Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/1_CmjgPH-9L9iSKAe0vNbjb2O5U.roa
File: 1_CmjgPH-9L9iSKAe0vNbjb2O5U.roa (raw, json)
Hash identifier: QXEeBF8eeW/o+WQ0o3ZrdXvN7PiwPcmD1aA5kQ3tfTU=
Subject key identifier: D7:F0:A6:8E:03:C7:FB:D2:FD:89:22:80:7B:4B:CD:6E:36:F6:3B:95
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 018CCA29FA3B3C7DECC3523E6769BC5EEA1C
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/1_CmjgPH-9L9iSKAe0vNbjb2O5U.roa
Signing time: Tue 02 Jan 2024 12:33:17 +0000
ROA not before: Tue 02 Jan 2024 12:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60992
IP address blocks: 83.96.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:fa:3b:3c:7d:ec:c3:52:3e:67:69:bc:5e:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 2 12:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7f0a68e03c7fbd2fd8922807b4bcd6e36f63b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:a8:22:94:0b:db:f1:d4:69:33:4b:e2:ac:
a1:58:21:0b:27:ac:1b:22:3c:42:ad:3f:2c:7a:99:
e4:ed:69:23:89:49:e3:46:3c:d5:54:5c:db:d0:01:
d7:d1:1b:1d:4f:43:98:0d:92:ef:88:68:0e:f9:25:
ba:be:34:dd:46:6a:50:82:16:cb:65:a1:2e:ef:c3:
58:49:3b:57:08:95:3e:a3:c4:8f:af:b2:f0:9a:ae:
7a:bc:d6:88:97:11:6f:00:9e:a7:28:24:19:b2:43:
a4:ea:95:21:7c:ef:49:c2:f8:15:d1:13:e9:a3:7d:
36:f0:ea:05:7c:de:ea:b2:20:58:26:f8:84:36:25:
b2:2e:2b:04:ac:44:13:69:a1:4a:21:5f:b4:90:5e:
95:11:1d:7c:23:4a:27:68:e5:57:53:d7:d8:95:bc:
1a:b1:bc:e6:ee:85:7f:e8:4d:28:51:7d:c4:b0:fd:
15:90:2f:42:fd:3d:63:1b:28:91:54:94:e2:2b:5c:
e9:61:d7:39:65:b0:0a:eb:81:95:a2:17:1c:7f:9b:
0b:4e:99:a0:7f:b5:2a:b9:64:6a:86:c4:c1:56:a9:
e6:4c:89:50:8d:27:fb:c3:fc:e2:33:27:b7:84:58:
43:2c:d4:bc:97:2f:88:15:75:e4:63:0a:00:5a:a7:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:A6:8E:03:C7:FB:D2:FD:89:22:80:7B:4B:CD:6E:36:F6:3B:95
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/1_CmjgPH-9L9iSKAe0vNbjb2O5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.96.29.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:78:ad:f0:43:05:c9:57:62:a3:57:85:6a:77:74:28:27:dc:
1c:59:b9:22:9f:4d:fd:a0:48:3b:3c:23:a1:8a:fc:1c:b0:c4:
53:ca:41:88:1c:39:b6:cf:82:10:85:36:27:16:38:d7:d6:d2:
17:2d:fe:1b:53:82:6c:64:26:b8:0c:ff:24:e1:6f:31:d6:26:
18:78:d4:eb:06:c4:14:db:c8:f7:61:f4:5c:e3:07:06:c7:bf:
72:66:14:1d:56:12:eb:4f:37:bb:d7:30:bb:09:a9:02:b4:6e:
05:7d:63:db:77:9e:86:f2:59:55:e6:5c:29:7c:33:3b:8f:3d:
c7:20:10:df:c1:36:8f:02:38:df:53:17:7d:32:15:99:db:a5:
25:16:9a:d1:5b:a9:61:39:22:1f:1b:49:f5:80:fc:6c:50:f3:
17:81:77:60:ca:50:46:8b:7e:73:3c:51:ad:7f:18:79:a3:f8:
24:21:2a:63:77:46:e0:90:e1:e7:55:4b:c9:5b:8e:b9:0f:41:
b6:58:20:0e:4c:c3:15:a4:73:5d:9f:43:7c:64:9c:67:23:36:
f2:4c:be:24:f9:04:dc:07:36:38:76:e2:d4:14:a4:b6:f6:60:
17:60:0b:dc:4e:2b:7c:3c:c5:be:c5:9d:e4:1c:e3:3a:c9:6b:
6f:59:f7:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKfo7PH3sw1I+Z2m8XuocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0
N2ZkY2UwHhcNMjQwMTAyMTIzMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2YwYTY4ZTAzYzdmYmQyZmQ4OTIyODA3YjRiY2Q2ZTM2ZjYzYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksuoIpQL2/HUaTNL4qyhWCELJ6wb
IjxCrT8sepnk7WkjiUnjRjzVVFzb0AHX0RsdT0OYDZLviGgO+SW6vjTdRmpQghbL
ZaEu78NYSTtXCJU+o8SPr7Lwmq56vNaIlxFvAJ6nKCQZskOk6pUhfO9JwvgV0RPp
o3028OoFfN7qsiBYJviENiWyLisErEQTaaFKIV+0kF6VER18I0onaOVXU9fYlbwa
sbzm7oV/6E0oUX3EsP0VkC9C/T1jGyiRVJTiK1zpYdc5ZbAK64GVohccf5sLTpmg
f7UquWRqhsTBVqnmTIlQjSf7w/ziMye3hFhDLNS8ly+IFXXkYwoAWqeqWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNfwpo4Dx/vS/YkigHtLzW429juVMB8GA1UdIwQY
MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt
YjczYTM2ZDkzOWIyLzEvMV9DbWpnUEgtOUw5aVNLQWUwdk5iamIyTzVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy
LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2AdMA0G
CSqGSIb3DQEBCwUAA4IBAQAteK3wQwXJV2KjV4Vqd3QoJ9wcWbkin039oEg7PCOh
ivwcsMRTykGIHDm2z4IQhTYnFjjX1tIXLf4bU4JsZCa4DP8k4W8x1iYYeNTrBsQU
28j3YfRc4wcGx79yZhQdVhLrTze71zC7CakCtG4FfWPbd56G8llV5lwpfDM7jz3H
IBDfwTaPAjjfUxd9MhWZ26UlFprRW6lhOSIfG0n1gPxsUPMXgXdgylBGi35zPFGt
fxh5o/gkISpjd0bgkOHnVUvJW465D0G2WCAOTMMVpHNdn0N8ZJxnIzbyTL4k+QTc
BzY4duLUFKS29mAXYAvcTit8PMW+xZ3kHOM6yWtvWfcV
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net