Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/588030-8717-4520-aa79-35f70f367fd4/1/F05ngRit9mB4AifrXgtEevkc1v0.roa
File: F05ngRit9mB4AifrXgtEevkc1v0.roa (raw, json)
Hash identifier: QExK27bVbCDSZ+xn5/5imr/aa9UWtzuaGbguUuNWJs8=
Subject key identifier: 17:4E:67:81:18:AD:F6:60:78:02:27:EB:5E:0B:44:7A:F9:1C:D6:FD
Certificate issuer: /CN=fc2813b65cfb03220fcfcb69afd16c7218dce39c
Certificate serial: 01856D4AC14410550B2ECC0FAADE28AAFF4F
Authority key identifier: FC:28:13:B6:5C:FB:03:22:0F:CF:CB:69:AF:D1:6C:72:18:DC:E3:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgTtlz7AyIPz8tpr9Fschjc45w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/588030-8717-4520-aa79-35f70f367fd4/1/F05ngRit9mB4AifrXgtEevkc1v0.roa
Signing time: Sun 01 Jan 2023 12:24:53 +0000
ROA not before: Sun 01 Jan 2023 12:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51511
IP address blocks: 91.219.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c1:44:10:55:0b:2e:cc:0f:aa:de:28:aa:ff:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2813b65cfb03220fcfcb69afd16c7218dce39c
Validity
Not Before: Jan 1 12:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=174e678118adf660780227eb5e0b447af91cd6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:38:c2:2e:ef:57:9c:a9:a9:54:59:ce:4a:57:
26:f0:9a:63:78:92:56:99:b1:64:e5:da:fe:08:ff:
ae:e4:52:8f:a4:74:71:e0:f0:a1:5c:ad:09:1a:4a:
f7:da:eb:4b:d7:f8:42:84:09:55:34:d7:69:73:41:
83:c2:cd:f5:2a:27:f6:2d:00:93:96:12:0a:90:6f:
19:f7:db:d2:03:03:6c:bb:da:7a:3d:25:e7:d9:e5:
cb:a9:ff:65:9e:3b:ca:d7:82:8e:ea:93:5d:41:b2:
a1:9e:0c:d3:e2:e2:1c:cb:18:2b:12:7e:71:5c:3d:
1f:09:6f:5b:1e:e6:1e:5b:6c:89:f1:89:21:f7:25:
2e:f3:31:6d:08:30:24:fd:94:80:96:9a:0b:ce:f3:
e2:09:2f:22:a9:26:5b:1d:43:09:e0:c1:de:79:8e:
04:25:9c:6e:70:bd:ed:50:a6:86:49:0c:36:2a:b1:
3b:44:64:29:03:87:40:01:f1:09:41:f4:a2:e6:87:
66:43:c0:ad:47:2e:d4:6b:cc:ab:1d:38:80:4c:43:
46:50:26:3c:f8:4d:28:92:3f:02:28:11:3a:98:fc:
0c:47:85:14:9c:68:54:5d:94:de:9c:3a:65:90:40:
aa:86:21:8a:f6:86:ce:81:a0:39:3c:69:d3:0e:79:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4E:67:81:18:AD:F6:60:78:02:27:EB:5E:0B:44:7A:F9:1C:D6:FD
X509v3 Authority Key Identifier:
keyid:FC:28:13:B6:5C:FB:03:22:0F:CF:CB:69:AF:D1:6C:72:18:DC:E3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgTtlz7AyIPz8tpr9Fschjc45w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/588030-8717-4520-aa79-35f70f367fd4/1/F05ngRit9mB4AifrXgtEevkc1v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/588030-8717-4520-aa79-35f70f367fd4/1/_CgTtlz7AyIPz8tpr9Fschjc45w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:d5:99:7e:ed:f0:dd:e8:81:2b:9e:17:c6:39:a5:db:71:c4:
6f:90:90:dd:2b:8d:1e:88:2d:f1:bd:86:7e:16:73:4c:42:10:
73:02:2f:16:38:6d:23:05:03:bb:25:a9:f4:36:05:61:3d:fd:
4e:b9:02:7c:82:2e:e1:a3:d2:ff:1a:46:60:30:81:f7:6e:13:
8a:de:84:cb:a4:8c:f0:30:61:53:ab:fd:2d:92:97:fa:8a:84:
5f:3d:5a:a6:49:22:3f:8d:2a:86:af:93:49:c2:8f:bc:ba:10:
28:06:fa:24:e4:ac:d3:09:f7:24:c0:ea:06:70:db:27:d8:03:
b0:93:f3:fd:21:09:10:51:9b:27:b6:a4:6e:44:81:04:9b:6d:
da:25:54:0e:be:91:31:c8:a7:5f:cf:04:06:75:89:39:6e:c6:
08:47:88:ea:4d:12:3b:5f:4d:7e:ed:57:90:86:b9:0a:4a:54:
47:ff:59:bc:1f:bc:a9:a7:05:ed:fd:50:f0:ae:e0:12:d2:17:
cb:a8:b2:0e:10:c1:7f:4b:dd:7e:ce:8c:3f:3a:3f:c6:34:c9:
51:ed:e7:f3:0f:32:ec:5a:a9:3b:2b:17:31:b9:bb:c8:dc:26:
a9:bb:c5:16:4f:ac:05:af:92:0e:af:d1:75:89:19:9a:bc:2c:
41:6b:09:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtSsFEEFULLswPqt4oqv9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjgxM2I2NWNmYjAzMjIwZmNmY2I2OWFmZDE2YzcyMThk
Y2UzOWMwHhcNMjMwMTAxMTIyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzRlNjc4MTE4YWRmNjYwNzgwMjI3ZWI1ZTBiNDQ3YWY5MWNkNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jjCLu9XnKmpVFnOSlcm8JpjeJJW
mbFk5dr+CP+u5FKPpHRx4PChXK0JGkr32utL1/hChAlVNNdpc0GDws31Kif2LQCT
lhIKkG8Z99vSAwNsu9p6PSXn2eXLqf9lnjvK14KO6pNdQbKhngzT4uIcyxgrEn5x
XD0fCW9bHuYeW2yJ8Ykh9yUu8zFtCDAk/ZSAlpoLzvPiCS8iqSZbHUMJ4MHeeY4E
JZxucL3tUKaGSQw2KrE7RGQpA4dAAfEJQfSi5odmQ8CtRy7Ua8yrHTiATENGUCY8
+E0okj8CKBE6mPwMR4UUnGhUXZTenDplkECqhiGK9obOgaA5PGnTDnnFbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBdOZ4EYrfZgeAIn614LRHr5HNb9MB8GA1UdIwQY
MBaAFPwoE7Zc+wMiD8/Laa/RbHIY3OOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NnVHRsejdBeUlQejh0cHI5RnNjaGpjNDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ODgwMzAtODcxNy00NTIwLWFhNzkt
MzVmNzBmMzY3ZmQ0LzEvRjA1bmdSaXQ5bUI0QWlmclhndEVldmtjMXYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81ODgwMzAtODcxNy00NTIwLWFhNzktMzVmNzBmMzY3ZmQ0
LzEvX0NnVHRsejdBeUlQejh0cHI5RnNjaGpjNDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9sgMA0G
CSqGSIb3DQEBCwUAA4IBAQAv1Zl+7fDd6IErnhfGOaXbccRvkJDdK40eiC3xvYZ+
FnNMQhBzAi8WOG0jBQO7Jan0NgVhPf1OuQJ8gi7ho9L/GkZgMIH3bhOK3oTLpIzw
MGFTq/0tkpf6ioRfPVqmSSI/jSqGr5NJwo+8uhAoBvok5KzTCfckwOoGcNsn2AOw
k/P9IQkQUZsntqRuRIEEm23aJVQOvpExyKdfzwQGdYk5bsYIR4jqTRI7X01+7VeQ
hrkKSlRH/1m8H7yppwXt/VDwruAS0hfLqLIOEMF/S91+zow/Oj/GNMlR7efzDzLs
Wqk7KxcxubvI3Capu8UWT6wFr5IOr9F1iRmavCxBawnA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:19 2024 by rpki-client on console-fra.rpki-client.org