Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/DjyP6VxSt1auy6RKLAS38g0HNF8.roa
File: DjyP6VxSt1auy6RKLAS38g0HNF8.roa (raw, json)
Hash identifier: N7kj8O9HcKzNB/bbyC15SFNl904FT9OcOVHzCbN9/+s=
Subject key identifier: 0E:3C:8F:E9:5C:52:B7:56:AE:CB:A4:4A:2C:04:B7:F2:0D:07:34:5F
Certificate issuer: /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Certificate serial: 019305C4273BD26F3AADB11E70C1C4E1A284
Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/DjyP6VxSt1auy6RKLAS38g0HNF8.roa
Signing time: Thu 07 Nov 2024 08:36:01 +0000
ROA not before: Thu 07 Nov 2024 08:36:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205555
IP address blocks: 5.182.156.0/22 maxlen: 22
5.182.156.0/24 maxlen: 24
5.182.158.0/24 maxlen: 24
5.182.159.0/24 maxlen: 24
185.214.52.0/24 maxlen: 24
185.214.53.0/24 maxlen: 24
185.214.54.0/24 maxlen: 24
185.214.55.0/24 maxlen: 24
2a0b:95c0::/32 maxlen: 32
2a0b:95c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:c4:27:3b:d2:6f:3a:ad:b1:1e:70:c1:c4:e1:a2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Validity
Not Before: Nov 7 08:36:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e3c8fe95c52b756aecba44a2c04b7f20d07345f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:28:3f:e6:f9:0a:e8:48:99:cc:13:bb:32:
2e:ec:d1:eb:e0:74:2f:53:6e:71:5d:9a:90:93:e3:
0a:86:32:7e:b8:b6:19:dc:59:88:15:08:24:08:b9:
a4:0e:21:59:29:c3:6a:39:11:12:f3:17:c4:0e:0c:
19:94:d9:29:f7:d8:67:13:2c:bf:a9:08:fe:9a:4b:
46:a9:e0:96:1c:ee:37:2f:57:a0:ad:84:56:7c:d6:
af:7a:51:30:ed:bd:ec:76:cf:e4:89:00:6e:16:2c:
4e:8e:d0:48:4f:65:d4:7e:14:5b:a9:7a:de:d1:77:
39:0e:4d:eb:66:a8:ef:33:c0:14:8c:a2:23:ee:7f:
ee:a4:a8:82:1d:1c:96:b5:37:55:45:30:a0:c2:af:
af:9b:13:f4:39:2a:a3:5e:ed:ab:90:b7:04:f0:28:
90:48:ce:3c:e4:88:15:4f:df:57:25:78:96:fc:dc:
45:09:d3:ec:2b:43:65:7c:b2:ff:2a:6a:b2:f4:67:
02:8d:73:2c:9d:08:38:8a:aa:3d:38:94:75:9e:fe:
e5:62:48:f0:69:a7:27:98:b6:9e:9e:74:0d:b8:ed:
14:0c:8c:99:ff:86:73:2f:87:58:96:e4:b0:82:2f:
5b:3c:f8:4b:e2:a8:1e:a0:6e:55:4c:2a:79:0f:06:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3C:8F:E9:5C:52:B7:56:AE:CB:A4:4A:2C:04:B7:F2:0D:07:34:5F
X509v3 Authority Key Identifier:
keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/DjyP6VxSt1auy6RKLAS38g0HNF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.156.0/22
185.214.52.0/22
IPv6:
2a0b:95c0::/32
Signature Algorithm: sha256WithRSAEncryption
80:59:75:71:60:4d:ee:68:13:65:9b:1a:b8:1c:30:34:67:2a:
6a:63:9a:d3:52:90:f1:7f:dc:41:87:06:14:c6:ac:a8:04:6e:
87:3c:01:49:57:76:dd:b7:97:51:7c:e2:8d:70:f4:87:60:6e:
46:6e:52:43:09:15:13:b1:d4:66:ef:cd:18:6a:23:e7:bc:0b:
bc:40:47:ee:c0:88:16:28:95:19:9a:19:31:4a:c8:b8:14:13:
d2:7b:ac:54:95:48:4b:44:43:3b:44:44:95:c0:c4:8a:cb:d6:
ea:81:ad:c6:ae:dd:6e:2a:88:15:11:e9:52:66:ab:dc:df:9d:
8d:da:56:2d:5c:d3:6c:3d:7d:89:bf:24:5d:cb:50:47:9d:e2:
61:b8:18:f6:ce:82:52:87:b1:b4:1d:a5:5e:5c:f2:bf:cf:3b:
61:4f:2f:a1:65:75:8c:1f:9c:5d:fc:75:74:f3:2e:54:fc:6c:
61:c1:b7:ce:3a:5e:b7:09:f0:39:09:2b:96:4f:e1:3b:2d:cb:
5f:00:ac:d5:db:b2:4e:6d:4e:8d:71:d2:54:40:44:3d:4a:69:
2f:af:71:54:cb:60:3e:7f:fc:8b:1e:58:27:7d:dd:74:f7:98:
b5:f1:9d:79:92:57:76:a1:7f:11:c5:50:c6:89:e8:30:97:f9:
f1:83:e6:a1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZMFxCc70m86rbEecMHE4aKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMjFjOTFiNjNiYmJkYTg4MDRhNzQ5ZjNkNjEwZThiMjE3
ZjliNzMwHhcNMjQxMTA3MDgzNjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTNjOGZlOTVjNTJiNzU2YWVjYmE0NGEyYzA0YjdmMjBkMDczNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfQoP+b5CuhImcwTuzIu7NHr4HQv
U25xXZqQk+MKhjJ+uLYZ3FmIFQgkCLmkDiFZKcNqORES8xfEDgwZlNkp99hnEyy/
qQj+mktGqeCWHO43L1egrYRWfNavelEw7b3sds/kiQBuFixOjtBIT2XUfhRbqXre
0Xc5Dk3rZqjvM8AUjKIj7n/upKiCHRyWtTdVRTCgwq+vmxP0OSqjXu2rkLcE8CiQ
SM485IgVT99XJXiW/NxFCdPsK0NlfLL/Kmqy9GcCjXMsnQg4iqo9OJR1nv7lYkjw
aacnmLaennQNuO0UDIyZ/4ZzL4dYluSwgi9bPPhL4qgeoG5VTCp5DwZAUwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA48j+lcUrdWrsukSiwEt/INBzRfMB8GA1UdIwQY
MBaAFEohyRtju72ogEp0nz1hDoshf5tzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82ZThjYTAtY2Q0MC00NmZkLThlZTQt
NDdmYmU0YzRhNGZkLzEvRGp5UDZWeFN0MWF1eTZSS0xBUzM4ZzBITkY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82ZThjYTAtY2Q0MC00NmZkLThlZTQtNDdmYmU0YzRhNGZk
LzEvU2lISkcyTzd2YWlBU25TZlBXRU9peUZfbTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCBbacAwQC
udY0MA0EAgACMAcDBQAqC5XAMA0GCSqGSIb3DQEBCwUAA4IBAQCAWXVxYE3uaBNl
mxq4HDA0ZypqY5rTUpDxf9xBhwYUxqyoBG6HPAFJV3bdt5dRfOKNcPSHYG5GblJD
CRUTsdRm780YaiPnvAu8QEfuwIgWKJUZmhkxSsi4FBPSe6xUlUhLREM7RESVwMSK
y9bqga3Grt1uKogVEelSZqvc352N2lYtXNNsPX2JvyRdy1BHneJhuBj2zoJSh7G0
HaVeXPK/zzthTy+hZXWMH5xd/HV08y5U/GxhwbfOOl63CfA5CSuWT+E7LctfAKzV
27JObU6NcdJUQEQ9Smkvr3FUy2A+f/yLHlgnfd1095i18Z15kld2oX8RxVDGiegw
l/nxg+ah
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:13:20 2024 by rpki-client on console.sobornost.net