Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/xPYAW90dpwXOfNHMqreMpMskj64.roa
File: xPYAW90dpwXOfNHMqreMpMskj64.roa (raw, json)
Hash identifier: aQOEN3wfztIQEljxPD4gtFFeIy3bgyJjrYfOrL2S/o0=
Subject key identifier: C4:F6:00:5B:DD:1D:A7:05:CE:7C:D1:CC:AA:B7:8C:A4:CB:24:8F:AE
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 01936971DD7E7377E71C3F24069757E3EB67
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/xPYAW90dpwXOfNHMqreMpMskj64.roa
Signing time: Tue 26 Nov 2024 17:08:09 +0000
ROA not before: Tue 26 Nov 2024 17:08:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201382
IP address blocks: 85.91.105.0/24 maxlen: 24
85.91.108.0/22 maxlen: 22
85.91.108.0/24 maxlen: 24
85.91.123.0/24 maxlen: 24
213.208.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:71:dd:7e:73:77:e7:1c:3f:24:06:97:57:e3:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Nov 26 17:08:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4f6005bdd1da705ce7cd1ccaab78ca4cb248fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:2a:a6:c1:64:ca:92:e7:f2:e6:88:8a:7b:
56:b2:49:8c:33:70:38:7d:b4:c2:0a:d1:59:b4:98:
52:02:7e:d4:e5:11:aa:60:76:aa:c3:f8:1b:9e:75:
b1:31:41:28:e2:94:c0:92:a6:66:2d:21:cb:c7:1b:
a5:87:d2:55:db:77:43:52:34:07:ec:f3:6c:45:ef:
ae:26:b3:68:5c:cc:68:48:16:75:63:2c:4b:70:33:
87:66:36:16:c4:8a:41:7c:ce:c8:0d:07:10:c2:05:
b3:c4:ea:28:b7:17:92:00:87:76:07:e9:81:78:dd:
bd:bf:97:61:84:15:46:d7:92:07:73:3c:1d:9b:c5:
89:62:db:90:3b:d1:f9:d0:e2:e0:e0:29:73:8c:72:
17:17:c9:c5:56:ca:65:fa:68:d2:f2:de:87:6b:04:
8a:88:ac:ce:4c:73:e7:16:c9:41:e7:c4:5a:1d:91:
21:52:86:57:3f:d3:a2:7e:b7:31:8c:e5:90:5a:64:
90:8b:df:c9:ce:89:74:dd:72:1d:6f:87:7c:33:c5:
96:17:b5:a4:c4:f0:8e:aa:3d:c2:4c:69:d1:f6:72:
da:d4:40:f4:05:66:29:7f:db:02:cd:99:31:0c:6f:
97:94:26:eb:eb:42:9a:bc:21:ee:af:fa:9b:0e:b2:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:00:5B:DD:1D:A7:05:CE:7C:D1:CC:AA:B7:8C:A4:CB:24:8F:AE
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/xPYAW90dpwXOfNHMqreMpMskj64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.91.105.0/24
85.91.108.0/22
85.91.123.0/24
213.208.171.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c4:88:de:70:57:ac:54:6f:97:4f:31:62:f6:ac:4c:35:d3:
e9:61:26:ff:9b:f0:b5:86:fd:10:d9:db:c3:16:de:a8:06:8e:
c2:31:14:c8:fb:7e:7d:6b:e7:47:bf:db:c5:7b:36:f5:f8:f6:
b6:36:8c:f1:cc:32:63:49:9f:05:00:6f:bd:9f:87:2d:3b:fa:
c4:2d:88:bc:83:2a:5d:f8:49:b0:f4:b6:4e:f1:a7:83:83:46:
8d:bf:96:bf:b8:42:3d:ff:2a:9d:f1:1e:c7:c9:a2:ec:66:4b:
3d:fc:b8:f5:3b:10:7f:ad:f8:66:79:32:e7:f9:a5:bc:dd:6d:
82:f9:61:fa:f8:04:b8:65:1c:a5:85:05:ba:d9:c9:8f:d8:b3:
65:0b:8f:d3:52:ed:b3:65:9b:fb:d8:78:db:97:0d:33:0e:d7:
c6:b6:e2:6c:8d:96:11:51:79:1a:04:f3:89:ac:cd:ae:3d:d7:
61:f2:5e:21:8a:1c:a3:14:ce:9d:af:bb:0a:c2:31:77:9b:17:
d4:48:23:fa:d3:3b:ab:4f:81:b8:08:22:4d:0d:3d:d5:15:d4:
c7:89:01:7f:d4:44:3a:f2:77:d7:23:a1:b8:af:73:9c:39:7e:
26:57:ae:7b:81:49:26:5f:bc:34:b3:71:f0:67:58:82:de:80:
0a:52:4d:af
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZNpcd1+c3fnHD8kBpdX4+tnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj
ODI3N2UwHhcNMjQxMTI2MTcwODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGY2MDA1YmRkMWRhNzA1Y2U3Y2QxY2NhYWI3OGNhNGNiMjQ4ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhAqpsFkypLn8uaIintWskmMM3A4
fbTCCtFZtJhSAn7U5RGqYHaqw/gbnnWxMUEo4pTAkqZmLSHLxxulh9JV23dDUjQH
7PNsRe+uJrNoXMxoSBZ1YyxLcDOHZjYWxIpBfM7IDQcQwgWzxOootxeSAId2B+mB
eN29v5dhhBVG15IHczwdm8WJYtuQO9H50OLg4ClzjHIXF8nFVspl+mjS8t6HawSK
iKzOTHPnFslB58RaHZEhUoZXP9OifrcxjOWQWmSQi9/Jzol03XIdb4d8M8WWF7Wk
xPCOqj3CTGnR9nLa1ED0BWYpf9sCzZkxDG+XlCbr60KavCHur/qbDrImXwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMT2AFvdHacFznzRzKq3jKTLJI+uMB8GA1UdIwQY
MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt
NDdlMDkzNzk4OWE4LzEveFBZQVc5MGRwd1hPZk5ITXFyZU1wTXNrajY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4
LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVVtpAwQC
VVtsAwQAVVt7AwQA1dCrMA0GCSqGSIb3DQEBCwUAA4IBAQA2xIjecFesVG+XTzFi
9qxMNdPpYSb/m/C1hv0Q2dvDFt6oBo7CMRTI+359a+dHv9vFezb1+Pa2NozxzDJj
SZ8FAG+9n4ctO/rELYi8gypd+Emw9LZO8aeDg0aNv5a/uEI9/yqd8R7HyaLsZks9
/Lj1OxB/rfhmeTLn+aW83W2C+WH6+AS4ZRylhQW62cmP2LNlC4/TUu2zZZv72Hjb
lw0zDtfGtuJsjZYRUXkaBPOJrM2uPddh8l4hihyjFM6dr7sKwjF3mxfUSCP60zur
T4G4CCJNDT3VFdTHiQF/1EQ68nfXI6G4r3OcOX4mV657gUkmX7w0s3HwZ1iC3oAK
Uk2v
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:42 2024 by rpki-client on console.sobornost.net