Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/k1tWj-9FbR29u2q7xE8wBXtz1P8.roa
File: k1tWj-9FbR29u2q7xE8wBXtz1P8.roa (raw, json)
Hash identifier: cfa3Wrf1Cokr48BnqweRGxgh4MMbxM2sqtEi8R04t1Q=
Subject key identifier: 93:5B:56:8F:EF:45:6D:1D:BD:BB:6A:BB:C4:4F:30:05:7B:73:D4:FF
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 043AD8A8
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/k1tWj-9FbR29u2q7xE8wBXtz1P8.roa
Signing time: Sat 28 May 2022 17:59:13 +0000
ROA not before: Sat 28 May 2022 17:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 91.232.182.0/24 maxlen: 24
91.232.184.0/24 maxlen: 24
91.232.185.0/24 maxlen: 24
91.233.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70965416 (0x43ad8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: May 28 17:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=935b568fef456d1dbdbb6abbc44f30057b73d4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:9a:99:f5:40:45:fa:7b:25:fa:72:a4:0a:
95:d0:e8:6c:cb:da:3a:ea:e5:ad:32:4f:64:cc:15:
96:2d:d8:d8:77:42:a3:86:a5:32:ec:c0:eb:22:70:
95:4c:ed:48:02:36:db:8e:93:44:ff:22:72:a4:51:
a4:b2:d8:95:d1:2d:d0:7a:39:20:83:b2:80:d1:e2:
38:9e:9b:15:d9:78:a6:8f:a3:5b:40:45:80:09:09:
c4:d0:86:eb:97:fa:44:dc:18:b6:c2:86:c3:9a:de:
66:04:47:16:54:80:83:16:a6:5e:80:34:06:eb:cd:
e3:61:11:a6:4a:90:77:59:4c:07:34:99:5a:20:5e:
a0:4a:f0:b3:8e:56:b6:ad:68:a5:3c:a6:27:64:7d:
01:24:68:1f:91:65:48:b7:35:91:ef:b7:2c:d6:14:
0f:83:5d:04:4c:15:f9:61:bb:f8:63:1e:db:45:cc:
ad:fc:19:a2:09:fc:6b:d1:9c:80:12:47:a6:cc:86:
14:1b:f6:d3:e3:8a:18:2c:df:e6:1c:82:45:41:0c:
e1:73:a6:49:54:6c:1c:68:0a:19:17:98:64:58:64:
08:cd:c3:f2:07:85:90:c7:a2:32:f9:e9:30:05:e6:
8c:50:f4:a2:ec:1d:db:0e:48:93:95:81:3d:45:8f:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:56:8F:EF:45:6D:1D:BD:BB:6A:BB:C4:4F:30:05:7B:73:D4:FF
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/k1tWj-9FbR29u2q7xE8wBXtz1P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.182.0/24
91.232.184.0/23
91.233.192.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b4:78:64:7b:b4:9e:e3:26:31:8d:59:5e:35:e3:16:08:64:
67:bc:7f:2f:34:e6:09:61:2c:93:4a:0b:8a:7b:db:ef:51:4b:
56:cb:50:74:12:ad:3e:28:39:1f:f9:c5:3d:99:ea:26:38:36:
9b:5a:5c:7e:ab:33:6f:15:43:22:b7:44:71:ea:98:05:ac:d8:
71:e2:48:7b:87:6b:10:f9:8c:a3:f0:75:b3:00:ae:9e:6f:f9:
b0:8b:fe:a7:ef:86:e4:b2:6e:97:1d:b5:39:4f:a1:a0:af:db:
e1:f4:be:17:e8:a6:b7:10:88:74:6a:57:6f:31:51:66:30:dc:
71:fc:27:d3:8f:e9:4d:e2:99:f6:ee:cb:d1:d5:2f:f7:59:ce:
37:41:dd:bf:40:0e:26:84:cd:e6:c9:a2:9b:39:03:d9:f4:ed:
89:f8:38:fd:dc:18:c7:81:6f:18:23:d7:58:94:5f:cd:8f:64:
9a:ba:63:0a:20:83:bc:16:7f:5b:41:b5:bf:56:bb:76:85:bd:
13:2f:37:e0:c0:77:af:1e:25:7f:95:48:b2:02:f2:d0:b6:b9:
03:af:dd:2b:f2:5e:b6:b1:dc:04:a4:3b:37:d6:0a:a7:5c:45:
ee:d7:53:33:d2:40:78:42:44:8a:5a:26:d7:9b:19:d3:52:eb:
fd:23:03:68
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBDrYqDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OTQ0NjgwYzIwZDFhZjAxZjE2OWIxOGFjOWM3N2Q5ODc3MTMzY2RlMB4XDTIyMDUy
ODE3NTkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTM1YjU2OGZlZjQ1
NmQxZGJkYmI2YWJiYzQ0ZjMwMDU3YjczZDRmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIzNmpn1QEX6eyX6cqQKldDobMvaOurlrTJPZMwVli3Y2HdC
o4alMuzA6yJwlUztSAI2246TRP8icqRRpLLYldEt0Ho5IIOygNHiOJ6bFdl4po+j
W0BFgAkJxNCG65f6RNwYtsKGw5reZgRHFlSAgxamXoA0BuvN42ERpkqQd1lMBzSZ
WiBeoErws45Wtq1opTymJ2R9ASRoH5FlSLc1ke+3LNYUD4NdBEwV+WG7+GMe20XM
rfwZogn8a9GcgBJHpsyGFBv20+OKGCzf5hyCRUEM4XOmSVRsHGgKGReYZFhkCM3D
8geFkMeiMvnpMAXmjFD0ouwd2w5Ik5WBPUWP1bECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSTW1aP70VtHb27arvETzAFe3PU/zAfBgNVHSMEGDAWgBRJRGgMINGvAfFp
sYrJx32YdxM83jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NVUm9EQ0RScndIeGFiR0t5Y2Q5bUhjVFBONC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzIvN2RlZTA5LWNkMmUtNDAzMC1hYjkyLWViZGNjMDJmYmFlOS8x
L2sxdFdqLTlGYlIyOXUycTd4RTh3Qlh0ejFQOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIv
N2RlZTA5LWNkMmUtNDAzMC1hYjkyLWViZGNjMDJmYmFlOS8xL1NVUm9EQ0RScndI
eGFiR0t5Y2Q5bUhjVFBONC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFvotgMEAVvouAMEAFvpwDANBgkq
hkiG9w0BAQsFAAOCAQEAiLR4ZHu0nuMmMY1ZXjXjFghkZ7x/LzTmCWEsk0oLinvb
71FLVstQdBKtPig5H/nFPZnqJjg2m1pcfqszbxVDIrdEceqYBazYceJIe4drEPmM
o/B1swCunm/5sIv+p++G5LJulx21OU+hoK/b4fS+F+imtxCIdGpXbzFRZjDccfwn
04/pTeKZ9u7L0dUv91nON0Hdv0AOJoTN5smimzkD2fTtifg4/dwYx4FvGCPXWJRf
zY9kmrpjCiCDvBZ/W0G1v1a7doW9Ey834MB3rx4lf5VIsgLy0La5A6/dK/JetrHc
BKQ7N9YKp1xF7tdTM9JAeEJEilom15sZ01Lr/SMDaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org