Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/IbzFN6GlsnVjPNhCz6rFpvHvJ70.roa
File: IbzFN6GlsnVjPNhCz6rFpvHvJ70.roa (raw, json)
Hash identifier: 78Wad+xVSbRoHoV1WBAqCz09nv75Ebq1n43uvKhUZYA=
Subject key identifier: 21:BC:C5:37:A1:A5:B2:75:63:3C:D8:42:CF:AA:C5:A6:F1:EF:27:BD
Certificate issuer: /CN=abcba82613f8eceacea79fbb266008c81bbb2b3a
Certificate serial: 01856D01799CD0D66C4DFC466568F1FB359F
Authority key identifier: AB:CB:A8:26:13:F8:EC:EA:CE:A7:9F:BB:26:60:08:C8:1B:BB:2B:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8uoJhP47OrOp5-7JmAIyBu7Kzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/IbzFN6GlsnVjPNhCz6rFpvHvJ70.roa
Signing time: Sun 01 Jan 2023 11:04:51 +0000
ROA not before: Sun 01 Jan 2023 11:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49373
IP address blocks: 91.214.76.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:79:9c:d0:d6:6c:4d:fc:46:65:68:f1:fb:35:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcba82613f8eceacea79fbb266008c81bbb2b3a
Validity
Not Before: Jan 1 11:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21bcc537a1a5b275633cd842cfaac5a6f1ef27bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:38:0f:30:21:1d:6b:ca:37:e6:36:55:55:
02:91:4d:c1:81:9f:2a:53:5a:2d:29:a7:1c:a3:13:
3c:a9:dc:e1:d8:e0:a6:ef:a0:aa:37:14:00:46:88:
0c:a5:be:e6:b6:b5:f5:5c:a8:46:a0:3b:22:65:1b:
0d:4a:25:12:4b:50:b0:73:01:c0:6f:a7:b6:4e:aa:
20:62:ec:50:51:ca:bc:de:62:2a:b7:5f:45:db:b4:
26:ec:fd:31:48:b5:c0:b2:8b:db:07:5e:46:3c:9a:
b6:2e:c0:bb:09:b0:cb:dd:b8:cf:18:1b:b1:79:b0:
35:14:e1:36:47:a1:ae:27:5b:3d:8a:c1:6b:c7:dc:
4a:3c:73:3e:2e:4a:c0:a0:86:e7:68:69:6d:a0:86:
38:f7:e7:af:7a:56:6f:59:9a:eb:aa:97:77:7f:0f:
68:0c:1f:d5:13:2b:3f:bb:84:3d:56:dc:9f:07:51:
8e:86:c0:09:40:b7:90:54:9f:7d:cd:07:ff:44:cf:
a2:ab:73:21:0f:ee:d7:4a:ec:74:59:4c:bc:12:54:
73:c3:9e:e6:fd:17:5d:0e:3b:18:1e:c0:b5:b0:77:
a8:65:ae:b4:6c:80:1b:c3:3b:4c:e1:68:7f:04:1b:
0c:2b:d3:b4:ed:25:3b:ca:6a:55:a8:54:6d:a7:ba:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BC:C5:37:A1:A5:B2:75:63:3C:D8:42:CF:AA:C5:A6:F1:EF:27:BD
X509v3 Authority Key Identifier:
keyid:AB:CB:A8:26:13:F8:EC:EA:CE:A7:9F:BB:26:60:08:C8:1B:BB:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8uoJhP47OrOp5-7JmAIyBu7Kzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/IbzFN6GlsnVjPNhCz6rFpvHvJ70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/q8uoJhP47OrOp5-7JmAIyBu7Kzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.76.0/22
Signature Algorithm: sha256WithRSAEncryption
66:07:8a:79:05:77:95:5f:06:4a:7b:09:5a:c0:8e:0d:36:9d:
21:fa:e8:d1:5e:55:64:c6:db:da:27:94:a0:7d:aa:33:b4:52:
c1:53:e9:a9:88:fe:9f:34:7e:77:a1:40:8b:83:cc:0e:d9:26:
69:32:8f:13:1a:2f:7d:6d:74:f1:01:3d:a9:7f:d2:4e:6c:dc:
f4:c5:fe:90:79:bf:22:24:b8:05:ea:93:c9:b9:85:eb:ac:1a:
a3:6d:b2:9f:04:e4:55:1a:ad:15:83:bb:cf:1e:a4:f6:22:97:
d5:d0:be:05:60:36:6d:b8:96:6a:99:47:78:65:da:47:c9:f2:
5e:74:9e:22:16:8f:52:41:e3:5d:30:1a:cc:8b:a4:42:09:58:
cd:2f:c6:02:82:bf:cb:b0:a1:ff:dd:57:1c:35:b1:da:c8:cf:
10:f8:f3:9a:70:a6:b6:e7:6b:d8:a0:11:a0:48:66:6d:c8:2c:
8c:d2:0a:45:3e:44:e2:d6:e5:ca:88:93:74:a1:5a:87:c8:58:
b4:c5:60:47:41:63:f8:ca:fe:76:b4:0b:3c:bf:87:01:90:3c:
6c:81:df:93:ba:de:75:36:01:a3:87:cc:5c:42:fb:ca:8d:e2:
f9:18:f0:45:79:9e:d1:44:53:18:1f:b9:63:0e:57:cd:e8:81:
b7:58:34:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAXmc0NZsTfxGZWjx+zWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiY2JhODI2MTNmOGVjZWFjZWE3OWZiYjI2NjAwOGM4MWJi
YjJiM2EwHhcNMjMwMTAxMTEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWJjYzUzN2ExYTViMjc1NjMzY2Q4NDJjZmFhYzVhNmYxZWYyN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV84DzAhHWvKN+Y2VVUCkU3BgZ8q
U1otKaccoxM8qdzh2OCm76CqNxQARogMpb7mtrX1XKhGoDsiZRsNSiUSS1CwcwHA
b6e2TqogYuxQUcq83mIqt19F27Qm7P0xSLXAsovbB15GPJq2LsC7CbDL3bjPGBux
ebA1FOE2R6GuJ1s9isFrx9xKPHM+LkrAoIbnaGltoIY49+evelZvWZrrqpd3fw9o
DB/VEys/u4Q9VtyfB1GOhsAJQLeQVJ99zQf/RM+iq3MhD+7XSux0WUy8ElRzw57m
/RddDjsYHsC1sHeoZa60bIAbwztM4Wh/BBsMK9O07SU7ympVqFRtp7qyrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCG8xTehpbJ1YzzYQs+qxabx7ye9MB8GA1UdIwQY
MBaAFKvLqCYT+OzqzqefuyZgCMgbuys6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTh1b0poUDQ3T3JPcDUtN0ptQUl5QnU3S3pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mYTkwMzItNDVlMS00NGMyLTk4Y2Ut
YWMyOTY3NmU5MWYwLzEvSWJ6Rk42R2xzblZqUE5oQ3o2ckZwdkh2SjcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mYTkwMzItNDVlMS00NGMyLTk4Y2UtYWMyOTY3NmU5MWYw
LzEvcTh1b0poUDQ3T3JPcDUtN0ptQUl5QnU3S3pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9ZMMA0G
CSqGSIb3DQEBCwUAA4IBAQBmB4p5BXeVXwZKewlawI4NNp0h+ujRXlVkxtvaJ5Sg
faoztFLBU+mpiP6fNH53oUCLg8wO2SZpMo8TGi99bXTxAT2pf9JObNz0xf6Qeb8i
JLgF6pPJuYXrrBqjbbKfBORVGq0Vg7vPHqT2IpfV0L4FYDZtuJZqmUd4ZdpHyfJe
dJ4iFo9SQeNdMBrMi6RCCVjNL8YCgr/LsKH/3VccNbHayM8Q+POacKa252vYoBGg
SGZtyCyM0gpFPkTi1uXKiJN0oVqHyFi0xWBHQWP4yv52tAs8v4cBkDxsgd+Tut51
NgGjh8xcQvvKjeL5GPBFeZ7RRFMYH7ljDlfN6IG3WDSF
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:38 2025 by rpki-client