Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/DCY6MUDztAV7BG0bz9CW0lkYgx8.roa
File: DCY6MUDztAV7BG0bz9CW0lkYgx8.roa (raw, json)
Hash identifier: wXTqxrCoWekmWxrs9nJ/FMgARDQwuySsF7Xi080pRqs=
Subject key identifier: 0C:26:3A:31:40:F3:B4:05:7B:04:6D:1B:CF:D0:96:D2:59:18:83:1F
Certificate issuer: /CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
Certificate serial: 0185732201BBBB88EBB613D9DBA727551CDE
Authority key identifier: 51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/DCY6MUDztAV7BG0bz9CW0lkYgx8.roa
Signing time: Mon 02 Jan 2023 15:38:06 +0000
ROA not before: Mon 02 Jan 2023 15:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209642
IP address blocks: 91.247.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:22:01:bb:bb:88:eb:b6:13:d9:db:a7:27:55:1c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
Validity
Not Before: Jan 2 15:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c263a3140f3b4057b046d1bcfd096d25918831f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:68:b8:e8:99:be:5e:2e:12:ce:8f:89:9b:
12:15:1d:60:ae:36:11:39:eb:b2:a4:3e:53:4b:5d:
6c:f5:9b:ef:89:73:7d:14:37:7b:64:42:af:c8:7c:
49:68:af:14:a7:b9:f6:3d:d0:70:5f:5a:c1:b1:ed:
7a:ea:25:d8:f7:53:95:43:b0:48:67:37:fb:58:a9:
ee:09:96:f9:85:2e:dd:53:be:0b:8b:d8:94:a4:d0:
dc:db:24:e7:4c:37:80:de:96:3c:f1:c3:db:66:88:
4e:8b:cd:a5:a0:99:54:f9:c0:20:54:7c:ac:01:33:
11:98:9b:5a:4b:5e:68:1a:f8:ab:cc:a0:5e:de:10:
92:2c:4c:6a:b2:01:a1:07:b4:dd:41:8b:f6:09:7d:
2b:0e:80:19:01:a0:81:af:48:e6:40:42:eb:65:27:
8c:00:db:f9:bb:9d:67:b9:c2:57:b8:ae:4e:9d:eb:
1e:a9:17:0b:f5:04:8e:57:d9:aa:ee:e4:8a:22:9d:
04:34:06:bb:ad:88:72:07:49:d4:18:be:49:fa:45:
9c:ef:1d:96:6a:9e:3f:9a:38:f5:84:81:5f:e5:6c:
15:f0:9e:29:ab:3f:03:42:f5:83:10:fe:81:18:e1:
37:f5:68:47:92:31:9e:9a:0b:b7:00:37:11:9d:f5:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:26:3A:31:40:F3:B4:05:7B:04:6D:1B:CF:D0:96:D2:59:18:83:1F
X509v3 Authority Key Identifier:
keyid:51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/DCY6MUDztAV7BG0bz9CW0lkYgx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/UX2W17D_dSA7mSSeN6VmyKW1HUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.177.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9d:eb:98:88:79:77:0b:15:f2:9c:98:9f:1a:55:65:cb:10:
71:2a:20:59:41:56:fc:6e:78:7b:c2:74:42:78:bd:e9:fe:04:
80:cb:8b:0f:9b:f6:99:df:6e:d0:7d:f2:29:2e:c7:fe:62:2a:
07:b8:2d:76:b4:9a:2a:3f:7e:66:40:76:92:f7:9d:7a:4e:7a:
49:73:5a:e2:45:70:e3:97:1c:38:46:87:7e:0b:c8:73:6c:18:
af:6e:a3:6a:ec:b5:96:db:9c:64:3a:a6:e6:9f:2d:6a:9d:2e:
2a:c7:79:47:bf:e1:49:e1:cf:74:54:97:4d:1a:18:2d:be:e0:
79:18:8c:82:3e:74:09:e5:d9:3e:b2:f0:1a:e0:17:ae:d8:36:
a5:ed:31:50:40:ff:e7:88:64:4c:4b:ff:b4:c5:60:25:41:50:
fa:0c:da:cd:0e:70:f8:f1:ab:ee:b7:63:11:b9:0b:5b:37:3d:
d3:92:57:d5:96:88:f7:ab:7c:1d:54:b4:34:5a:b2:64:43:c2:
41:1d:fe:15:92:06:58:d7:27:d6:f5:60:d9:d9:53:86:71:7a:
f8:a5:e8:18:ef:79:e1:76:da:17:1d:1d:38:3b:9e:bd:c7:67:
2d:dc:11:b9:ba:65:68:71:a9:15:d8:0e:2b:fe:e8:f5:dc:4c:
32:70:06:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzIgG7u4jrthPZ26cnVRzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxN2Q5NmQ3YjBmZjc1MjAzYjk5MjQ5ZTM3YTU2NmM4YTVi
NTFkNGEwHhcNMjMwMTAyMTUzODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzI2M2EzMTQwZjNiNDA1N2IwNDZkMWJjZmQwOTZkMjU5MTg4MzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjRouOiZvl4uEs6PiZsSFR1grjYR
OeuypD5TS11s9ZvviXN9FDd7ZEKvyHxJaK8Up7n2PdBwX1rBse166iXY91OVQ7BI
Zzf7WKnuCZb5hS7dU74Li9iUpNDc2yTnTDeA3pY88cPbZohOi82loJlU+cAgVHys
ATMRmJtaS15oGvirzKBe3hCSLExqsgGhB7TdQYv2CX0rDoAZAaCBr0jmQELrZSeM
ANv5u51nucJXuK5OneseqRcL9QSOV9mq7uSKIp0ENAa7rYhyB0nUGL5J+kWc7x2W
ap4/mjj1hIFf5WwV8J4pqz8DQvWDEP6BGOE39WhHkjGemgu3ADcRnfXYgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwmOjFA87QFewRtG8/QltJZGIMfMB8GA1UdIwQY
MBaAFFF9ltew/3UgO5kknjelZsiltR1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVgyVzE3RF9kU0E3bVNTZU42Vm15S1cxSFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84ZWY2NzktNWEwZS00MTJlLWJiMDQt
MzQ2NWRlZDUyNzA3LzEvRENZNk1VRHp0QVY3QkcwYno5Q1cwbGtZZ3g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84ZWY2NzktNWEwZS00MTJlLWJiMDQtMzQ2NWRlZDUyNzA3
LzEvVVgyVzE3RF9kU0E3bVNTZU42Vm15S1cxSFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/exMA0G
CSqGSIb3DQEBCwUAA4IBAQBpneuYiHl3CxXynJifGlVlyxBxKiBZQVb8bnh7wnRC
eL3p/gSAy4sPm/aZ327QffIpLsf+YioHuC12tJoqP35mQHaS9516TnpJc1riRXDj
lxw4Rod+C8hzbBivbqNq7LWW25xkOqbmny1qnS4qx3lHv+FJ4c90VJdNGhgtvuB5
GIyCPnQJ5dk+svAa4Beu2Dal7TFQQP/niGRMS/+0xWAlQVD6DNrNDnD48avut2MR
uQtbNz3TklfVloj3q3wdVLQ0WrJkQ8JBHf4VkgZY1yfW9WDZ2VOGcXr4pegY73nh
dtoXHR04O569x2ct3BG5umVocakV2A4r/uj13EwycAY9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:31 2024 by rpki-client on console-ams.rpki-client.org