Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/N5kZPPknPa8uIDfDKNw0tcHRPHk.roa
File: N5kZPPknPa8uIDfDKNw0tcHRPHk.roa (raw, json)
Hash identifier: QRtYVTOnx+G52IAMMaRbNlYyu6TFBn4z2X7bMLjHhUI=
Subject key identifier: 37:99:19:3C:F9:27:3D:AF:2E:20:37:C3:28:DC:34:B5:C1:D1:3C:79
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 018CCA28EB6D96CD3F02A1715DD18760154C
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/N5kZPPknPa8uIDfDKNw0tcHRPHk.roa
Signing time: Tue 02 Jan 2024 12:32:08 +0000
ROA not before: Tue 02 Jan 2024 12:32:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198085
IP address blocks: 195.66.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:eb:6d:96:cd:3f:02:a1:71:5d:d1:87:60:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Jan 2 12:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3799193cf9273daf2e2037c328dc34b5c1d13c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:dd:8b:49:f3:75:a6:ee:e0:69:6a:c9:e1:
c6:12:38:ea:72:ec:d7:f7:e3:74:d7:30:ff:de:0c:
59:e5:92:02:0a:d6:84:ed:f4:a2:ac:1f:ac:8e:d2:
f9:f9:b3:eb:42:9c:7c:21:9c:97:0d:1a:53:c7:ee:
b6:51:54:f6:f4:21:88:06:63:77:f0:39:58:be:b8:
ee:86:db:16:1b:9f:27:d9:3d:d7:b5:88:a9:30:ef:
cb:8a:92:2a:ab:a7:aa:9c:19:a0:7c:18:b8:b6:ad:
86:a2:0a:33:39:2b:b6:df:a9:94:5e:2a:44:38:8f:
63:0f:a2:9a:3c:02:df:59:12:bf:de:20:91:e0:db:
05:4a:f3:59:85:e8:0e:5f:79:30:e0:2d:ac:d9:68:
20:9c:bb:75:fb:da:99:38:b6:ce:a4:a2:ef:3c:3f:
62:ec:74:60:95:62:93:41:97:72:db:ad:b0:a8:43:
20:dc:33:42:aa:69:0b:0b:50:82:4e:72:8b:56:79:
8f:43:d5:a3:89:29:20:88:90:fc:54:71:01:eb:86:
c4:aa:cb:9a:7e:04:1b:51:79:27:67:6c:fb:e8:07:
98:c6:97:c3:87:96:d2:1f:53:d0:19:90:43:be:b0:
b2:aa:7f:f1:7f:9b:94:df:f5:c7:41:fc:8f:b1:97:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:99:19:3C:F9:27:3D:AF:2E:20:37:C3:28:DC:34:B5:C1:D1:3C:79
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/N5kZPPknPa8uIDfDKNw0tcHRPHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:19:ed:5a:fb:33:54:3f:bb:d4:8d:19:60:ca:6f:5d:60:f5:
00:ff:04:9b:e7:94:d0:f4:2a:5b:2a:dd:62:f1:78:7c:d6:96:
72:57:a1:2a:81:f3:20:a6:77:8c:41:b2:fc:cc:20:75:42:a4:
a0:3b:4d:4c:08:f6:31:b9:64:69:93:0f:de:96:da:a9:99:e0:
92:77:23:fc:93:8d:42:9c:18:16:9a:67:7a:00:5a:70:e0:91:
5b:32:1f:37:d8:02:8f:82:12:fa:bb:10:82:a8:c0:c1:fa:9e:
6d:98:af:c8:2c:58:89:8f:42:18:2c:28:bf:06:84:7e:f6:fd:
17:5c:ab:13:e5:73:95:a1:83:2f:28:f6:e8:27:cc:22:dc:99:
42:5f:2f:53:cf:7e:f0:b9:8f:b1:f7:eb:0e:11:d6:23:18:ca:
ce:3f:67:2c:a3:9d:94:a5:9a:8e:46:53:c2:3e:12:61:e1:f7:
0e:73:2d:49:11:56:6c:7c:9c:54:33:23:81:13:bf:ca:d6:7a:
96:6c:0b:6b:16:3a:1d:e0:e5:22:28:8c:87:f1:cb:e3:8d:13:
b5:f5:4e:ed:ae:45:72:f8:82:21:da:44:d2:5a:69:24:3c:33:
74:7d:39:fd:27:01:e5:4d:69:4b:90:40:25:4b:7b:c3:d6:dc:
f2:18:71:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKOttls0/AqFxXdGHYBVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjIzNzk4YjY3MzkzZTQwMzllM2Y5NTU1ZTIxNGQ2NzM3
YzEzNTEwHhcNMjQwMTAyMTIzMjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzk5MTkzY2Y5MjczZGFmMmUyMDM3YzMyOGRjMzRiNWMxZDEzYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWndi0nzdabu4GlqyeHGEjjqcuzX
9+N01zD/3gxZ5ZICCtaE7fSirB+sjtL5+bPrQpx8IZyXDRpTx+62UVT29CGIBmN3
8DlYvrjuhtsWG58n2T3XtYipMO/LipIqq6eqnBmgfBi4tq2GogozOSu236mUXipE
OI9jD6KaPALfWRK/3iCR4NsFSvNZhegOX3kw4C2s2WggnLt1+9qZOLbOpKLvPD9i
7HRglWKTQZdy262wqEMg3DNCqmkLC1CCTnKLVnmPQ9WjiSkgiJD8VHEB64bEqsua
fgQbUXknZ2z76AeYxpfDh5bSH1PQGZBDvrCyqn/xf5uU3/XHQfyPsZdoVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDeZGTz5Jz2vLiA3wyjcNLXB0Tx5MB8GA1UdIwQY
MBaAFDjyN5i2c5PkA54/lVXiFNZzfBNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQt
NzMwZmNkMGU1ZGNhLzEvTjVrWlBQa25QYTh1SURmREtOdzB0Y0hSUEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQtNzMwZmNkMGU1ZGNh
LzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JuMA0G
CSqGSIb3DQEBCwUAA4IBAQCgGe1a+zNUP7vUjRlgym9dYPUA/wSb55TQ9CpbKt1i
8Xh81pZyV6EqgfMgpneMQbL8zCB1QqSgO01MCPYxuWRpkw/eltqpmeCSdyP8k41C
nBgWmmd6AFpw4JFbMh832AKPghL6uxCCqMDB+p5tmK/ILFiJj0IYLCi/BoR+9v0X
XKsT5XOVoYMvKPboJ8wi3JlCXy9Tz37wuY+x9+sOEdYjGMrOP2cso52UpZqORlPC
PhJh4fcOcy1JEVZsfJxUMyOBE7/K1nqWbAtrFjod4OUiKIyH8cvjjRO19U7trkVy
+IIh2kTSWmkkPDN0fTn9JwHlTWlLkEAlS3vD1tzyGHGU
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:15 2024 by rpki-client on console.sobornost.net