Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/t2d5_y7QhiCPrL_D3Qbebx9f5ZA.roa
File: t2d5_y7QhiCPrL_D3Qbebx9f5ZA.roa (raw, json)
Hash identifier: ZBFp1MGkF9gCz1SNn/y2yQzz4gWbO4tjqL9o/qd8IFU=
Subject key identifier: B7:67:79:FF:2E:D0:86:20:8F:AC:BF:C3:DD:06:DE:6F:1F:5F:E5:90
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 01924C4DA0D6137512504BB9D48D434DD857
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/t2d5_y7QhiCPrL_D3Qbebx9f5ZA.roa
Signing time: Wed 02 Oct 2024 08:16:48 +0000
ROA not before: Wed 02 Oct 2024 08:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207456
IP address blocks: 31.171.132.0/22 maxlen: 24
45.154.4.0/22 maxlen: 24
109.235.52.0/22 maxlen: 24
109.235.53.0/24 maxlen: 24
109.235.54.0/23 maxlen: 24
185.153.188.0/22 maxlen: 24
185.196.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:4d:a0:d6:13:75:12:50:4b:b9:d4:8d:43:4d:d8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Oct 2 08:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b76779ff2ed086208facbfc3dd06de6f1f5fe590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:27:2a:1b:88:a5:ad:79:b5:4e:b5:a5:c0:
fe:d0:58:a1:5f:02:2c:ff:d6:9d:cc:d3:5f:4b:d2:
78:39:b6:74:cd:4e:7f:b6:21:6c:96:17:17:de:4d:
5a:cd:a7:15:62:19:54:d9:94:0e:8b:a9:5b:05:4f:
97:7e:15:32:0c:46:8f:2a:48:27:04:13:4a:f0:f0:
7e:22:0f:7c:4c:df:c2:84:2c:73:11:91:75:d2:89:
e2:96:77:c0:ef:2d:c8:47:4a:5f:80:fc:ad:45:d4:
5c:91:23:67:43:d9:4f:00:d8:48:de:39:9b:b1:36:
4a:64:f4:39:d1:35:29:d5:37:c5:c4:e7:83:51:57:
54:26:44:49:da:bd:f0:ac:e6:94:a4:d5:01:e1:ce:
06:d2:fb:40:f2:09:07:05:8a:ec:f8:e4:02:67:5c:
be:79:7b:d2:a3:cb:d5:3b:29:75:b6:86:69:18:bd:
2e:16:c5:37:d8:51:14:79:bd:cb:26:69:4d:b0:17:
15:f1:e4:f2:cf:05:67:77:ca:8e:a9:8e:2a:b9:f2:
f4:fa:27:80:69:ce:fe:8d:fb:b3:47:72:d2:25:e8:
d4:cf:74:3d:f6:9d:b4:74:10:02:a5:11:3e:3a:b9:
1f:e0:8b:43:5a:8b:c3:50:b6:d2:53:50:64:ce:d2:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:79:FF:2E:D0:86:20:8F:AC:BF:C3:DD:06:DE:6F:1F:5F:E5:90
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/t2d5_y7QhiCPrL_D3Qbebx9f5ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.132.0/22
45.154.4.0/22
109.235.52.0/22
185.153.188.0/22
185.196.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:8a:06:da:62:65:f0:ca:a7:fa:36:17:6f:04:db:cd:26:af:
27:c7:09:31:2c:5b:35:e6:27:76:cf:f0:01:bc:37:cf:c7:d6:
d6:ef:54:1c:ea:5b:0b:fb:39:a0:d7:c2:e3:87:7c:ad:2f:8c:
69:ab:2c:fc:40:74:5c:ad:42:87:09:c1:b8:a8:4e:55:d8:0e:
84:5c:03:0d:d0:15:69:71:92:0b:79:7e:d2:3c:44:24:6d:ab:
27:ac:fa:20:f1:4b:f6:28:cd:c0:8c:21:71:6a:24:9c:2c:3e:
0e:98:55:ed:ae:0c:6e:1e:f3:5a:34:cb:2a:7f:ce:58:fe:20:
31:6a:61:f7:aa:3d:9e:e1:c9:cc:ee:a4:68:af:54:c8:d9:3f:
52:0c:df:00:7a:1f:bb:32:bc:9c:2f:ce:69:0f:a1:f2:8a:31:
67:85:cf:df:27:c9:ea:39:6e:fd:1f:b3:5f:e6:be:f2:c9:07:
86:d2:2b:10:b9:76:0d:58:fa:15:0e:10:9b:5b:6a:2b:7f:a2:
52:8c:41:3c:37:ef:98:ed:c5:41:7e:18:51:30:61:15:1b:d5:
64:d3:eb:1a:88:c9:b4:df:da:4f:40:cb:27:a6:6c:69:7a:0d:
5c:72:58:43:2a:aa:57:3e:fc:82:7f:8c:8b:47:06:8b:3c:2a:
46:73:f8:84
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZJMTaDWE3USUEu51I1DTdhXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4
YWJmZDIwHhcNMjQxMDAyMDgxNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzY3NzlmZjJlZDA4NjIwOGZhY2JmYzNkZDA2ZGU2ZjFmNWZlNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqsnKhuIpa15tU61pcD+0FihXwIs
/9adzNNfS9J4ObZ0zU5/tiFslhcX3k1azacVYhlU2ZQOi6lbBU+XfhUyDEaPKkgn
BBNK8PB+Ig98TN/ChCxzEZF10onilnfA7y3IR0pfgPytRdRckSNnQ9lPANhI3jmb
sTZKZPQ50TUp1TfFxOeDUVdUJkRJ2r3wrOaUpNUB4c4G0vtA8gkHBYrs+OQCZ1y+
eXvSo8vVOyl1toZpGL0uFsU32FEUeb3LJmlNsBcV8eTyzwVnd8qOqY4qufL0+ieA
ac7+jfuzR3LSJejUz3Q99p20dBACpRE+Orkf4ItDWovDULbSU1BkztL9TwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLdnef8u0IYgj6y/w90G3m8fX+WQMB8GA1UdIwQY
MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt
NTJmOTdiMjc3ZDFmLzEvdDJkNV95N1FoaUNQckxfRDNRYmVieDlmNVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm
LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCH6uEAwQC
LZoEAwQCbes0AwQCuZm8AwQCucRcMA0GCSqGSIb3DQEBCwUAA4IBAQCnigbaYmXw
yqf6NhdvBNvNJq8nxwkxLFs15id2z/ABvDfPx9bW71Qc6lsL+zmg18Ljh3ytL4xp
qyz8QHRcrUKHCcG4qE5V2A6EXAMN0BVpcZILeX7SPEQkbasnrPog8Uv2KM3AjCFx
aiScLD4OmFXtrgxuHvNaNMsqf85Y/iAxamH3qj2e4cnM7qRor1TI2T9SDN8Aeh+7
MrycL85pD6HyijFnhc/fJ8nqOW79H7Nf5r7yyQeG0isQuXYNWPoVDhCbW2orf6JS
jEE8N++Y7cVBfhhRMGEVG9Vk0+saiMm039pPQMsnpmxpeg1cclhDKqpXPvyCf4yL
RwaLPCpGc/iE
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:47 2024 by rpki-client on console.sobornost.net