Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/6zgS6BPxdE8nRfKwdcaEI7y9xXo.roa
File: 6zgS6BPxdE8nRfKwdcaEI7y9xXo.roa (raw, json)
Hash identifier: T9VJL7xPPY6pOG2j+S3Pbu+B+utsCwlZyvRX2nCLBvI=
Subject key identifier: EB:38:12:E8:13:F1:74:4F:27:45:F2:B0:75:C6:84:23:BC:BD:C5:7A
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 01934578928462284CC2C84FE78B275D9A5F
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/6zgS6BPxdE8nRfKwdcaEI7y9xXo.roa
Signing time: Tue 19 Nov 2024 17:29:09 +0000
ROA not before: Tue 19 Nov 2024 17:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29186
IP address blocks: 91.220.174.0/24 maxlen: 24
193.104.16.0/24 maxlen: 24
195.85.219.0/24 maxlen: 24
2001:678:abc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:78:92:84:62:28:4c:c2:c8:4f:e7:8b:27:5d:9a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Nov 19 17:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3812e813f1744f2745f2b075c68423bcbdc57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:f6:de:52:9d:1d:65:5f:c4:af:e4:4b:4e:
e8:2b:3e:71:51:4a:d9:68:16:03:8c:a7:84:05:12:
2d:8f:f6:34:68:c1:f8:05:13:d7:81:de:63:7d:58:
25:ba:00:1a:89:82:1e:68:64:34:b9:96:c0:dc:bb:
2a:43:0e:4b:7c:fd:09:3c:f7:ca:38:e3:e9:d1:a6:
88:6a:99:46:f9:03:3f:ad:16:24:2b:0d:88:ef:d9:
a0:70:ba:2b:83:d8:0d:d5:90:fd:7b:84:4c:5a:9b:
65:01:e8:9d:a9:64:3d:29:19:37:3e:3a:6a:e4:a7:
df:35:ce:ee:05:f7:c1:a0:56:98:e1:23:2e:29:3f:
70:e4:a2:3e:65:ae:22:7a:b3:ec:67:bc:50:7d:46:
c1:73:9e:f8:87:31:44:12:33:a6:f8:a4:34:78:d7:
f4:29:7d:07:c5:7e:a7:3a:1a:c7:f1:59:4b:11:dd:
62:05:8c:bb:85:97:2f:59:41:3f:50:35:c0:ef:9e:
61:b2:af:c6:af:cd:e8:d5:1b:87:63:a1:25:b4:52:
19:d5:4a:d0:14:8a:53:72:09:7a:de:63:3c:6c:13:
c0:72:2b:8b:17:9a:1b:50:59:38:57:21:a1:a8:37:
22:ad:a6:f5:91:a1:c5:69:2f:8e:66:61:fc:74:97:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:38:12:E8:13:F1:74:4F:27:45:F2:B0:75:C6:84:23:BC:BD:C5:7A
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/6zgS6BPxdE8nRfKwdcaEI7y9xXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.174.0/24
193.104.16.0/24
195.85.219.0/24
IPv6:
2001:678:abc::/48
Signature Algorithm: sha256WithRSAEncryption
61:f9:77:61:27:48:55:3c:c3:bf:8f:3b:e6:93:98:3f:5e:0c:
60:09:0e:c4:16:28:1f:c2:64:e6:bb:6b:1f:75:24:3e:82:38:
f1:4c:e9:d4:a4:66:39:03:08:89:c0:f6:94:a6:ba:e0:5a:7c:
01:43:16:27:35:77:c8:a9:7e:4c:89:c1:9f:5c:c2:1f:7f:e3:
02:b8:6f:0c:10:c3:b5:c6:f7:9c:ab:08:3e:48:52:3f:2c:5e:
64:a0:a2:7a:3a:cc:10:a5:a4:69:e7:86:ff:ad:ac:59:be:a3:
14:fe:5d:b4:3f:76:f1:36:a0:91:6b:7b:22:e8:52:5e:39:39:
77:ed:53:40:67:aa:ca:0f:a3:8d:f7:ef:0a:50:01:32:2d:58:
61:91:72:fe:8c:11:ed:84:8c:f3:e1:5f:6f:19:d4:84:f1:9c:
92:a9:bd:40:46:e2:8c:7e:34:fd:89:df:9d:da:2f:49:22:54:
c8:47:e2:91:1c:45:0d:e9:14:fb:f8:6c:94:e1:98:e9:7d:f4:
93:9a:76:33:c9:be:4f:6f:9c:f7:52:35:db:ab:da:ee:83:45:
bb:95:02:32:2c:1a:b1:a6:24:d4:04:0a:02:52:7f:4e:a1:01:
63:ec:92:32:35:4d:af:15:ab:9a:f8:e7:9d:38:c1:f2:6f:a7:
e6:66:ac:63
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZNFeJKEYihMwshP54snXZpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzVhNzZmMjhiNzFlYThkYmY5OTlhYmFhYjdhNjU5ODM5
YWMxODIwHhcNMjQxMTE5MTcyOTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjM4MTJlODEzZjE3NDRmMjc0NWYyYjA3NWM2ODQyM2JjYmRjNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7P23lKdHWVfxK/kS07oKz5xUUrZ
aBYDjKeEBRItj/Y0aMH4BRPXgd5jfVglugAaiYIeaGQ0uZbA3LsqQw5LfP0JPPfK
OOPp0aaIaplG+QM/rRYkKw2I79mgcLorg9gN1ZD9e4RMWptlAeidqWQ9KRk3Pjpq
5KffNc7uBffBoFaY4SMuKT9w5KI+Za4ierPsZ7xQfUbBc574hzFEEjOm+KQ0eNf0
KX0HxX6nOhrH8VlLEd1iBYy7hZcvWUE/UDXA755hsq/Gr83o1RuHY6EltFIZ1UrQ
FIpTcgl63mM8bBPAciuLF5obUFk4VyGhqDcirab1kaHFaS+OZmH8dJcG5wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFOs4EugT8XRPJ0XysHXGhCO8vcV6MB8GA1UdIwQY
MBaAFFfFp28otx6o2/mZq6q3plmDmsGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhXbmJ5aTNIcWpiLVptcnFyZW1XWU9hd1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMzJiOWQtOGM3Yy00NDQxLWJkYjEt
NmE2ODI1MWYxMzg3LzEvNnpnUzZCUHhkRThuUmZLd2RjYUVJN3k5eFhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jMzJiOWQtOGM3Yy00NDQxLWJkYjEtNmE2ODI1MWYxMzg3
LzEvVjhXbmJ5aTNIcWpiLVptcnFyZW1XWU9hd1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAW9yuAwQA
wWgQAwQAw1XbMA8EAgACMAkDBwAgAQZ4CrwwDQYJKoZIhvcNAQELBQADggEBAGH5
d2EnSFU8w7+PO+aTmD9eDGAJDsQWKB/CZOa7ax91JD6COPFM6dSkZjkDCInA9pSm
uuBafAFDFic1d8ipfkyJwZ9cwh9/4wK4bwwQw7XG95yrCD5IUj8sXmSgono6zBCl
pGnnhv+trFm+oxT+XbQ/dvE2oJFreyLoUl45OXftU0BnqsoPo4337wpQATItWGGR
cv6MEe2EjPPhX28Z1ITxnJKpvUBG4ox+NP2J353aL0kiVMhH4pEcRQ3pFPv4bJTh
mOl99JOadjPJvk9vnPdSNdur2u6DRbuVAjIsGrGmJNQECgJSf06hAWPskjI1Ta8V
q5r45504wfJvp+ZmrGM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:53 2024 by rpki-client on console.sobornost.net