Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/12b02e-3f31-4052-8fa1-214ab91946ee/1/2unnHNWPqR4YRlVzIpODDJ3wY1I.roa
File: 2unnHNWPqR4YRlVzIpODDJ3wY1I.roa (raw, json)
Hash identifier: PupQTVgNmCn3AeUGGWDQHyfUzwA9BdMpMwzutu+chg0=
Subject key identifier: DA:E9:E7:1C:D5:8F:A9:1E:18:46:55:73:22:93:83:0C:9D:F0:63:52
Certificate issuer: /CN=f349dceca621ee3a902d8c6df9b8095860e2e8b6
Certificate serial: 018570FBA3465139E2C89424805AF4FB108A
Authority key identifier: F3:49:DC:EC:A6:21:EE:3A:90:2D:8C:6D:F9:B8:09:58:60:E2:E8:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80nc7KYh7jqQLYxt-bgJWGDi6LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/12b02e-3f31-4052-8fa1-214ab91946ee/1/2unnHNWPqR4YRlVzIpODDJ3wY1I.roa
Signing time: Mon 02 Jan 2023 05:36:57 +0000
ROA not before: Mon 02 Jan 2023 05:36:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 91.229.35.0/24 maxlen: 24
91.229.44.0/24 maxlen: 24
91.229.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:a3:46:51:39:e2:c8:94:24:80:5a:f4:fb:10:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f349dceca621ee3a902d8c6df9b8095860e2e8b6
Validity
Not Before: Jan 2 05:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dae9e71cd58fa91e184655732293830c9df06352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:ae:9f:97:d7:25:11:4e:82:b4:e5:b7:9f:
54:f6:d7:b6:c4:36:96:81:60:4c:03:12:e1:fb:ee:
79:aa:ed:62:ba:9f:5d:37:13:69:d6:98:84:1b:87:
b5:e9:67:0d:b6:01:61:42:f6:e7:b0:cd:99:ff:7c:
b7:a7:10:55:0a:f8:f5:db:a9:aa:ff:c7:e6:71:9a:
58:0c:34:cf:84:33:9b:c0:cf:3a:c2:63:b9:18:7f:
43:c8:a8:11:ed:14:7a:f1:70:27:64:f5:70:3a:3d:
92:7a:d0:b5:c0:37:35:df:b0:e2:85:de:98:c1:47:
60:2f:f9:b7:94:93:23:48:d4:12:9f:c9:97:51:e6:
75:83:ba:ec:7e:a6:02:04:8a:9e:1b:03:5c:e9:53:
a7:9f:c3:a1:6d:1e:ab:14:67:19:1a:9e:d6:4b:b8:
ab:12:ac:a7:9e:27:a6:a9:6f:e0:7b:8a:6d:30:a6:
1a:06:13:e0:a7:8f:4e:35:0c:7b:56:cd:3f:db:89:
75:21:0e:5f:7b:64:a1:c8:05:26:02:93:80:da:98:
0f:a1:2c:42:b8:fd:79:f8:d7:87:8d:1f:44:a2:e1:
1d:5b:57:f7:f8:b6:1c:02:40:04:47:27:44:b9:2d:
67:5d:20:82:26:fb:e3:30:75:0a:f9:a8:92:89:8a:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E9:E7:1C:D5:8F:A9:1E:18:46:55:73:22:93:83:0C:9D:F0:63:52
X509v3 Authority Key Identifier:
keyid:F3:49:DC:EC:A6:21:EE:3A:90:2D:8C:6D:F9:B8:09:58:60:E2:E8:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80nc7KYh7jqQLYxt-bgJWGDi6LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/12b02e-3f31-4052-8fa1-214ab91946ee/1/2unnHNWPqR4YRlVzIpODDJ3wY1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/12b02e-3f31-4052-8fa1-214ab91946ee/1/80nc7KYh7jqQLYxt-bgJWGDi6LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.35.0/24
91.229.44.0/23
Signature Algorithm: sha256WithRSAEncryption
72:b3:16:5b:80:e1:f2:e6:89:63:4d:77:8e:07:2c:e3:f1:c5:
5e:f6:ca:46:24:29:69:a2:d1:68:2a:f2:3a:6b:9b:2b:f7:cc:
35:e9:9f:4e:2b:42:38:d4:1c:e5:40:8e:4b:16:91:4e:49:90:
a2:91:91:b8:90:af:1d:21:d1:4c:62:4e:85:ce:86:cc:7d:f2:
36:04:1b:f7:cc:41:e7:b2:0d:8e:98:2d:50:77:6d:af:05:6d:
48:0f:8b:ba:78:57:b5:b9:14:94:1d:ed:da:30:51:b6:b5:b3:
6f:10:d8:2f:75:8c:68:05:49:3c:66:65:75:f4:27:b5:25:7f:
df:07:82:b9:dc:33:51:86:40:1a:6f:e8:83:40:2c:92:b2:c7:
bf:ef:66:99:22:73:09:ce:13:2e:6a:4e:30:06:d2:16:99:b8:
d1:8e:16:e8:bb:29:c3:ad:4c:48:1e:97:6e:ef:8a:aa:ba:2e:
6c:5d:c2:9f:1f:74:e4:32:32:24:ab:b6:48:e2:94:24:b9:2a:
75:93:c3:61:aa:96:0c:c6:ea:8f:f1:e4:5d:50:a3:48:bd:91:
f0:cb:dc:e2:3b:cd:46:d8:c5:ca:26:ba:90:4b:62:3e:74:d2:
cf:19:af:5f:50:5f:50:dc:33:de:17:e9:79:4e:01:ed:e6:cf:
cb:ef:66:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw+6NGUTniyJQkgFr0+xCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDlkY2VjYTYyMWVlM2E5MDJkOGM2ZGY5YjgwOTU4NjBl
MmU4YjYwHhcNMjMwMTAyMDUzNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWU5ZTcxY2Q1OGZhOTFlMTg0NjU1NzMyMjkzODMwYzlkZjA2MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRqun5fXJRFOgrTlt59U9te2xDaW
gWBMAxLh++55qu1iup9dNxNp1piEG4e16WcNtgFhQvbnsM2Z/3y3pxBVCvj126mq
/8fmcZpYDDTPhDObwM86wmO5GH9DyKgR7RR68XAnZPVwOj2SetC1wDc137Dihd6Y
wUdgL/m3lJMjSNQSn8mXUeZ1g7rsfqYCBIqeGwNc6VOnn8OhbR6rFGcZGp7WS7ir
EqynniemqW/ge4ptMKYaBhPgp49ONQx7Vs0/24l1IQ5fe2ShyAUmApOA2pgPoSxC
uP15+NeHjR9EouEdW1f3+LYcAkAERydEuS1nXSCCJvvjMHUK+aiSiYqvcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNrp5xzVj6keGEZVcyKTgwyd8GNSMB8GA1UdIwQY
MBaAFPNJ3OymIe46kC2Mbfm4CVhg4ui2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBuYzdLWWg3anFRTFl4dC1iZ0pXR0RpNkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xMmIwMmUtM2YzMS00MDUyLThmYTEt
MjE0YWI5MTk0NmVlLzEvMnVubkhOV1BxUjRZUmxWeklwT0RESjN3WTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xMmIwMmUtM2YzMS00MDUyLThmYTEtMjE0YWI5MTk0NmVl
LzEvODBuYzdLWWg3anFRTFl4dC1iZ0pXR0RpNkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+UjAwQB
W+UsMA0GCSqGSIb3DQEBCwUAA4IBAQBysxZbgOHy5oljTXeOByzj8cVe9spGJClp
otFoKvI6a5sr98w16Z9OK0I41BzlQI5LFpFOSZCikZG4kK8dIdFMYk6FzobMffI2
BBv3zEHnsg2OmC1Qd22vBW1ID4u6eFe1uRSUHe3aMFG2tbNvENgvdYxoBUk8ZmV1
9Ce1JX/fB4K53DNRhkAab+iDQCySsse/72aZInMJzhMuak4wBtIWmbjRjhbouynD
rUxIHpdu74qqui5sXcKfH3TkMjIkq7ZI4pQkuSp1k8NhqpYMxuqP8eRdUKNIvZHw
y9ziO81G2MXKJrqQS2I+dNLPGa9fUF9Q3DPeF+l5TgHt5s/L72bS
-----END CERTIFICATE-----
Generated at Wed Sep 27 07:27:23 2023 by rpki-client on console-ams.rpki-client.org