Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/obLAW-JTJLMY9dA5Y9EkPR04mKc.roa
File: obLAW-JTJLMY9dA5Y9EkPR04mKc.roa (raw, json)
Hash identifier: UXSggEBs14RPqI2ydgiNDG/V4dfkrnjF95WYXNXwAoM=
Subject key identifier: A1:B2:C0:5B:E2:53:24:B3:18:F5:D0:39:63:D1:24:3D:1D:38:98:A7
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 0193925C68F06FC9799211BB5801001B4683
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/obLAW-JTJLMY9dA5Y9EkPR04mKc.roa
Signing time: Wed 04 Dec 2024 15:49:09 +0000
ROA not before: Wed 04 Dec 2024 15:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196945
IP address blocks: 91.217.155.0/24 maxlen: 24
185.106.16.0/22 maxlen: 24
2a06:3ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:5c:68:f0:6f:c9:79:92:11:bb:58:01:00:1b:46:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Dec 4 15:49:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1b2c05be25324b318f5d03963d1243d1d3898a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:23:21:d1:b9:ab:43:46:cd:b7:d9:cf:5e:
87:f4:5f:87:91:6b:5b:45:1c:68:f6:31:95:25:bc:
de:25:09:4e:88:ad:94:3c:1b:5a:cd:0a:28:39:36:
e4:94:15:3f:1c:ba:72:cd:16:94:d1:22:d8:9f:40:
b8:e9:13:0a:21:c6:1e:9f:2a:76:c8:dc:bf:91:bc:
6b:c5:de:62:5b:a4:ce:83:0c:2f:a5:e2:f0:20:c9:
23:f2:9c:e7:94:be:1e:ad:d6:77:78:fa:7e:01:68:
32:18:cc:b9:bc:46:60:82:18:02:cd:60:64:bb:1c:
f2:99:47:97:ed:78:db:1b:4d:b7:bd:3e:79:5b:d5:
51:62:51:09:ae:22:25:53:62:82:0b:e0:ae:4c:1d:
4c:74:48:11:12:1c:88:4c:22:5b:1e:29:fa:97:2d:
27:72:8e:b7:72:cd:10:8e:d5:b1:9d:39:90:98:9f:
45:87:75:d0:17:cb:7d:71:93:0c:66:cd:e9:fd:0b:
a0:41:80:f1:94:81:da:90:76:be:d9:38:70:9b:f8:
3d:63:ac:c7:38:e6:41:b3:98:42:9e:d5:ca:cc:8f:
f2:6d:94:51:67:c6:d4:0a:68:e2:0f:d3:64:71:62:
d4:d4:d8:b4:05:2c:d7:e6:0b:2e:8e:f5:be:fe:44:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B2:C0:5B:E2:53:24:B3:18:F5:D0:39:63:D1:24:3D:1D:38:98:A7
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/obLAW-JTJLMY9dA5Y9EkPR04mKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.155.0/24
185.106.16.0/22
IPv6:
2a06:3ac0::/29
Signature Algorithm: sha256WithRSAEncryption
08:a4:04:33:87:ee:00:78:0c:ab:0b:83:a2:bb:ac:93:7a:fd:
73:14:76:fa:81:87:c1:cd:8c:1c:e3:7c:a1:3d:2a:a5:7f:7f:
08:0c:21:3c:b9:ab:1b:38:f3:c6:cd:1e:16:ae:30:fb:62:45:
53:14:80:b4:1f:95:4a:f1:1e:f9:b2:9f:a7:08:17:90:74:01:
c1:99:8c:8f:da:ae:a7:e1:04:3d:30:7e:74:ca:ca:5c:0e:53:
58:28:f6:57:bd:e9:d5:95:61:70:53:f1:c2:30:cc:50:af:14:
d3:0a:84:6d:ba:68:f4:3f:26:6b:f5:d2:4d:c9:ff:ae:96:28:
00:a6:97:67:9a:d5:03:63:f4:42:62:37:f9:63:8d:81:6c:e1:
ab:81:ad:4c:7f:63:b4:93:f0:46:c7:c0:ee:d4:c6:19:45:ce:
ac:25:e9:74:e8:c9:15:37:f4:85:8a:b3:99:6b:82:a7:a0:d5:
be:bd:42:3a:80:be:ad:0e:04:97:1a:a7:bf:ba:14:b6:18:2f:
e5:9b:ef:7b:ec:99:72:e5:63:85:57:1c:08:74:80:c1:39:d3:
0b:e3:b9:75:55:1e:a5:30:74:80:d9:5f:79:cb:66:92:a0:ff:
2b:6e:35:5e:15:a4:95:58:5e:74:bd:ce:f3:d4:da:47:fc:bb:
a9:63:81:58
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZOSXGjwb8l5khG7WAEAG0aDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3
NmMwMDcwHhcNMjQxMjA0MTU0OTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWIyYzA1YmUyNTMyNGIzMThmNWQwMzk2M2QxMjQzZDFkMzg5OGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPQjIdG5q0NGzbfZz16H9F+HkWtb
RRxo9jGVJbzeJQlOiK2UPBtazQooOTbklBU/HLpyzRaU0SLYn0C46RMKIcYenyp2
yNy/kbxrxd5iW6TOgwwvpeLwIMkj8pznlL4erdZ3ePp+AWgyGMy5vEZgghgCzWBk
uxzymUeX7XjbG023vT55W9VRYlEJriIlU2KCC+CuTB1MdEgREhyITCJbHin6ly0n
co63cs0QjtWxnTmQmJ9Fh3XQF8t9cZMMZs3p/QugQYDxlIHakHa+2Thwm/g9Y6zH
OOZBs5hCntXKzI/ybZRRZ8bUCmjiD9NkcWLU1Ni0BSzX5gsujvW+/kQ2gwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKGywFviUySzGPXQOWPRJD0dOJinMB8GA1UdIwQY
MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct
ZTAzYWM1ODlhMDNmLzEvb2JMQVctSlRKTE1ZOWRBNVk5RWtQUjA0bUtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm
LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9mbAwQC
uWoQMA0EAgACMAcDBQMqBjrAMA0GCSqGSIb3DQEBCwUAA4IBAQAIpAQzh+4AeAyr
C4Oiu6yTev1zFHb6gYfBzYwc43yhPSqlf38IDCE8uasbOPPGzR4WrjD7YkVTFIC0
H5VK8R75sp+nCBeQdAHBmYyP2q6n4QQ9MH50yspcDlNYKPZXvenVlWFwU/HCMMxQ
rxTTCoRtumj0PyZr9dJNyf+uligAppdnmtUDY/RCYjf5Y42BbOGrga1Mf2O0k/BG
x8Du1MYZRc6sJel06MkVN/SFirOZa4KnoNW+vUI6gL6tDgSXGqe/uhS2GC/lm+97
7Jly5WOFVxwIdIDBOdML47l1VR6lMHSA2V95y2aSoP8rbjVeFaSVWF50vc7z1NpH
/LupY4FY
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:34 2024 by rpki-client on console.sobornost.net