Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/57be97-795a-483f-b52f-026731d9e3fe/1/QMIMC6rQ3PrWEVQz2QolTSrRN3k.roa
File: QMIMC6rQ3PrWEVQz2QolTSrRN3k.roa (raw, json)
Hash identifier: Uy2ivZUDwtW+L1a8BkE5AfwKNzflUT78JaGuSZQTGkM=
Subject key identifier: 40:C2:0C:0B:AA:D0:DC:FA:D6:11:54:33:D9:0A:25:4D:2A:D1:37:79
Certificate issuer: /CN=129203bb69429b59ec6b1b934275f184bdd63ffb
Certificate serial: 014AD11D
Authority key identifier: 12:92:03:BB:69:42:9B:59:EC:6B:1B:93:42:75:F1:84:BD:D6:3F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpIDu2lCm1nsaxuTQnXxhL3WP_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/57be97-795a-483f-b52f-026731d9e3fe/1/QMIMC6rQ3PrWEVQz2QolTSrRN3k.roa
Signing time: Sat 01 Jan 2022 02:01:03 +0000
ROA not before: Sat 01 Jan 2022 02:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205781
IP address blocks: 91.235.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21680413 (0x14ad11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129203bb69429b59ec6b1b934275f184bdd63ffb
Validity
Not Before: Jan 1 02:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40c20c0baad0dcfad6115433d90a254d2ad13779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:a7:b9:97:af:13:3c:7d:3a:ad:1d:92:2a:
07:56:05:8a:74:ff:ea:40:20:e6:6b:9e:82:ce:15:
9d:53:c6:b8:08:84:9c:b3:f8:69:99:b4:09:53:35:
7c:d6:52:2c:e8:62:91:bd:46:a8:0c:81:1f:bb:42:
79:78:90:c9:6f:e0:cc:aa:91:a5:bc:72:99:e4:7f:
47:e0:00:cc:dc:8d:f1:3d:86:02:13:0b:38:cc:e7:
78:08:3a:b0:17:06:60:65:be:9c:12:ea:b9:7c:f9:
4f:e1:de:85:9e:91:c8:2a:3a:dc:c1:fb:c1:2e:52:
31:94:05:16:68:fd:fc:74:78:92:4b:77:46:05:a3:
fe:07:66:3e:d6:77:63:c7:29:05:62:0f:c4:42:35:
15:2f:54:a6:9b:cb:b1:92:aa:24:8e:aa:30:18:c6:
c1:ac:e9:df:ce:9c:c6:ca:c5:70:c3:3a:4d:fe:34:
93:c2:a8:3a:f1:55:ed:2d:91:f2:d1:d9:a9:63:2b:
51:2a:da:cc:b5:3f:d2:da:77:05:5d:dd:39:7d:21:
25:63:dd:1c:3a:e1:4c:81:91:0b:de:7c:79:66:bd:
fa:75:2b:1f:6a:29:14:9e:4f:a1:0d:57:26:e0:25:
2d:6a:e4:e1:fa:18:3c:6c:56:ad:e5:f2:3b:64:61:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C2:0C:0B:AA:D0:DC:FA:D6:11:54:33:D9:0A:25:4D:2A:D1:37:79
X509v3 Authority Key Identifier:
keyid:12:92:03:BB:69:42:9B:59:EC:6B:1B:93:42:75:F1:84:BD:D6:3F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpIDu2lCm1nsaxuTQnXxhL3WP_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/57be97-795a-483f-b52f-026731d9e3fe/1/QMIMC6rQ3PrWEVQz2QolTSrRN3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/57be97-795a-483f-b52f-026731d9e3fe/1/EpIDu2lCm1nsaxuTQnXxhL3WP_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:64:11:03:28:73:88:67:74:23:c4:37:67:5a:0c:9c:a9:d4:
19:61:aa:d1:f8:72:c3:f8:cf:21:8b:11:89:98:09:ac:6a:8e:
62:25:06:31:fd:c4:b5:b4:d6:8c:41:92:55:8d:ef:82:eb:24:
3d:8a:8c:c5:4d:82:99:99:43:08:00:72:f9:10:0e:7c:a6:af:
56:08:ca:fe:f9:a3:d0:32:e3:8c:70:54:d1:2e:d6:c1:ba:2e:
37:8a:78:7b:de:42:19:4b:e7:5c:76:de:56:5c:fd:35:51:dc:
37:95:66:91:0c:f7:a6:1f:6c:cf:43:61:92:12:8a:b7:95:0d:
54:1e:00:6c:95:b6:d0:1f:03:04:5d:bc:e6:98:93:62:18:99:
e5:36:ad:57:2c:a1:78:1c:d0:96:4e:4c:2e:06:6c:6f:12:f9:
83:bc:41:39:63:e9:2e:5d:87:5a:1d:14:fb:ac:a4:95:9d:b9:
a9:99:3e:d2:0c:01:43:e9:21:a4:ad:9c:9b:76:e3:da:00:30:
c8:32:bd:4f:4c:66:79:96:4f:7f:72:ab:30:fd:63:89:2b:d3:
af:33:e6:d9:bc:c1:27:ea:8e:33:cf:f0:77:e5:78:f4:8a:5e:
47:90:bc:f8:6e:eb:6b:60:5a:35:3c:23:da:50:23:f5:3b:c1:
1a:28:2d:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAUrRHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MjkyMDNiYjY5NDI5YjU5ZWM2YjFiOTM0Mjc1ZjE4NGJkZDYzZmZiMB4XDTIyMDEw
MTAyMDEwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDBjMjBjMGJhYWQw
ZGNmYWQ2MTE1NDMzZDkwYTI1NGQyYWQxMzc3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKThp7mXrxM8fTqtHZIqB1YFinT/6kAg5muegs4VnVPGuAiE
nLP4aZm0CVM1fNZSLOhikb1GqAyBH7tCeXiQyW/gzKqRpbxymeR/R+AAzNyN8T2G
AhMLOMzneAg6sBcGYGW+nBLquXz5T+HehZ6RyCo63MH7wS5SMZQFFmj9/HR4kkt3
RgWj/gdmPtZ3Y8cpBWIPxEI1FS9UppvLsZKqJI6qMBjGwazp386cxsrFcMM6Tf40
k8KoOvFV7S2R8tHZqWMrUSrazLU/0tp3BV3dOX0hJWPdHDrhTIGRC958eWa9+nUr
H2opFJ5PoQ1XJuAlLWrk4foYPGxWreXyO2RhOfcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRAwgwLqtDc+tYRVDPZCiVNKtE3eTAfBgNVHSMEGDAWgBQSkgO7aUKbWexr
G5NCdfGEvdY/+zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VwSUR1MmxDbTFuc2F4dVRRblh4aEwzV1Bfcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvNTdiZTk3LTc5NWEtNDgzZi1iNTJmLTAyNjczMWQ5ZTNmZS8x
L1FNSU1DNnJRM1ByV0VWUXoyUW9sVFNyUk4zay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
NTdiZTk3LTc5NWEtNDgzZi1iNTJmLTAyNjczMWQ5ZTNmZS8xL0VwSUR1MmxDbTFu
c2F4dVRRblh4aEwzV1Bfcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvr6zANBgkqhkiG9w0BAQsFAAOC
AQEAt2QRAyhziGd0I8Q3Z1oMnKnUGWGq0fhyw/jPIYsRiZgJrGqOYiUGMf3EtbTW
jEGSVY3vguskPYqMxU2CmZlDCABy+RAOfKavVgjK/vmj0DLjjHBU0S7WwbouN4p4
e95CGUvnXHbeVlz9NVHcN5VmkQz3ph9sz0NhkhKKt5UNVB4AbJW20B8DBF285piT
YhiZ5TatVyyheBzQlk5MLgZsbxL5g7xBOWPpLl2HWh0U+6yklZ25qZk+0gwBQ+kh
pK2cm3bj2gAwyDK9T0xmeZZPf3KrMP1jiSvTrzPm2bzBJ+qOM8/wd+V49IpeR5C8
+G7ra2BaNTwj2lAj9TvBGigtrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:59 2024 by rpki-client on console-ams.rpki-client.org