Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/ZsllMnqlP90v_egK89sCCLhl7MI.roa
File: ZsllMnqlP90v_egK89sCCLhl7MI.roa (raw, json)
Hash identifier: t0QJ7DwA/wQmZqZKq5CWnwMa0EY6Q3CgoM75haRZCmo=
Subject key identifier: 66:C9:65:32:7A:A5:3F:DD:2F:FD:E8:0A:F3:DB:02:08:B8:65:EC:C2
Certificate issuer: /CN=d0cedce08d2b4fd278b0a949b6dcd050da307cdb
Certificate serial: 01857142F0BA6D41FFA5A75228139E87BB18
Authority key identifier: D0:CE:DC:E0:8D:2B:4F:D2:78:B0:A9:49:B6:DC:D0:50:DA:30:7C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M7c4I0rT9J4sKlJttzQUNowfNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/ZsllMnqlP90v_egK89sCCLhl7MI.roa
Signing time: Mon 02 Jan 2023 06:54:50 +0000
ROA not before: Mon 02 Jan 2023 06:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f0:ba:6d:41:ff:a5:a7:52:28:13:9e:87:bb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cedce08d2b4fd278b0a949b6dcd050da307cdb
Validity
Not Before: Jan 2 06:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66c965327aa53fdd2ffde80af3db0208b865ecc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:95:ce:75:c8:ff:eb:f5:d3:4c:f1:26:e9:da:
4c:ca:1e:e3:cb:dd:61:a0:61:ee:18:04:ed:3c:53:
28:43:f1:95:ae:b7:73:59:ca:0f:49:22:9c:f3:cf:
65:6b:8b:6d:13:4a:01:d5:47:82:21:b6:c4:e2:72:
24:d2:ef:a7:df:51:6c:2d:89:44:74:d2:fd:ac:91:
74:d5:d9:a9:31:05:94:9a:a5:23:fa:92:54:e2:34:
45:a0:91:15:68:52:5c:fa:df:c3:b8:c8:b4:b8:b7:
69:15:a4:4d:7f:04:0f:bc:37:11:d3:04:8b:e0:5a:
ef:68:09:21:0b:8d:77:48:69:4e:b0:9f:99:49:d9:
d5:86:16:a2:8a:47:bb:dc:ad:d0:68:4b:ae:1d:96:
36:98:49:76:2f:ae:81:c1:26:20:10:12:3e:ef:1a:
6b:2a:fb:45:5c:a6:17:a5:93:d2:8e:fe:9a:be:4a:
c8:7b:1b:56:7c:a1:ec:ef:73:d7:62:a9:3d:7b:49:
91:e7:ec:12:ff:10:b8:a0:59:7e:b9:b0:cb:d9:6b:
e9:16:c4:01:58:f6:c5:d0:70:93:1b:13:2d:ab:19:
ef:1e:d9:6d:c4:37:7a:52:39:6f:31:f8:bc:93:c3:
68:e7:3a:c5:c9:18:87:20:60:dd:f0:4e:38:65:64:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:65:32:7A:A5:3F:DD:2F:FD:E8:0A:F3:DB:02:08:B8:65:EC:C2
X509v3 Authority Key Identifier:
keyid:D0:CE:DC:E0:8D:2B:4F:D2:78:B0:A9:49:B6:DC:D0:50:DA:30:7C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M7c4I0rT9J4sKlJttzQUNowfNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/ZsllMnqlP90v_egK89sCCLhl7MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/0M7c4I0rT9J4sKlJttzQUNowfNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:03:66:e8:72:28:ca:18:5d:a2:83:00:c8:4f:3b:42:51:55:
48:ed:80:f3:39:f4:df:2d:da:ba:5c:55:be:ee:ab:e7:97:f5:
eb:45:21:d6:cf:24:08:af:ed:80:33:ed:89:e0:c5:6d:7c:23:
65:f2:d2:c3:51:01:b3:5e:75:d3:2c:f2:18:f7:88:4c:59:59:
37:52:80:ae:8c:08:f5:1d:56:91:31:8c:9b:6d:57:fd:70:f7:
a2:54:56:2f:c2:87:3b:34:b3:b7:f1:fb:3c:94:55:18:a7:94:
75:c9:ef:82:04:16:37:1d:12:55:77:b3:08:6b:58:de:11:89:
0d:ea:32:6e:46:7f:06:a1:0f:ff:5c:68:16:af:1d:9d:b0:e8:
e9:f4:59:9e:62:80:34:94:1c:dd:6f:d6:ca:b2:c4:9a:ac:31:
ee:fe:52:e5:7e:e4:19:4f:91:0c:71:1a:74:d7:6c:7a:2e:53:
5b:0f:d7:c4:73:22:41:46:75:4f:c7:29:17:2f:4f:3e:06:b3:
67:62:34:3f:b4:57:5b:26:50:1d:ee:76:72:2c:80:10:81:e8:
76:f0:0d:9e:f9:ae:c9:5a:d2:76:f9:f3:25:43:26:da:42:7b:
03:e8:31:b2:15:70:00:1f:e3:fc:68:ca:d5:af:dd:07:65:4a:
73:c8:98:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxQvC6bUH/padSKBOeh7sYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2VkY2UwOGQyYjRmZDI3OGIwYTk0OWI2ZGNkMDUwZGEz
MDdjZGIwHhcNMjMwMTAyMDY1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmM5NjUzMjdhYTUzZmRkMmZmZGU4MGFmM2RiMDIwOGI4NjVlY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJXOdcj/6/XTTPEm6dpMyh7jy91h
oGHuGATtPFMoQ/GVrrdzWcoPSSKc889la4ttE0oB1UeCIbbE4nIk0u+n31FsLYlE
dNL9rJF01dmpMQWUmqUj+pJU4jRFoJEVaFJc+t/DuMi0uLdpFaRNfwQPvDcR0wSL
4FrvaAkhC413SGlOsJ+ZSdnVhhaiike73K3QaEuuHZY2mEl2L66BwSYgEBI+7xpr
KvtFXKYXpZPSjv6avkrIextWfKHs73PXYqk9e0mR5+wS/xC4oFl+ubDL2WvpFsQB
WPbF0HCTGxMtqxnvHtltxDd6UjlvMfi8k8No5zrFyRiHIGDd8E44ZWTKAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGbJZTJ6pT/dL/3oCvPbAgi4ZezCMB8GA1UdIwQY
MBaAFNDO3OCNK0/SeLCpSbbc0FDaMHzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME03YzRJMHJUOUo0c0tsSnR0elFVTm93Zk5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80NGZkOWUtZmRiNS00OTdhLThmOTQt
MTI4MTg5YWEwMjdkLzEvWnNsbE1ucWxQOTB2X2VnSzg5c0NDTGhsN01JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi80NGZkOWUtZmRiNS00OTdhLThmOTQtMTI4MTg5YWEwMjdk
LzEvME03YzRJMHJUOUo0c0tsSnR0elFVTm93Zk5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/eiMA0G
CSqGSIb3DQEBCwUAA4IBAQCuA2bocijKGF2igwDITztCUVVI7YDzOfTfLdq6XFW+
7qvnl/XrRSHWzyQIr+2AM+2J4MVtfCNl8tLDUQGzXnXTLPIY94hMWVk3UoCujAj1
HVaRMYybbVf9cPeiVFYvwoc7NLO38fs8lFUYp5R1ye+CBBY3HRJVd7MIa1jeEYkN
6jJuRn8GoQ//XGgWrx2dsOjp9FmeYoA0lBzdb9bKssSarDHu/lLlfuQZT5EMcRp0
12x6LlNbD9fEcyJBRnVPxykXL08+BrNnYjQ/tFdbJlAd7nZyLIAQgeh28A2e+a7J
WtJ2+fMlQybaQnsD6DGyFXAAH+P8aMrVr90HZUpzyJiS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:42 2024 by rpki-client on console-ams.rpki-client.org