Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/xcg8__JfEpk0ab71LhZ6vV9hBY8.roa
File: xcg8__JfEpk0ab71LhZ6vV9hBY8.roa (raw, json)
Hash identifier: FGHYVFtL+Fs7IvphJLbr8s6jp3qFEfbWnwLHhC6r3Hw=
Subject key identifier: C5:C8:3C:FF:F2:5F:12:99:34:69:BE:F5:2E:16:7A:BD:5F:61:05:8F
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 0182F95302C1EAD3A86967046B679860C42B
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/xcg8__JfEpk0ab71LhZ6vV9hBY8.roa
Signing time: Thu 01 Sep 2022 13:52:23 +0000
ROA not before: Thu 01 Sep 2022 13:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203537
IP address blocks: 31.222.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:53:02:c1:ea:d3:a8:69:67:04:6b:67:98:60:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Sep 1 13:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5c83cfff25f12993469bef52e167abd5f61058f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:55:4e:92:9b:77:ed:fc:82:20:ec:c3:1d:
2a:be:30:e9:cf:ca:13:c9:d7:98:e6:23:90:1d:87:
9a:3e:81:75:e5:74:79:c4:94:8a:10:0d:55:0d:50:
86:cf:a7:39:c7:8b:76:53:43:69:53:29:09:3f:20:
d3:6a:b3:6e:64:df:ec:5d:19:3d:54:c5:3d:d7:0a:
a4:b8:ea:73:db:80:26:e2:ca:49:b1:10:f7:53:62:
79:86:0d:7c:40:28:6a:33:c7:d7:b3:77:9d:eb:c1:
b2:47:26:fe:97:d0:b8:e4:24:24:7e:be:6f:8f:93:
d8:0c:51:94:09:62:36:83:e4:30:c0:52:8e:fd:2c:
67:65:31:8c:8f:6f:7b:69:62:77:97:d0:a8:8e:dd:
16:88:ef:b2:e3:c1:88:d0:e3:c4:4e:34:8f:9d:ea:
df:45:0e:77:97:48:41:31:8a:7a:8b:e3:22:24:2e:
b6:b8:e9:31:58:7d:32:fe:68:a5:62:41:23:bd:88:
23:61:28:58:8b:73:b4:d3:d5:01:5b:80:7b:6c:b8:
80:ad:8e:d6:33:23:a8:71:f9:1f:0e:7f:ec:f5:24:
9c:ce:d9:de:45:2d:b9:cd:f3:f6:60:32:7d:66:6d:
02:6a:ec:be:8e:f5:cf:1e:15:91:61:48:e1:9e:9f:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:3C:FF:F2:5F:12:99:34:69:BE:F5:2E:16:7A:BD:5F:61:05:8F
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/xcg8__JfEpk0ab71LhZ6vV9hBY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.113.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3b:b8:d7:ba:38:f6:05:8a:a8:d5:ef:46:3c:9b:c6:75:bf:
59:03:05:a2:64:a1:ef:d2:c4:cd:ef:e6:30:ac:8f:9d:cd:10:
91:af:b7:6d:2e:7d:7a:12:10:5e:90:43:71:96:62:17:65:3b:
f9:7a:50:7e:8a:8e:4d:f2:dc:67:db:42:82:0d:a4:2d:9f:68:
18:70:56:a0:ee:e6:6b:71:da:a1:57:17:42:9a:35:fa:32:f8:
c6:57:6d:b2:4a:64:36:78:00:b7:d9:a2:ef:67:bd:f7:01:91:
3d:e2:e3:db:b4:47:f6:45:c3:2b:99:e3:be:b2:75:93:ef:94:
0d:44:0b:41:46:f7:45:05:d0:0c:a1:03:ff:7d:78:80:75:6b:
70:92:07:bb:f6:af:81:0d:df:b6:da:84:5a:d6:12:b6:da:0d:
d7:7f:97:b2:48:6e:22:67:01:66:ac:97:22:ae:cd:9d:91:f5:
1f:34:52:64:58:7b:25:15:4c:12:56:a2:02:79:8b:92:e2:9f:
90:f0:6d:0c:13:31:7d:2f:95:9a:f7:6c:10:b9:75:ad:bb:0b:
b2:bd:1c:c3:68:23:83:82:9d:ed:38:0b:c9:db:42:76:3f:55:
7f:9e:29:4f:51:a7:00:04:0c:36:49:b9:eb:c4:3d:6f:b8:6c:
52:aa:f2:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL5UwLB6tOoaWcEa2eYYMQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYmJjNTFlNDU0MWNmYmI1MDRmZjVlZjJhMzk2ZGY2YTU0
YjVlNmQwHhcNMjIwOTAxMTM1MjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWM4M2NmZmYyNWYxMjk5MzQ2OWJlZjUyZTE2N2FiZDVmNjEwNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8FVTpKbd+38giDswx0qvjDpz8oT
ydeY5iOQHYeaPoF15XR5xJSKEA1VDVCGz6c5x4t2U0NpUykJPyDTarNuZN/sXRk9
VMU91wqkuOpz24Am4spJsRD3U2J5hg18QChqM8fXs3ed68GyRyb+l9C45CQkfr5v
j5PYDFGUCWI2g+QwwFKO/SxnZTGMj297aWJ3l9Cojt0WiO+y48GI0OPETjSPnerf
RQ53l0hBMYp6i+MiJC62uOkxWH0y/milYkEjvYgjYShYi3O009UBW4B7bLiArY7W
MyOocfkfDn/s9SScztneRS25zfP2YDJ9Zm0Cauy+jvXPHhWRYUjhnp+/GwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXIPP/yXxKZNGm+9S4Wer1fYQWPMB8GA1UdIwQY
MBaAFJG7xR5FQc+7UE/17yo5bfalS15tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2J2RkhrVkJ6N3RRVF9YdktqbHQ5cVZMWG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mN2Q4YmEtN2RmNi00NGY0LWE2ZmEt
ZmQ4MmYyOTA0MzFjLzEveGNnOF9fSmZFcGswYWI3MUxoWjZ2VjloQlk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mN2Q4YmEtN2RmNi00NGY0LWE2ZmEtZmQ4MmYyOTA0MzFj
LzEva2J2RkhrVkJ6N3RRVF9YdktqbHQ5cVZMWG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH95xMA0G
CSqGSIb3DQEBCwUAA4IBAQAnO7jXujj2BYqo1e9GPJvGdb9ZAwWiZKHv0sTN7+Yw
rI+dzRCRr7dtLn16EhBekENxlmIXZTv5elB+io5N8txn20KCDaQtn2gYcFag7uZr
cdqhVxdCmjX6MvjGV22ySmQ2eAC32aLvZ733AZE94uPbtEf2RcMrmeO+snWT75QN
RAtBRvdFBdAMoQP/fXiAdWtwkge79q+BDd+22oRa1hK22g3Xf5eySG4iZwFmrJci
rs2dkfUfNFJkWHslFUwSVqICeYuS4p+Q8G0MEzF9L5Wa92wQuXWtuwuyvRzDaCOD
gp3tOAvJ20J2P1V/nilPUacABAw2SbnrxD1vuGxSqvK1
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net