Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/1-mXFHoHnmodLdcgZ9jM7oyDIXew.roa
File: 1-mXFHoHnmodLdcgZ9jM7oyDIXew.roa (raw, json)
Hash identifier: VXOQ68fhhJw0oJ3WJm0Wqv3E2DziJqqnPFi1diBAwmE=
Subject key identifier: FA:65:C5:1E:81:E7:9A:87:4B:75:C8:19:F6:33:3B:A3:20:C8:5D:EC
Certificate issuer: /CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Certificate serial: 018F39DDA087024699DF77606C10D3E1EBF3
Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/1-mXFHoHnmodLdcgZ9jM7oyDIXew.roa
Signing time: Thu 02 May 2024 15:12:56 +0000
ROA not before: Thu 02 May 2024 15:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16046
IP address blocks: 91.199.126.0/24 maxlen: 24
185.110.100.0/22 maxlen: 24
2a01:bf00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:dd:a0:87:02:46:99:df:77:60:6c:10:d3:e1:eb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Validity
Not Before: May 2 15:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa65c51e81e79a874b75c819f6333ba320c85dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:83:98:91:f5:32:50:91:51:76:e0:13:ae:
0d:10:7f:4b:46:78:30:cf:43:f1:e5:6c:b2:9c:61:
91:b8:b6:ed:4e:e5:03:d8:f9:af:18:ec:a5:c8:13:
77:fc:c7:02:71:83:1a:17:ed:85:7d:1a:cb:75:f2:
d5:2e:23:40:bb:48:65:36:36:a3:fb:46:de:ab:47:
39:8d:e9:d8:b3:d1:9d:af:24:83:ce:4f:ce:b8:65:
85:cf:6b:80:7d:89:ad:26:31:4c:14:a9:70:03:eb:
26:ac:e5:fb:36:e7:bf:6e:c7:6e:be:d9:34:21:d8:
19:c4:ff:8c:fa:bd:a5:40:90:32:c8:8b:01:2b:b7:
2b:38:02:a3:7c:13:2b:e3:52:26:1e:7c:c9:38:de:
66:74:b1:5a:a7:ec:79:fc:cd:5d:1b:8c:29:c5:c3:
de:49:f3:de:61:ec:e4:2d:f9:5a:1e:5b:51:1f:3d:
28:2e:3e:af:99:07:56:96:29:7b:0f:fb:c1:8f:48:
20:4a:71:b9:f5:f2:fa:2b:03:de:83:4c:2d:37:fb:
2a:36:d6:e3:82:fd:5f:53:4b:41:94:7d:27:65:ae:
f5:df:25:9c:5c:a0:b1:4f:59:41:54:a7:2b:83:29:
bd:58:55:ae:5f:5a:27:dc:ea:a0:65:0f:96:94:e4:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:C5:1E:81:E7:9A:87:4B:75:C8:19:F6:33:3B:A3:20:C8:5D:EC
X509v3 Authority Key Identifier:
keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/1-mXFHoHnmodLdcgZ9jM7oyDIXew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.126.0/24
185.110.100.0/22
IPv6:
2a01:bf00::/32
Signature Algorithm: sha256WithRSAEncryption
89:13:72:34:a5:0f:b9:62:27:33:35:a7:1d:6b:c1:ad:9b:5e:
b0:63:52:7d:22:d5:f3:c4:85:d8:96:ed:9b:e9:d9:71:3d:49:
58:94:c7:2b:0f:77:4b:b5:4f:cf:83:b1:27:02:6c:8a:3e:b6:
7d:a7:3c:94:bc:b6:29:23:5c:47:69:b8:3b:58:62:2f:15:e8:
9a:79:db:f0:2a:b2:27:25:62:2e:32:2b:88:74:5d:21:47:8f:
c1:ed:f7:93:41:3d:f7:37:8e:a6:0e:43:6b:80:cb:86:4b:62:
59:f3:ec:e2:14:c4:3c:b2:f3:ab:ff:b3:c8:15:ae:93:c3:5e:
9f:37:78:f7:16:66:3d:b1:fc:74:ce:0a:d6:a0:1c:c5:c6:63:
41:f6:37:49:42:9f:b2:9a:fd:6e:cb:da:4c:49:3c:aa:ca:90:
d9:78:33:2f:2c:94:20:63:ae:e6:ad:75:4e:13:be:28:e3:90:
a9:fa:97:5e:d7:c9:6d:12:89:70:15:64:13:70:1d:38:21:a9:
c9:3f:b5:1d:ad:07:95:71:2a:cb:69:f7:ce:23:5b:83:d0:8b:
1c:3f:3e:38:89:4b:15:d2:3b:75:4d:40:03:b0:e6:59:89:7b:
f6:a8:74:f7:b9:d2:12:09:8d:89:4c:f9:4d:4e:b9:ea:c5:74:
e1:87:7f:11
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAY853aCHAkaZ33dgbBDT4evzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTY3ZGQ5NjAzYjlmYjdhZjUwMTU1OWNiMzczN2Q0N2Ey
ZDU0MzcwHhcNMjQwNTAyMTUxMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTY1YzUxZTgxZTc5YTg3NGI3NWM4MTlmNjMzM2JhMzIwYzg1ZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRyDmJH1MlCRUXbgE64NEH9LRngw
z0Px5WyynGGRuLbtTuUD2PmvGOylyBN3/McCcYMaF+2FfRrLdfLVLiNAu0hlNjaj
+0beq0c5jenYs9GdrySDzk/OuGWFz2uAfYmtJjFMFKlwA+smrOX7Nue/bsduvtk0
IdgZxP+M+r2lQJAyyIsBK7crOAKjfBMr41ImHnzJON5mdLFap+x5/M1dG4wpxcPe
SfPeYezkLflaHltRHz0oLj6vmQdWlil7D/vBj0ggSnG59fL6KwPeg0wtN/sqNtbj
gv1fU0tBlH0nZa713yWcXKCxT1lBVKcrgym9WFWuX1on3OqgZQ+WlOTqMwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFPplxR6B55qHS3XIGfYzO6MgyF3sMB8GA1UdIwQY
MBaAFHgWfdlgO5+3r1AVWcs3N9R6LVQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zMGY2OWMtNDEwZS00NmQ0LWI2ZGIt
ZmY4NjU4ZTEzNTZjLzEvMS1tWEZIb0hubW9kTGRjZ1o5ak03b3lESVhldy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjYvMzBmNjljLTQxMGUtNDZkNC1iNmRiLWZmODY1OGUxMzU2
Yy8xL2VCWjkyV0E3bjdldlVCVlp5emMzMUhvdFZEYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAFvHfgME
ArluZDANBAIAAjAHAwUAKgG/ADANBgkqhkiG9w0BAQsFAAOCAQEAiRNyNKUPuWIn
MzWnHWvBrZtesGNSfSLV88SF2Jbtm+nZcT1JWJTHKw93S7VPz4OxJwJsij62fac8
lLy2KSNcR2m4O1hiLxXomnnb8CqyJyViLjIriHRdIUePwe33k0E99zeOpg5Da4DL
hktiWfPs4hTEPLLzq/+zyBWuk8Nenzd49xZmPbH8dM4K1qAcxcZjQfY3SUKfspr9
bsvaTEk8qsqQ2XgzLyyUIGOu5q11ThO+KOOQqfqXXtfJbRKJcBVkE3AdOCGpyT+1
Ha0HlXEqy2n3ziNbg9CLHD8+OIlLFdI7dU1AA7DmWYl79qh097nSEgmNiUz5TU65
6sV04Yd/EQ==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:55 2024 by rpki-client on console.sobornost.net