Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/38312e32372e39362e302f32342d3234203d3e203234383531.roa
File: 38312e32372e39362e302f32342d3234203d3e203234383531.roa (raw, json)
Hash identifier: PgMweJxyeDGV+Q6cZjSMzuajHbiURpNdC102uIPh3Cs=
Subject key identifier: 70:9E:B5:27:88:D8:0C:0E:28:27:33:00:30:D8:6D:F4:1A:10:9C:DC
Certificate issuer: /CN=e903858f0abab52add2a8fca3f14998a35291a7a
Certificate serial: 07636DC0D47448DA375235482F4A3053CF6C035D
Authority key identifier: E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/38312e32372e39362e302f32342d3234203d3e203234383531.roa
Signing time: Mon 23 Jan 2023 11:28:18 +0000
ROA not before: Mon 23 Jan 2023 11:23:18 +0000
ROA not after: Mon 22 Jan 2024 11:28:18 +0000
asID: 24851
IP address blocks: 81.27.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:63:6d:c0:d4:74:48:da:37:52:35:48:2f:4a:30:53:cf:6c:03:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903858f0abab52add2a8fca3f14998a35291a7a
Validity
Not Before: Jan 23 11:23:18 2023 GMT
Not After : Jan 22 11:28:18 2024 GMT
Subject: CN=709EB52788D80C0E2827330030D86DF41A109CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:be:76:ef:c0:4c:ed:68:68:5f:b5:ff:88:
3b:b9:c0:e6:ff:be:c9:d0:c3:05:10:83:b7:05:46:
72:02:09:19:66:b5:ec:e3:3d:d3:b2:18:68:57:0e:
2a:87:c4:3e:ca:40:bb:f4:c3:39:35:75:ad:c6:ce:
0a:13:0c:a7:10:7e:4c:f4:62:92:63:42:b1:56:41:
e8:91:bd:c2:48:1d:e4:90:49:92:be:e9:0c:02:7d:
22:de:7a:6c:c6:3c:37:d5:61:31:48:0c:99:88:30:
4a:7d:a9:01:0a:b7:c8:9e:8f:19:6d:f1:fc:f0:28:
74:6b:e2:52:d7:3d:c6:df:05:79:92:c4:b2:85:c6:
de:57:ff:e0:89:32:8d:86:45:4f:d7:15:cd:3f:f1:
84:56:ad:eb:1b:f0:cc:2e:7f:13:45:f3:bd:e3:bc:
2c:69:4f:de:c3:85:c3:ca:72:eb:09:19:78:ce:44:
9d:3a:13:29:e5:3d:b6:1c:af:b0:d6:8f:ea:a0:d7:
ec:8b:e7:78:f9:68:d0:a5:ea:c7:6b:0a:2c:a6:f8:
de:6d:11:62:80:fd:20:b5:65:74:d2:23:c7:e4:96:
eb:47:01:e8:7f:df:3b:c7:db:f0:4b:ff:45:60:8f:
74:a4:dc:19:d0:8c:5e:d9:06:ee:a0:de:ab:40:c7:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:B5:27:88:D8:0C:0E:28:27:33:00:30:D8:6D:F4:1A:10:9C:DC
X509v3 Authority Key Identifier:
keyid:E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/E903858F0ABAB52ADD2A8FCA3F14998A35291A7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/38312e32372e39362e302f32342d3234203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.96.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f3:d9:81:51:8b:9a:3d:4e:1b:cf:b5:76:15:8a:a6:65:49:
17:51:a9:e9:21:f4:b9:5c:63:df:c4:4c:be:bd:5c:01:4e:6a:
79:6d:f0:8b:1d:44:1e:b7:4c:aa:79:57:01:25:79:4e:0a:3d:
f7:c2:66:51:bd:4a:2d:57:c3:b7:c5:30:5e:ec:82:47:3e:ed:
7e:ad:fe:bf:2d:25:19:30:99:b8:f1:e9:ae:ff:18:4e:66:c9:
6d:e9:6f:18:d9:68:85:4e:79:be:c3:b2:1e:2a:d5:aa:e4:ab:
ef:c6:69:3b:9b:ad:76:99:17:0d:c5:52:3d:7a:4b:b8:85:89:
1f:55:14:23:22:3d:74:5a:e7:e7:15:2a:e0:76:1f:a5:a1:fc:
8d:ba:f5:fa:26:eb:6a:ea:74:10:bc:90:ad:a7:56:09:89:f4:
2e:61:70:6b:e6:37:4d:ab:61:47:ab:3c:a8:ba:54:d5:f0:fa:
13:fc:b1:ec:4d:08:f0:19:f4:2f:61:ba:91:16:7e:bc:78:8b:
4a:1b:3e:5b:6d:9e:11:03:58:fb:49:77:eb:fd:ef:7f:84:0a:
fa:02:3f:ff:ef:01:8b:77:71:9c:9d:c4:f2:b8:57:c8:40:07:
96:96:06:bd:e8:8b:2c:c6:af:98:f8:54:c6:84:38:99:97:f2:
0b:48:c0:b1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUB2NtwNR0SNo3UjVIL0owU89sA10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTkwMzg1OGYwYWJhYjUyYWRkMmE4ZmNhM2YxNDk5OGEz
NTI5MWE3YTAeFw0yMzAxMjMxMTIzMThaFw0yNDAxMjIxMTI4MThaMDMxMTAvBgNV
BAMTKDcwOUVCNTI3ODhEODBDMEUyODI3MzMwMDMwRDg2REY0MUExMDlDREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9r75278BM7WhoX7X/iDu5wOb/
vsnQwwUQg7cFRnICCRlmtezjPdOyGGhXDiqHxD7KQLv0wzk1da3GzgoTDKcQfkz0
YpJjQrFWQeiRvcJIHeSQSZK+6QwCfSLeemzGPDfVYTFIDJmIMEp9qQEKt8iejxlt
8fzwKHRr4lLXPcbfBXmSxLKFxt5X/+CJMo2GRU/XFc0/8YRWresb8MwufxNF873j
vCxpT97DhcPKcusJGXjORJ06EynlPbYcr7DWj+qg1+yL53j5aNCl6sdrCiym+N5t
EWKA/SC1ZXTSI8fklutHAeh/3zvH2/BL/0Vgj3Sk3BnQjF7ZBu6g3qtAx/3ZAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUcJ61J4jYDA4oJzMAMNht9BoQnNwwHwYDVR0j
BBgwFoAU6QOFjwq6tSrdKo/KPxSZijUpGnowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzAvRTkwMzg1OEYwQUJBQjUyQUREMkE4RkNBM0YxNDk5OEEzNTI5MUE3QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZRT0Zqd3E2dFNyZEtvX0tQeFNaaWpV
cEduby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYt
OTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1NWM1LzAvMzgzMTJlMzIzNzJlMzkzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzQzODM1MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRG2Aw
DQYJKoZIhvcNAQELBQADggEBACTz2YFRi5o9ThvPtXYViqZlSRdRqekh9LlcY9/E
TL69XAFOanlt8IsdRB63TKp5VwEleU4KPffCZlG9Si1Xw7fFMF7sgkc+7X6t/r8t
JRkwmbjx6a7/GE5myW3pbxjZaIVOeb7Dsh4q1arkq+/GaTubrXaZFw3FUj16S7iF
iR9VFCMiPXRa5+cVKuB2H6Wh/I269fom62rqdBC8kK2nVgmJ9C5hcGvmN02rYUer
PKi6VNXw+hP8sexNCPAZ9C9hupEWfrx4i0obPlttnhEDWPtJd+v973+ECvoCP//v
AYt3cZydxPK4V8hAB5aWBr3oiyzGr5j4VMaEOJmX8gtIwLE=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net