Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/UtiZ1jTTVORdc4zewOcSsCXtFw0.roa
File: UtiZ1jTTVORdc4zewOcSsCXtFw0.roa (raw, json)
Hash identifier: RtZ0mr5NYoNR9mnDDhoTO5C2GFDnKj++okZfLN31Aco=
Subject key identifier: 52:D8:99:D6:34:D3:54:E4:5D:73:8C:DE:C0:E7:12:B0:25:ED:17:0D
Certificate issuer: /CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
Certificate serial: B1BDA1
Authority key identifier: 70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/UtiZ1jTTVORdc4zewOcSsCXtFw0.roa
Signing time: Sat 01 Jan 2022 05:55:45 +0000
ROA not before: Sat 01 Jan 2022 05:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.247.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11648417 (0xb1bda1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
Validity
Not Before: Jan 1 05:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52d899d634d354e45d738cdec0e712b025ed170d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:aa:88:51:cb:5c:70:ab:88:ea:00:75:4f:
34:87:e6:a2:d0:44:42:e5:e0:78:8a:01:76:54:3b:
95:84:e7:19:c1:8c:b9:f0:5a:79:ae:17:8d:6e:45:
74:d1:57:b8:77:4a:a9:c7:e5:fb:4d:6e:37:90:4f:
4c:25:9a:db:4a:d1:d2:c4:65:3c:d7:8f:25:8a:43:
55:f9:93:e6:75:bf:93:64:dc:ff:df:3c:da:cd:da:
53:e0:d5:cc:00:ea:c0:2a:c5:65:7c:ea:35:f5:c3:
7a:5f:d2:dc:d4:ce:14:ec:88:63:08:71:1e:02:0a:
6e:50:19:5a:33:23:bc:78:03:59:5c:e2:86:fd:c6:
df:fe:e8:a2:79:64:06:4e:cb:f5:43:53:bd:88:1b:
d9:aa:20:e5:6c:40:4c:2e:e6:f0:78:8f:69:dd:29:
1f:6f:c8:2a:62:13:41:cf:4e:a1:a8:2f:4e:34:2d:
71:60:71:b0:5d:de:8b:1c:c6:70:9f:a2:61:ec:15:
d4:89:a6:a0:36:0a:9b:90:aa:d1:74:ed:48:7b:3b:
21:7b:89:32:77:62:ec:3d:e0:63:d6:9b:d8:f8:63:
8f:58:f9:c1:94:7d:15:bc:db:9a:3a:68:24:7e:a8:
9a:ad:2e:78:c4:41:26:07:3f:4c:5d:7f:ff:f5:31:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D8:99:D6:34:D3:54:E4:5D:73:8C:DE:C0:E7:12:B0:25:ED:17:0D
X509v3 Authority Key Identifier:
keyid:70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/UtiZ1jTTVORdc4zewOcSsCXtFw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/cKm5fx-KHtRzjFAK7P-tJPE2cWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7e:26:6c:74:6d:56:e7:d7:da:cd:e2:59:f1:eb:ed:60:53:
79:b2:92:c6:4e:a6:ad:c1:5e:49:70:be:e7:13:7e:cd:5e:43:
bc:e8:1a:5c:b6:15:8e:ad:19:5b:72:bb:dd:da:69:71:18:a7:
d1:2f:78:21:e8:a6:1b:f2:87:8c:5a:e9:c9:4e:a2:08:85:f0:
83:6b:a7:3c:b6:77:aa:f6:48:60:aa:54:27:07:ed:8d:24:6d:
24:68:f6:37:24:1f:68:e9:3a:3b:2e:ce:6b:5b:fa:f2:13:18:
02:74:fa:99:fe:ad:75:f7:5f:df:0f:0b:10:5c:27:bd:ed:45:
33:d3:80:20:d0:8e:42:fe:23:a6:e0:16:50:d8:d2:7c:c3:ec:
d7:f9:6d:cf:82:b0:35:67:15:cc:2c:5e:47:dd:e6:ff:0d:33:
62:23:be:f1:22:51:cd:60:bd:dd:4e:a7:40:d4:47:72:6c:c9:
1e:7a:5b:ab:b5:85:a4:d7:81:23:30:2f:0d:82:37:c9:b3:71:
12:1e:8b:1a:19:1c:70:db:c3:bc:c3:49:d9:c9:04:d7:8e:e0:
92:9b:ec:5e:93:ed:80:6e:35:48:a2:5b:d6:5d:8a:d9:9c:a0:
49:1d:e6:f2:dc:b7:45:3c:8a:a5:71:b8:c4:05:9e:a9:b9:2d:
4c:2a:10:3a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEALG9oTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MGE5Yjk3ZjFmOGExZWQ0NzM4YzUwMGFlY2ZmYWQyNGYxMzY3MTY2MB4XDTIyMDEw
MTA1NTU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTJkODk5ZDYzNGQz
NTRlNDVkNzM4Y2RlYzBlNzEyYjAyNWVkMTcwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJwuqohRy1xwq4jqAHVPNIfmotBEQuXgeIoBdlQ7lYTnGcGM
ufBaea4XjW5FdNFXuHdKqcfl+01uN5BPTCWa20rR0sRlPNePJYpDVfmT5nW/k2Tc
/9882s3aU+DVzADqwCrFZXzqNfXDel/S3NTOFOyIYwhxHgIKblAZWjMjvHgDWVzi
hv3G3/7oonlkBk7L9UNTvYgb2aog5WxATC7m8HiPad0pH2/IKmITQc9OoagvTjQt
cWBxsF3eixzGcJ+iYewV1ImmoDYKm5Cq0XTtSHs7IXuJMndi7D3gY9ab2Phjj1j5
wZR9FbzbmjpoJH6omq0ueMRBJgc/TF1///UxEOMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRS2JnWNNNU5F1zjN7A5xKwJe0XDTAfBgNVHSMEGDAWgBRwqbl/H4oe1HOM
UArs/60k8TZxZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NLbTVmeC1LSHRSempGQUs3UC10SlBFMmNXWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTQvNWRiZWZmLWYxYWQtNGNlYi1iNDczLTgxOTczZWJiMDc5NC8x
L1V0aVoxalRUVk9SZGM0emV3T2NTc0NYdEZ3MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQv
NWRiZWZmLWYxYWQtNGNlYi1iNDczLTgxOTczZWJiMDc5NC8xL2NLbTVmeC1LSHRS
empGQUs3UC10SlBFMmNXWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFv3pDANBgkqhkiG9w0BAQsFAAOC
AQEAXH4mbHRtVufX2s3iWfHr7WBTebKSxk6mrcFeSXC+5xN+zV5DvOgaXLYVjq0Z
W3K73dppcRin0S94IeimG/KHjFrpyU6iCIXwg2unPLZ3qvZIYKpUJwftjSRtJGj2
NyQfaOk6Oy7Oa1v68hMYAnT6mf6tdfdf3w8LEFwnve1FM9OAINCOQv4jpuAWUNjS
fMPs1/ltz4KwNWcVzCxeR93m/w0zYiO+8SJRzWC93U6nQNRHcmzJHnpbq7WFpNeB
IzAvDYI3ybNxEh6LGhkccNvDvMNJ2ckE147gkpvsXpPtgG41SKJb1l2K2ZygSR3m
8ty3RTyKpXG4xAWeqbktTCoQOg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:18 2024 by rpki-client on console-fra.rpki-client.org