:81:56:af:09:0d:32:f8:77:af:be:23:12:69:ba:c6:88:92:
69:73:72:e1:73:fe:e5:a1:f6:d6:f6:db:09:33:93:89:f1:fa:
75:28:b9:5c:4a:24:c8:00:9a:82:14:d1:d3:36:17:96:ef:13:
d9:e3:dd:6c:d4:5e:a0:dd:7a:0d:d1:2b:cc:8e:cc:09:d7:90:
40:59:60:11:6e:ac:9a:a1:72:af:01:40:de:95:62:b1:4c:79:
de:45:3f:7d:ad:a8:d8:f1:c5:11:ac:f2:c7:3c:12:7c:0c:d0:
2d:49:8a:11:59:25:9d:de:0f:de:d0:41:0a:84:15:db:d6:f9:
93:25:8c:50:61:d9:4e:c3:cf:18:05:16:66:8d:60:ca:02:50:
9c:de:0f:66:73:03:e4:cb:3a:8e:15:5f:e0:41:60:73:da:0d:
45:d6:22:a7:b9:6e:fd:da:9a:bd:72:1b:83:44:15:21:03:6d:
a3:0b:2a:63:58:c1:28:ca:c4:99:89:9a:dd:62:ab:eb:3f:ef:
13:e1:76:90:77:65:37:45:0a:4e:a7:f8:26:99:f6:d6:ec:82:
dd:92:9a:82:23:d0:cb:b7:c7:f9:cb:12:42:4e:87:03:03:81:
0c:25:81:8e:d2:71:c1:06:1b:e2:91:00:e9:b3:cf:7d:e7:0b:
72:b1:25:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbK72p3MgPEHtQLtXxtJfwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwMzEwMDk1MjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmI4ZGJkODFiZDk1N2Q1NGQzOGYyZjI2MmFlOWM0ODE2MTdjODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqPWd06L6Hgz91iIk9KzUmfAsCNI
ITuPonfaCtLxn0zNWbchpqNQxZsaQaMIdnB/QT1j+kLQReDFIp/wi9jjhinJRuGJ
1uX7RiL6QkOSpJ2DnBiESA3t0Y95elsAj7NGXQ+AwPBJdXE5lp9tF7H3uM6G1cz8
r608m/M1/+VzCtEGkP0aGqGsMwHa4KmbI5ee4nv2tJmWs3L5LIm4Er+APhtvHxjD
xOWPsBhp5eJEKlY6nx2uznHso84p7y3EyJ1eBzsFZCfCMjakXN+mORqD74M+yf2c
gVxSPEyzKV8MyiYuPvq6ljDS+EqKxky9L9Hns1m8Cz/NXieIDyDWY5M+vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJK429gb2VfVTTjy8mKunEgWF8hZMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEva3JqYjJCdlpWOVZOT1BMeVlxNmNTQllYeUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv6oMA0G
CSqGSIb3DQEBCwUAA4IBAQCngVavCQ0y+HevviMSabrGiJJpc3Lhc/7lofbW9tsJ
M5OJ8fp1KLlcSiTIAJqCFNHTNheW7xPZ491s1F6g3XoN0SvMjswJ15BAWWARbqya
oXKvAUDelWKxTHneRT99rajY8cURrPLHPBJ8DNAtSYoRWSWd3g/e0EEKhBXb1vmT
JYxQYdlOw88YBRZmjWDKAlCc3g9mcwPkyzqOFV/gQWBz2g1F1iKnuW792pq9chuD
RBUhA22jCypjWMEoysSZiZrdYqvrP+8T4XaQd2U3RQpOp/gmmfbW7ILdkpqCI9DL
t8f5yxJCTocDA4EMJYGO0nHBBhvikQDps8995wtysSUi
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net