Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/iee7kNLVOGggm5lGtoeIK5yPtt4.roa
File: iee7kNLVOGggm5lGtoeIK5yPtt4.roa (raw, json)
Hash identifier: gp5mMNaCV/ygGgpw7k2NFEBXWiZeMWBnfkrIxbI4oKU=
Subject key identifier: 89:E7:BB:90:D2:D5:38:68:20:9B:99:46:B6:87:88:2B:9C:8F:B6:DE
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 0193DA63F3F2986FA463C1B4E79C49A09A43
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/iee7kNLVOGggm5lGtoeIK5yPtt4.roa
Signing time: Wed 18 Dec 2024 15:30:03 +0000
ROA not before: Wed 18 Dec 2024 15:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47430
IP address blocks: 45.139.9.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
2a10:ab00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:63:f3:f2:98:6f:a4:63:c1:b4:e7:9c:49:a0:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Dec 18 15:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89e7bb90d2d53868209b9946b687882b9c8fb6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:0a:80:a5:3f:ad:cc:b7:93:91:ab:f4:28:
18:1a:3f:73:ec:dd:26:47:94:88:b8:13:15:73:9c:
75:5f:63:c6:fe:f8:64:d8:db:2f:13:34:ab:e6:b9:
99:cb:7f:4c:91:f1:f2:f6:d7:1b:0d:b3:01:20:26:
79:b4:68:b6:1f:dd:4e:38:7c:1a:0f:f0:64:f5:f7:
aa:d4:9d:02:82:36:47:5d:d7:3f:0f:59:3c:22:25:
29:a9:b2:92:cb:0a:48:c6:8e:4e:8c:23:a2:07:70:
90:ba:0d:db:b4:8a:45:77:be:bd:43:4c:43:0f:01:
ca:0b:28:c9:3f:39:52:b9:33:f3:94:8b:94:d3:ed:
21:46:73:b9:53:ee:1e:ee:86:c3:ac:79:90:61:09:
8d:ca:14:14:82:99:c9:97:5f:18:fb:04:45:b6:35:
9a:10:8f:c5:e1:d5:50:3f:d2:03:a2:42:d9:81:f4:
53:b9:ca:95:c6:ca:4a:6a:67:1a:71:35:e9:5c:5d:
87:75:b4:3b:43:af:16:4c:50:aa:4d:0f:14:15:0d:
63:c9:9a:35:1a:2e:fa:34:33:c0:83:b2:fc:ac:5d:
03:50:ec:d9:c3:68:70:c9:ed:88:0a:5e:d5:02:2d:
16:eb:a6:7d:e5:1f:08:42:67:d6:ff:c2:55:c2:f6:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:BB:90:D2:D5:38:68:20:9B:99:46:B6:87:88:2B:9C:8F:B6:DE
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/iee7kNLVOGggm5lGtoeIK5yPtt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
185.105.238.0/24
IPv6:
2a10:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
88:7d:c9:7a:69:98:66:83:70:f1:73:b5:6f:d5:5f:69:65:ec:
b7:a5:cc:a0:23:36:66:58:8a:6a:6c:fe:b1:89:ac:85:2a:17:
f4:fa:63:d0:9f:d1:93:f8:9b:2d:1f:5d:57:28:05:65:a1:34:
87:69:2f:d0:14:3f:a6:b6:91:76:42:38:2c:35:5e:1d:34:f2:
b5:f6:be:57:60:b0:4b:34:16:a7:d1:7b:a1:08:22:3c:b7:8e:
b0:bd:e1:54:18:7d:c2:43:07:81:3d:88:16:53:73:32:d9:0d:
28:4b:17:e6:1c:83:23:0a:41:49:7b:a8:e9:0c:4e:e2:27:c4:
47:30:76:dd:5b:06:ac:68:09:49:58:32:d0:36:91:67:a3:80:
91:8b:6c:6c:92:29:e6:d5:8e:db:9d:dd:8b:ff:dc:57:5f:3b:
84:3f:fd:cf:a8:10:0a:19:c2:a6:67:c7:f1:98:1a:bb:51:3e:
40:83:a5:3b:d5:26:1f:cc:dd:2d:84:18:4f:ca:ca:4b:48:59:
62:1e:b9:5b:0b:5c:86:9f:40:15:22:55:01:c2:6d:fe:98:54:
e8:7f:1a:87:68:1e:d8:0b:81:7c:34:53:bd:96:82:f3:bd:ff:
f9:53:16:78:4e:98:bd:24:a1:0c:47:1b:71:35:40:9c:82:59:
8d:9d:c0:94
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZPaY/PymG+kY8G055xJoJpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjQxMjE4MTUzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWU3YmI5MGQyZDUzODY4MjA5Yjk5NDZiNjg3ODgyYjljOGZiNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA358KgKU/rcy3k5Gr9CgYGj9z7N0m
R5SIuBMVc5x1X2PG/vhk2NsvEzSr5rmZy39MkfHy9tcbDbMBICZ5tGi2H91OOHwa
D/Bk9feq1J0CgjZHXdc/D1k8IiUpqbKSywpIxo5OjCOiB3CQug3btIpFd769Q0xD
DwHKCyjJPzlSuTPzlIuU0+0hRnO5U+4e7obDrHmQYQmNyhQUgpnJl18Y+wRFtjWa
EI/F4dVQP9IDokLZgfRTucqVxspKamcacTXpXF2HdbQ7Q68WTFCqTQ8UFQ1jyZo1
Gi76NDPAg7L8rF0DUOzZw2hwye2ICl7VAi0W66Z95R8IQmfW/8JVwvZwtwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFInnu5DS1ThoIJuZRraHiCucj7beMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvaWVlN2tOTFZPR2dnbTVsR3RvZUlLNXlQdHQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALYsJAwQA
uWnuMA0EAgACMAcDBQMqEKsAMA0GCSqGSIb3DQEBCwUAA4IBAQCIfcl6aZhmg3Dx
c7Vv1V9pZey3pcygIzZmWIpqbP6xiayFKhf0+mPQn9GT+JstH11XKAVloTSHaS/Q
FD+mtpF2QjgsNV4dNPK19r5XYLBLNBan0XuhCCI8t46wveFUGH3CQweBPYgWU3My
2Q0oSxfmHIMjCkFJe6jpDE7iJ8RHMHbdWwasaAlJWDLQNpFno4CRi2xskinm1Y7b
nd2L/9xXXzuEP/3PqBAKGcKmZ8fxmBq7UT5Ag6U71SYfzN0thBhPyspLSFliHrlb
C1yGn0AVIlUBwm3+mFTofxqHaB7YC4F8NFO9loLzvf/5UxZ4Tpi9JKEMRxtxNUCc
glmNncCU
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:31 2024 by rpki-client on console.sobornost.net