Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/1WAAaF4riLTFmpFV3x6Gakqrt58.roa
File: 1WAAaF4riLTFmpFV3x6Gakqrt58.roa (raw, json)
Hash identifier: TJevjaSW/D2A6qxsk+LiBEzXVLsyBq6P1H6jS/AlIOw=
Subject key identifier: D5:60:00:68:5E:2B:88:B4:C5:9A:91:55:DF:1E:86:6A:4A:AB:B7:9F
Certificate issuer: /CN=4b3152f0d77e057fb2c9bf80d803329879440776
Certificate serial: 01856DB879CDBE5BA647457BA897D658DFCF
Authority key identifier: 4B:31:52:F0:D7:7E:05:7F:B2:C9:BF:80:D8:03:32:98:79:44:07:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/1WAAaF4riLTFmpFV3x6Gakqrt58.roa
Signing time: Sun 01 Jan 2023 14:24:44 +0000
ROA not before: Sun 01 Jan 2023 14:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 91.247.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:79:cd:be:5b:a6:47:45:7b:a8:97:d6:58:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3152f0d77e057fb2c9bf80d803329879440776
Validity
Not Before: Jan 1 14:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d56000685e2b88b4c59a9155df1e866a4aabb79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:6a:21:1a:7c:7b:e1:a7:b8:b8:50:6e:d1:
8e:63:39:a7:f2:62:ac:cc:b5:2b:1c:51:59:3f:8c:
28:47:8d:64:e5:db:fd:4d:0b:2c:c9:31:ea:15:69:
2c:6d:fd:2c:46:89:e6:35:af:5b:fa:6d:b5:99:07:
c3:b3:5b:93:94:a9:cd:34:8f:ce:73:32:e9:65:16:
35:79:a6:a8:22:ca:6d:15:f2:a3:7f:db:1e:f5:77:
1f:6d:91:56:43:5c:b2:f0:ad:e4:45:24:d1:8c:d6:
6f:0a:65:65:63:92:a1:b1:61:44:aa:f5:fe:f7:eb:
79:03:ed:57:5c:3a:5b:f1:b3:a8:bd:ee:37:21:41:
5d:29:c9:0c:60:cf:31:5e:f1:20:29:b8:17:1a:b1:
7b:c7:df:a4:48:10:29:74:d5:60:27:5e:0d:e4:b5:
1c:ac:35:28:dd:f0:3e:ff:78:39:57:e0:3b:15:5b:
43:5a:80:27:5b:e8:d8:ea:b2:b3:06:4c:07:31:58:
6d:c1:03:47:e5:33:ab:87:cb:02:45:3d:9a:20:08:
11:c0:02:61:23:5b:07:c9:6b:74:08:cc:34:56:4d:
85:52:5e:02:60:67:a6:66:c9:d7:d6:52:72:c6:22:
c4:8f:de:81:63:ef:bd:34:3b:c5:3f:3e:b6:2e:4c:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:00:68:5E:2B:88:B4:C5:9A:91:55:DF:1E:86:6A:4A:AB:B7:9F
X509v3 Authority Key Identifier:
keyid:4B:31:52:F0:D7:7E:05:7F:B2:C9:BF:80:D8:03:32:98:79:44:07:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/1WAAaF4riLTFmpFV3x6Gakqrt58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.171.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fe:e9:cb:ac:98:45:93:94:12:1c:90:1c:f2:9a:ee:f3:c4:
18:f1:f8:64:11:1c:67:fd:48:35:37:07:6d:fa:cf:3e:90:ef:
ec:05:0d:4a:98:44:10:d8:29:ec:cc:ab:30:13:4a:d9:f7:8b:
a0:6c:44:8b:b8:41:27:cf:58:ff:2f:ba:77:8f:39:b4:6e:7c:
f0:a0:67:d1:e1:1f:7c:fb:74:29:df:f7:82:f7:95:c2:c2:5a:
5b:55:86:13:c0:5e:1d:7c:f8:34:85:4b:fa:35:ab:6a:6c:65:
11:bd:35:de:a2:37:c8:43:5c:09:4f:f6:5b:0f:57:7c:06:8a:
06:59:97:e3:c6:50:11:9a:81:85:21:ad:fc:47:ec:79:f2:6a:
d7:57:6a:64:4b:e6:4f:cd:9f:32:02:fb:8c:ae:67:42:ce:89:
e3:43:cc:38:2b:70:be:44:ca:73:ec:eb:da:1b:a1:db:0b:86:
0a:e1:60:e5:ad:d0:ee:6d:84:2e:d6:41:79:44:42:3a:7d:de:
1f:e1:e5:4e:86:c4:e0:e6:e6:2b:bf:81:42:20:d9:02:bc:9c:
17:c2:31:8d:62:47:0b:c7:20:05:67:58:22:74:03:9a:59:a6:
92:92:cb:e0:ba:95:2b:5f:f2:61:21:77:ea:a0:f5:79:3a:f5:
45:f4:4e:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtuHnNvlumR0V7qJfWWN/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMzE1MmYwZDc3ZTA1N2ZiMmM5YmY4MGQ4MDMzMjk4Nzk0
NDA3NzYwHhcNMjMwMTAxMTQyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTYwMDA2ODVlMmI4OGI0YzU5YTkxNTVkZjFlODY2YTRhYWJiNzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmERqIRp8e+GnuLhQbtGOYzmn8mKs
zLUrHFFZP4woR41k5dv9TQssyTHqFWksbf0sRonmNa9b+m21mQfDs1uTlKnNNI/O
czLpZRY1eaaoIsptFfKjf9se9XcfbZFWQ1yy8K3kRSTRjNZvCmVlY5KhsWFEqvX+
9+t5A+1XXDpb8bOove43IUFdKckMYM8xXvEgKbgXGrF7x9+kSBApdNVgJ14N5LUc
rDUo3fA+/3g5V+A7FVtDWoAnW+jY6rKzBkwHMVhtwQNH5TOrh8sCRT2aIAgRwAJh
I1sHyWt0CMw0Vk2FUl4CYGemZsnX1lJyxiLEj96BY++9NDvFPz62Lkx3KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNVgAGheK4i0xZqRVd8ehmpKq7efMB8GA1UdIwQY
MBaAFEsxUvDXfgV/ssm/gNgDMph5RAd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3pGUzhOZC1CWC15eWItQTJBTXltSGxFQjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wNWE3NzItYzkyMC00ZDk5LTlhMDUt
ZTJjYjkxMjRmNTQzLzEvMVdBQWFGNHJpTFRGbXBGVjN4Nkdha3FydDU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wNWE3NzItYzkyMC00ZDk5LTlhMDUtZTJjYjkxMjRmNTQz
LzEvU3pGUzhOZC1CWC15eWItQTJBTXltSGxFQjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/erMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ/unLrJhFk5QSHJAc8pru88QY8fhkERxn/Ug1Nwdt
+s8+kO/sBQ1KmEQQ2CnszKswE0rZ94ugbESLuEEnz1j/L7p3jzm0bnzwoGfR4R98
+3Qp3/eC95XCwlpbVYYTwF4dfPg0hUv6NatqbGURvTXeojfIQ1wJT/ZbD1d8BooG
WZfjxlARmoGFIa38R+x58mrXV2pkS+ZPzZ8yAvuMrmdCzonjQ8w4K3C+RMpz7Ova
G6HbC4YK4WDlrdDubYQu1kF5REI6fd4f4eVOhsTg5uYrv4FCINkCvJwXwjGNYkcL
xyAFZ1gidAOaWaaSksvgupUrX/JhIXfqoPV5OvVF9E7M
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:01 2024 by rpki-client on console-ams.rpki-client.org