Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/Qx0kCr_r3lfP7ULhsqMs7AEU1uo.roa
File: Qx0kCr_r3lfP7ULhsqMs7AEU1uo.roa (raw, json)
Hash identifier: Ljh7YZ5HV28xxJDBmofUYh477HgGuQYH1JZp+uDhakE=
Subject key identifier: 43:1D:24:0A:BF:EB:DE:57:CF:ED:42:E1:B2:A3:2C:EC:01:14:D6:EA
Certificate issuer: /CN=e216f835baab99ea797ce89aa40fa1266bc013fb
Certificate serial: 01856FCBA487D848BBCA21F982E22FFA3CDD
Authority key identifier: E2:16:F8:35:BA:AB:99:EA:79:7C:E8:9A:A4:0F:A1:26:6B:C0:13:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hb4Nbqrmep5fOiapA-hJmvAE_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/Qx0kCr_r3lfP7ULhsqMs7AEU1uo.roa
Signing time: Mon 02 Jan 2023 00:04:55 +0000
ROA not before: Mon 02 Jan 2023 00:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a4:87:d8:48:bb:ca:21:f9:82:e2:2f:fa:3c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e216f835baab99ea797ce89aa40fa1266bc013fb
Validity
Not Before: Jan 2 00:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=431d240abfebde57cfed42e1b2a32cec0114d6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:38:ee:5c:fe:fd:85:ad:4a:b1:2e:09:6e:49:
c7:b8:4f:6c:6a:0e:72:bb:88:56:8d:87:63:b3:a0:
e9:fe:0b:64:4e:5e:97:30:3b:b7:39:be:73:31:f7:
56:e5:de:df:4e:be:9f:b7:c8:4a:66:46:91:55:12:
7d:3f:2e:d9:4d:c8:3d:4e:0f:6c:75:49:71:61:7d:
15:4e:8a:96:6f:1b:6b:29:1a:8a:d5:09:2c:95:78:
6d:ba:4d:1c:fd:ab:c9:c1:e3:5b:a9:6c:16:b5:6e:
1b:32:ca:af:c4:e8:34:2f:0e:b0:d1:4e:a9:99:3b:
be:b2:4f:8e:08:f3:1d:85:2c:eb:22:6a:5c:e9:ac:
12:f5:c7:cb:d6:1a:a2:0e:91:27:da:d6:34:9d:21:
df:16:22:da:02:0c:6b:e4:2a:9b:86:e8:c7:8e:46:
c5:29:91:2e:54:fd:1e:0b:7a:ec:47:0b:ea:ba:7b:
14:dc:26:2e:ec:0d:c2:85:c9:03:e2:e3:f3:fb:54:
00:ee:04:83:4e:11:18:aa:7d:7b:6f:9c:86:de:58:
0c:07:ea:4d:a4:bb:2f:c7:20:d0:7d:df:e6:99:4e:
41:60:96:25:14:25:34:66:ba:2c:a1:31:15:84:0f:
20:43:31:ca:98:55:81:70:a4:aa:6e:85:c1:45:10:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:24:0A:BF:EB:DE:57:CF:ED:42:E1:B2:A3:2C:EC:01:14:D6:EA
X509v3 Authority Key Identifier:
keyid:E2:16:F8:35:BA:AB:99:EA:79:7C:E8:9A:A4:0F:A1:26:6B:C0:13:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hb4Nbqrmep5fOiapA-hJmvAE_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/Qx0kCr_r3lfP7ULhsqMs7AEU1uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/704167-b637-4982-98ab-d2c7ceebb93f/1/4hb4Nbqrmep5fOiapA-hJmvAE_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f9:25:e1:c1:d6:cd:48:7b:64:05:d3:f6:dc:14:24:50:5d:
34:a9:99:ce:03:36:be:d2:1d:92:13:5c:86:ff:95:b1:9c:3b:
e5:d4:c1:39:cc:93:b2:ff:55:21:e8:6c:85:e2:17:30:aa:8c:
b6:4c:9c:37:90:a3:f0:9a:70:48:8e:49:cd:4c:ac:47:b7:6c:
59:c4:c0:26:8c:1d:65:84:20:21:d6:06:c8:f0:06:89:27:66:
68:b5:a7:ab:40:34:cf:42:ea:87:d4:20:be:a8:d0:1a:39:33:
bb:bb:0d:7e:0f:9e:d2:40:8e:c8:10:14:8b:dd:64:07:14:9a:
0a:15:df:7e:76:78:33:d0:63:8f:5b:ad:ef:94:79:16:41:ec:
c5:0a:ce:da:51:7f:51:ad:8f:7b:a0:18:ad:05:e0:cc:9e:5e:
08:e9:2e:33:f3:a3:98:9d:5b:ec:df:7c:0c:2e:03:ac:ea:49:
85:87:15:f1:71:c4:92:25:15:eb:de:d6:13:1c:7d:d1:9f:b9:
5e:96:19:01:97:2a:5b:e8:cf:d4:62:cf:7d:91:3b:4e:ef:60:
3c:9d:da:ce:0c:7b:13:51:9e:87:66:80:bc:f4:16:e8:32:b2:
74:b8:28:f1:ce:44:33:e0:17:97:cc:11:70:62:a3:cf:7b:90:
2e:b0:80:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy6SH2Ei7yiH5guIv+jzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTZmODM1YmFhYjk5ZWE3OTdjZTg5YWE0MGZhMTI2NmJj
MDEzZmIwHhcNMjMwMTAyMDAwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzFkMjQwYWJmZWJkZTU3Y2ZlZDQyZTFiMmEzMmNlYzAxMTRkNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijjuXP79ha1KsS4JbknHuE9sag5y
u4hWjYdjs6Dp/gtkTl6XMDu3Ob5zMfdW5d7fTr6ft8hKZkaRVRJ9Py7ZTcg9Tg9s
dUlxYX0VToqWbxtrKRqK1QkslXhtuk0c/avJweNbqWwWtW4bMsqvxOg0Lw6w0U6p
mTu+sk+OCPMdhSzrImpc6awS9cfL1hqiDpEn2tY0nSHfFiLaAgxr5CqbhujHjkbF
KZEuVP0eC3rsRwvqunsU3CYu7A3ChckD4uPz+1QA7gSDThEYqn17b5yG3lgMB+pN
pLsvxyDQfd/mmU5BYJYlFCU0ZrosoTEVhA8gQzHKmFWBcKSqboXBRRB2lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEMdJAq/695Xz+1C4bKjLOwBFNbqMB8GA1UdIwQY
MBaAFOIW+DW6q5nqeXzomqQPoSZrwBP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhiNE5icXJtZXA1Zk9pYXBBLWhKbXZBRV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83MDQxNjctYjYzNy00OTgyLTk4YWIt
ZDJjN2NlZWJiOTNmLzEvUXgwa0NyX3IzbGZQN1VMaHNxTXM3QUVVMXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83MDQxNjctYjYzNy00OTgyLTk4YWItZDJjN2NlZWJiOTNm
LzEvNGhiNE5icXJtZXA1Zk9pYXBBLWhKbXZBRV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/eqMA0G
CSqGSIb3DQEBCwUAA4IBAQCl+SXhwdbNSHtkBdP23BQkUF00qZnOAza+0h2SE1yG
/5WxnDvl1ME5zJOy/1Uh6GyF4hcwqoy2TJw3kKPwmnBIjknNTKxHt2xZxMAmjB1l
hCAh1gbI8AaJJ2ZotaerQDTPQuqH1CC+qNAaOTO7uw1+D57SQI7IEBSL3WQHFJoK
Fd9+dngz0GOPW63vlHkWQezFCs7aUX9RrY97oBitBeDMnl4I6S4z86OYnVvs33wM
LgOs6kmFhxXxccSSJRXr3tYTHH3Rn7lelhkBlypb6M/UYs99kTtO72A8ndrODHsT
UZ6HZoC89BboMrJ0uCjxzkQz4BeXzBFwYqPPe5AusIA/
Generated at Tue Oct 31 08:50:10 2023 by rpki-client on console-fra.rpki-client.org