Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/sdzmk7SITWHdRJ_myrqn3M1qZbY.roa
File: sdzmk7SITWHdRJ_myrqn3M1qZbY.roa (raw, json)
Hash identifier: 1eS9rANxZdJQBbNI4vBohYmpX5+dvfGExfXBpjyyFwo=
Subject key identifier: B1:DC:E6:93:B4:88:4D:61:DD:44:9F:E6:CA:BA:A7:DC:CD:6A:65:B6
Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial: 018E847293A085089E8C323FAE73B8414ADF
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/sdzmk7SITWHdRJ_myrqn3M1qZbY.roa
Signing time: Thu 28 Mar 2024 09:44:45 +0000
ROA not before: Thu 28 Mar 2024 09:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207470
IP address blocks: 193.104.98.0/24 maxlen: 24
193.104.110.0/24 maxlen: 24
193.104.130.0/24 maxlen: 24
193.104.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:72:93:a0:85:08:9e:8c:32:3f:ae:73:b8:41:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Validity
Not Before: Mar 28 09:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1dce693b4884d61dd449fe6cabaa7dccd6a65b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:89:cc:28:44:fe:2c:1e:63:24:30:9b:d9:
48:28:c2:34:b5:f8:08:bf:b0:90:7d:0f:0a:29:81:
da:ff:36:fb:fc:d3:01:d2:0f:8f:f3:a3:2a:3e:54:
fa:c5:d9:b5:8a:02:ea:fe:54:09:cd:ed:2e:8d:b6:
c3:48:9b:d7:1b:6a:a0:55:9f:f2:e2:95:82:d6:77:
ed:d3:d4:1f:15:ce:da:b4:59:81:9c:0b:77:70:44:
29:4f:13:e2:0e:2b:0f:bc:0f:e3:e7:6e:7d:97:4c:
26:49:e7:d9:59:b6:3d:15:ea:17:63:0f:94:f8:1f:
9a:6a:5d:0e:5e:b4:5e:24:f4:ee:79:92:6c:01:5f:
3c:6b:0d:8c:15:da:af:01:be:99:30:db:a3:0b:a9:
3b:dc:c4:2b:98:a3:e4:f1:3a:9d:11:10:4b:ed:9b:
b8:d1:c9:f7:17:fd:cd:c8:1d:46:03:58:f1:35:cc:
52:93:53:ec:5d:99:59:46:ba:fe:fe:a9:ef:70:52:
16:83:3d:b8:26:5b:58:2b:6e:81:7e:f4:b2:5f:e4:
a9:78:d0:05:58:6b:34:99:c2:9c:a3:ec:80:33:5c:
d4:22:4a:7e:37:73:6f:5b:2b:e5:34:99:71:82:f0:
3c:e8:88:17:3a:78:da:49:26:3c:54:0e:38:d3:0f:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DC:E6:93:B4:88:4D:61:DD:44:9F:E6:CA:BA:A7:DC:CD:6A:65:B6
X509v3 Authority Key Identifier:
keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/sdzmk7SITWHdRJ_myrqn3M1qZbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.98.0/24
193.104.110.0/24
193.104.130.0/24
193.104.141.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d5:08:78:21:18:e2:1e:f9:7b:30:df:4d:86:bb:e1:a6:0c:
00:38:56:8f:46:5d:12:89:82:31:73:29:eb:04:74:24:2f:19:
6f:08:48:c9:5b:48:df:bb:e3:a6:79:73:42:dc:13:9c:12:67:
34:76:a2:6d:f8:1f:78:d3:e7:76:ae:37:13:22:fe:66:41:72:
bc:b0:6f:c8:ec:28:ca:6f:80:0e:71:0a:b4:ea:87:03:c7:e3:
1a:3e:46:c6:c9:df:10:73:5b:99:16:c5:64:21:4e:30:7c:37:
8f:6c:6e:71:7b:c9:35:a6:d0:e0:5a:00:08:4d:5d:04:87:fe:
ab:70:9f:60:88:da:e9:e1:98:b5:22:14:63:03:e3:77:87:71:
f3:06:52:83:b9:da:f4:57:ae:ca:b3:db:52:bd:96:db:fc:58:
50:97:a6:b7:47:9d:a5:2d:39:94:85:bd:56:f6:f3:73:44:ab:
6d:37:f0:e0:ff:42:e5:be:62:0e:29:17:be:18:b0:60:3e:8c:
4f:a6:9b:2b:24:24:ac:00:54:1c:1a:66:25:cc:e8:e7:a6:2a:
b5:f9:10:f8:ed:a4:70:cc:4c:99:19:16:af:cb:99:37:9c:4c:
ff:d2:76:89:0f:ca:e4:ad:c4:2b:d8:0d:71:c2:51:15:88:de:
0d:ff:0c:11
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY6EcpOghQiejDI/rnO4QUrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjcxZTQyNjRjZTYyYzM1ZTFjZWU2NGQxODc2NWQzMzI5
MGYyYTQwHhcNMjQwMzI4MDk0NDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWRjZTY5M2I0ODg0ZDYxZGQ0NDlmZTZjYWJhYTdkY2NkNmE2NWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfmJzChE/iweYyQwm9lIKMI0tfgI
v7CQfQ8KKYHa/zb7/NMB0g+P86MqPlT6xdm1igLq/lQJze0ujbbDSJvXG2qgVZ/y
4pWC1nft09QfFc7atFmBnAt3cEQpTxPiDisPvA/j5259l0wmSefZWbY9FeoXYw+U
+B+aal0OXrReJPTueZJsAV88aw2MFdqvAb6ZMNujC6k73MQrmKPk8TqdERBL7Zu4
0cn3F/3NyB1GA1jxNcxSk1PsXZlZRrr+/qnvcFIWgz24JltYK26BfvSyX+SpeNAF
WGs0mcKco+yAM1zUIkp+N3NvWyvlNJlxgvA86IgXOnjaSSY8VA440w86vQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLHc5pO0iE1h3USf5sq6p9zNamW2MB8GA1UdIwQY
MBaAFAu3HkJkzmLDXhzuZNGHZdMykPKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMt
Y2E1NDU4MzhhZmMwLzEvc2R6bWs3U0lUV0hkUkpfbXlycW4zTTFxWmJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMtY2E1NDU4MzhhZmMw
LzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwWhiAwQA
wWhuAwQAwWiCAwQAwWiNMA0GCSqGSIb3DQEBCwUAA4IBAQCD1Qh4IRjiHvl7MN9N
hrvhpgwAOFaPRl0SiYIxcynrBHQkLxlvCEjJW0jfu+OmeXNC3BOcEmc0dqJt+B94
0+d2rjcTIv5mQXK8sG/I7CjKb4AOcQq06ocDx+MaPkbGyd8Qc1uZFsVkIU4wfDeP
bG5xe8k1ptDgWgAITV0Eh/6rcJ9giNrp4Zi1IhRjA+N3h3HzBlKDudr0V67Ks9tS
vZbb/FhQl6a3R52lLTmUhb1W9vNzRKttN/Dg/0LlvmIOKRe+GLBgPoxPppsrJCSs
AFQcGmYlzOjnpiq1+RD47aRwzEyZGRavy5k3nEz/0naJD8rkrcQr2A1xwlEViN4N
/wwR
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:21 2024 by rpki-client on console.sobornost.net