Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/VbcjSMY3idbd3eKXgrL537WoYeA.roa
File: VbcjSMY3idbd3eKXgrL537WoYeA.roa (raw, json)
Hash identifier: HcIyte91pncikNE+rJHi8o0DT82lbl7G4kkbdmnGPrc=
Subject key identifier: 55:B7:23:48:C6:37:89:D6:DD:DD:E2:97:82:B2:F9:DF:B5:A8:61:E0
Certificate issuer: /CN=a5ec62f54e5a3b2f4f887baaf252a5f571b85891
Certificate serial: 85ED08
Authority key identifier: A5:EC:62:F5:4E:5A:3B:2F:4F:88:7B:AA:F2:52:A5:F5:71:B8:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pexi9U5aOy9PiHuq8lKl9XG4WJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/VbcjSMY3idbd3eKXgrL537WoYeA.roa
Signing time: Sat 01 Jan 2022 01:01:40 +0000
ROA not before: Sat 01 Jan 2022 01:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 212.18.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8776968 (0x85ed08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec62f54e5a3b2f4f887baaf252a5f571b85891
Validity
Not Before: Jan 1 01:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55b72348c63789d6dddde29782b2f9dfb5a861e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:8e:1e:09:6d:91:d5:b9:e1:11:61:41:24:
31:59:44:ff:cc:db:b5:f3:1d:b3:ad:33:4b:8a:e3:
ad:36:82:c1:53:c5:4f:09:f3:c6:7c:a9:a4:24:e1:
ad:f1:f2:c2:91:f6:b8:a0:97:8d:4a:c9:1c:29:91:
9c:57:e1:01:19:39:da:2d:df:4f:cb:cb:4c:4f:b3:
d2:06:15:7c:ca:99:12:56:a1:28:1b:b9:0b:a9:21:
28:4c:0f:8e:56:64:89:4d:b6:2d:d2:a6:d3:3a:29:
5d:47:9d:0d:60:16:4c:23:18:c8:af:59:28:5b:57:
2b:5e:fb:d2:c1:7d:cf:95:2f:42:22:bf:3a:3b:da:
16:d2:56:a9:20:bf:a9:8d:bf:ec:88:21:5d:60:2d:
5e:26:0b:2d:e7:e0:55:7a:0b:4a:5c:8c:1b:20:8d:
71:4f:b1:bc:d0:83:0e:f1:ae:54:37:43:31:d7:39:
d6:c1:a9:ed:ea:00:18:a1:2c:05:0c:d9:fc:60:ef:
1d:c9:97:30:37:c9:b4:d2:1e:95:48:98:e2:74:b9:
2e:1f:c4:cd:f9:16:91:6f:8a:69:59:cb:67:98:ee:
e7:14:0c:9f:3b:59:4c:54:52:18:69:c2:35:af:73:
0a:80:96:15:65:0a:48:ee:cb:1b:d1:8b:65:95:0f:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:23:48:C6:37:89:D6:DD:DD:E2:97:82:B2:F9:DF:B5:A8:61:E0
X509v3 Authority Key Identifier:
keyid:A5:EC:62:F5:4E:5A:3B:2F:4F:88:7B:AA:F2:52:A5:F5:71:B8:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pexi9U5aOy9PiHuq8lKl9XG4WJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/VbcjSMY3idbd3eKXgrL537WoYeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/pexi9U5aOy9PiHuq8lKl9XG4WJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:37:6b:38:c1:2b:20:03:72:dd:4e:20:5f:e4:89:cc:9f:fb:
19:e5:4b:b9:6d:07:eb:28:3d:fb:a4:e3:3e:65:6e:1d:5a:1e:
80:6c:6a:57:ca:82:e3:1a:f0:69:31:ba:b0:d7:90:e2:72:76:
01:71:f0:f5:53:2c:d6:5a:ba:7e:2f:fd:6e:d4:e2:a6:cd:66:
a3:2f:da:56:55:5f:cc:b9:2a:86:12:48:e1:06:a5:09:a5:1b:
68:2a:52:11:e6:6e:13:fc:72:15:82:19:d8:26:16:d9:0c:f9:
86:de:d1:b7:d6:e4:dd:6e:c2:07:9c:c1:43:08:e3:5b:27:cc:
ef:5a:22:23:de:7b:79:9d:25:38:d2:cd:bf:57:78:b1:a3:16:
38:50:f5:98:62:99:88:8c:91:5f:5a:42:bd:10:55:cb:3b:2f:
40:49:b9:00:70:1c:7d:2d:e8:1c:41:6b:73:12:c1:1e:21:f7:
27:40:c1:a5:04:41:ab:f0:0f:7a:6e:cb:cf:d3:f2:11:e0:d8:
a7:a8:fe:92:dc:04:22:87:27:16:1c:67:bf:ce:4c:31:56:94:
40:29:e0:2b:d5:a2:4e:81:98:c4:62:20:14:9d:18:bb:3a:ef:
d4:63:f5:be:21:a8:34:05:05:0b:c2:6b:30:74:27:03:ca:54:
57:fb:6b:86
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIXtCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NWVjNjJmNTRlNWEzYjJmNGY4ODdiYWFmMjUyYTVmNTcxYjg1ODkxMB4XDTIyMDEw
MTAxMDE0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTViNzIzNDhjNjM3
ODlkNmRkZGRlMjk3ODJiMmY5ZGZiNWE4NjFlMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOEgjh4JbZHVueERYUEkMVlE/8zbtfMds60zS4rjrTaCwVPF
TwnzxnyppCThrfHywpH2uKCXjUrJHCmRnFfhARk52i3fT8vLTE+z0gYVfMqZElah
KBu5C6khKEwPjlZkiU22LdKm0zopXUedDWAWTCMYyK9ZKFtXK1770sF9z5UvQiK/
OjvaFtJWqSC/qY2/7IghXWAtXiYLLefgVXoLSlyMGyCNcU+xvNCDDvGuVDdDMdc5
1sGp7eoAGKEsBQzZ/GDvHcmXMDfJtNIelUiY4nS5Lh/EzfkWkW+KaVnLZ5ju5xQM
nztZTFRSGGnCNa9zCoCWFWUKSO7LG9GLZZUP+n8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRVtyNIxjeJ1t3d4peCsvnftahh4DAfBgNVHSMEGDAWgBSl7GL1Tlo7L0+I
e6ryUqX1cbhYkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BleGk5VTVhT3k5UGlIdXE4bEtsOVhHNFdKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWQvYTY3Yzk3LTI0MjgtNDU4My04MDg2LWNkMDQ4YWE2YzE3OS8x
L1ZiY2pTTVkzaWRiZDNlS1hnckw1MzdXb1llQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQv
YTY3Yzk3LTI0MjgtNDU4My04MDg2LWNkMDQ4YWE2YzE3OS8xL3BleGk5VTVhT3k5
UGlIdXE4bEtsOVhHNFdKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQSYDANBgkqhkiG9w0BAQsFAAOC
AQEAKzdrOMErIANy3U4gX+SJzJ/7GeVLuW0H6yg9+6TjPmVuHVoegGxqV8qC4xrw
aTG6sNeQ4nJ2AXHw9VMs1lq6fi/9btTips1moy/aVlVfzLkqhhJI4QalCaUbaCpS
EeZuE/xyFYIZ2CYW2Qz5ht7Rt9bk3W7CB5zBQwjjWyfM71oiI957eZ0lONLNv1d4
saMWOFD1mGKZiIyRX1pCvRBVyzsvQEm5AHAcfS3oHEFrcxLBHiH3J0DBpQRBq/AP
em7Lz9PyEeDYp6j+ktwEIocnFhxnv85MMVaUQCngK9WiToGYxGIgFJ0Yuzrv1GP1
viGoNAUFC8JrMHQnA8pUV/trhg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net