Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/8GhYva81iA-IXvv2JYpP38CKFWA.roa
File: 8GhYva81iA-IXvv2JYpP38CKFWA.roa (raw, json)
Hash identifier: Us/F5QIDiHaZNmDtMlTOe54CVeOZQgePOXh1jtpvXW8=
Subject key identifier: F0:68:58:BD:AF:35:88:0F:88:5E:FB:F6:25:8A:4F:DF:C0:8A:15:60
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F022904E876E3F6A4DCF36263FCE1CD
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/8GhYva81iA-IXvv2JYpP38CKFWA.roa
Signing time: Sun 01 Jan 2023 20:24:50 +0000
ROA not before: Sun 01 Jan 2023 20:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198461
IP address blocks: 81.93.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:29:04:e8:76:e3:f6:a4:dc:f3:62:63:fc:e1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f06858bdaf35880f885efbf6258a4fdfc08a1560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:d3:07:7b:87:c3:2b:9c:d4:ce:76:75:8a:
3a:1a:3e:75:a4:9c:d3:38:08:02:3e:c5:70:8f:59:
c3:46:cf:a6:a4:3e:6d:2a:be:b8:70:17:66:1c:69:
4b:ba:e1:f5:5d:01:c9:99:b7:31:25:aa:05:3d:7a:
80:fb:15:29:95:02:34:47:30:69:d9:c6:c7:67:b6:
48:b3:1f:ce:cb:5d:0f:d6:1d:8e:b4:42:d9:45:e1:
f1:0a:51:c6:3d:cb:5a:b9:60:ca:cf:73:57:83:e7:
86:68:aa:37:72:39:d3:cb:87:b4:a7:f6:cb:e8:11:
4f:c2:b8:fe:07:1f:76:bd:d5:97:05:eb:bc:e0:e7:
d9:04:95:c6:1b:e7:87:22:5e:63:7b:c3:6f:80:2b:
4e:ba:80:a3:98:a7:93:82:43:1b:e0:74:07:41:6a:
1d:69:a7:3a:ac:e0:6f:86:87:b6:6b:12:6f:f9:2b:
56:6a:85:e7:a2:e8:c6:c3:44:0a:87:16:a6:8f:8e:
15:fb:64:db:ca:1f:83:36:26:19:58:a6:c7:f2:23:
8c:8a:e4:6f:d3:e2:67:fc:8d:59:10:2e:b7:1f:a7:
3d:36:00:9a:ed:1e:e5:82:10:5e:1f:6b:ff:4b:a2:
1f:b0:89:4b:f6:fa:a2:8f:07:fd:5f:be:67:aa:41:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:68:58:BD:AF:35:88:0F:88:5E:FB:F6:25:8A:4F:DF:C0:8A:15:60
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/8GhYva81iA-IXvv2JYpP38CKFWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:db:9f:38:9c:f7:8d:7c:b9:7a:cd:4a:5b:2e:ba:ff:8e:c0:
3f:f6:74:9f:a7:01:e9:29:7e:f7:e5:df:f0:1f:78:7e:b0:95:
44:74:a2:57:e5:c3:d9:0b:98:7f:3b:d4:e9:80:d7:44:64:1e:
6e:1a:c1:5a:be:2c:aa:06:3b:c6:b6:23:13:dd:76:37:cf:00:
94:89:2a:af:7f:29:22:68:2a:a0:07:b6:0e:df:c6:b1:7d:5f:
c1:67:8e:bc:18:8f:c9:71:58:73:15:a2:4d:21:df:27:4b:8c:
80:c6:07:d2:cd:ff:ad:3d:e1:f9:81:64:42:33:8e:e9:0a:9e:
7f:1c:02:ca:e5:00:98:52:92:36:8d:8d:12:e8:64:8b:54:c3:
8d:c4:00:dc:0d:cb:48:81:49:77:93:f3:90:26:8a:5b:e4:aa:
f2:3a:01:50:e6:9d:f0:09:d3:92:07:da:a2:ee:96:28:ca:7a:
8f:36:65:ca:a6:bd:bd:2a:2d:b6:a1:a8:7d:0a:0d:ee:b6:07:
a8:d5:3e:c2:12:41:ca:2a:f3:79:12:42:e9:47:3b:e4:df:65:
45:52:01:91:28:b4:d6:df:49:dc:e7:60:ce:83:c7:21:54:d5:
65:9b:88:48:86:c5:26:18:09:5a:09:2f:54:a8:ee:62:bc:e3:
eb:ee:64:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAikE6Hbj9qTc82Jj/OHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZGFiNTA3YzA4OTc2Y2MyOWQxNzczNzNkZTYyN2ExY2U4
NmVmYWUwHhcNMjMwMTAxMjAyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDY4NThiZGFmMzU4ODBmODg1ZWZiZjYyNThhNGZkZmMwOGExNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8nTB3uHwyuc1M52dYo6Gj51pJzT
OAgCPsVwj1nDRs+mpD5tKr64cBdmHGlLuuH1XQHJmbcxJaoFPXqA+xUplQI0RzBp
2cbHZ7ZIsx/Oy10P1h2OtELZReHxClHGPctauWDKz3NXg+eGaKo3cjnTy4e0p/bL
6BFPwrj+Bx92vdWXBeu84OfZBJXGG+eHIl5je8NvgCtOuoCjmKeTgkMb4HQHQWod
aac6rOBvhoe2axJv+StWaoXnoujGw0QKhxamj44V+2Tbyh+DNiYZWKbH8iOMiuRv
0+Jn/I1ZEC63H6c9NgCa7R7lghBeH2v/S6IfsIlL9vqijwf9X75nqkFC9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBoWL2vNYgPiF779iWKT9/AihVgMB8GA1UdIwQY
MBaAFEXatQfAiXbMKdF3Nz3mJ6HOhu+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmRxMUI4Q0pkc3dwMFhjM1BlWW5vYzZHNzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YWE1MDAtZjNiZC00NzdiLTkwODIt
YWEwYjExNTY0YTMyLzEvOEdoWXZhODFpQS1JWHZ2MkpZcFAzOENLRldBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85YWE1MDAtZjNiZC00NzdiLTkwODItYWEwYjExNTY0YTMy
LzEvUmRxMUI4Q0pkc3dwMFhjM1BlWW5vYzZHNzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUV3bMA0G
CSqGSIb3DQEBCwUAA4IBAQB/2584nPeNfLl6zUpbLrr/jsA/9nSfpwHpKX735d/w
H3h+sJVEdKJX5cPZC5h/O9TpgNdEZB5uGsFaviyqBjvGtiMT3XY3zwCUiSqvfyki
aCqgB7YO38axfV/BZ468GI/JcVhzFaJNId8nS4yAxgfSzf+tPeH5gWRCM47pCp5/
HALK5QCYUpI2jY0S6GSLVMONxADcDctIgUl3k/OQJopb5KryOgFQ5p3wCdOSB9qi
7pYoynqPNmXKpr29Ki22oah9Cg3utgeo1T7CEkHKKvN5EkLpRzvk32VFUgGRKLTW
30nc52DOg8chVNVlm4hIhsUmGAlaCS9UqO5ivOPr7mQV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-fra.rpki-client.org