Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/OytA-ktR8slmDjfNkwaYkl67UAU.roa
File: OytA-ktR8slmDjfNkwaYkl67UAU.roa (raw, json)
Hash identifier: 7dHplGKA/Nhwb6J5ZPwWO7E5k9f9kIV0Xjmnlsir080=
Subject key identifier: 3B:2B:40:FA:4B:51:F2:C9:66:0E:37:CD:93:06:98:92:5E:BB:50:05
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019357BFD71A43742B413CFA7D0DA6EBA18D
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/OytA-ktR8slmDjfNkwaYkl67UAU.roa
Signing time: Sat 23 Nov 2024 06:40:10 +0000
ROA not before: Sat 23 Nov 2024 06:40:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44612
IP address blocks: 185.214.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:bf:d7:1a:43:74:2b:41:3c:fa:7d:0d:a6:eb:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Nov 23 06:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b2b40fa4b51f2c9660e37cd930698925ebb5005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:a4:c9:f4:f8:52:88:2d:17:6b:c0:de:c1:
c2:b3:52:70:6c:45:20:3c:bb:4e:e6:2b:3d:9b:11:
d6:7a:7c:33:d8:a5:64:7c:f9:b6:cc:a5:0b:f5:f6:
f1:3f:b0:84:4f:e1:54:1b:6c:34:66:65:9f:91:f8:
05:5e:5d:b3:61:f8:f1:91:7d:32:6b:ff:da:de:06:
f0:26:0e:2f:6f:9e:65:2d:89:fe:70:aa:97:55:63:
ae:b7:5a:cf:9d:4c:b2:f1:92:97:64:9f:36:b2:c4:
3d:36:37:21:18:78:d6:e6:81:28:46:39:45:92:0d:
1c:6d:1a:0b:2a:e1:ad:12:d1:cd:dd:03:12:32:98:
37:2b:84:9f:c1:8e:a0:fe:5e:9c:17:49:67:69:2a:
ee:db:5d:31:03:9a:7e:ae:a2:f3:c4:6c:eb:26:3b:
f2:c2:47:2b:62:e8:ab:45:30:ec:66:9c:59:d8:5a:
45:92:34:b2:7d:88:93:84:6b:cd:e4:a8:37:ab:6b:
1b:9c:7f:d2:9b:5d:37:92:25:d2:f5:08:3e:d0:11:
65:d8:c1:b3:a2:c1:ee:ee:76:a3:5b:4d:37:1b:16:
05:21:24:b3:08:00:36:71:b1:7f:2e:da:90:28:b8:
56:c2:7d:d1:50:f6:e7:f6:63:9f:91:6f:bd:40:08:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:40:FA:4B:51:F2:C9:66:0E:37:CD:93:06:98:92:5E:BB:50:05
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/OytA-ktR8slmDjfNkwaYkl67UAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.27.0/24
Signature Algorithm: sha256WithRSAEncryption
23:82:da:d3:79:0b:5a:df:e3:71:02:44:f3:00:5b:b2:35:8c:
64:39:70:de:1f:73:36:3b:df:48:24:bd:b6:81:06:ca:42:8e:
b7:ad:92:8a:88:54:e5:b0:c0:ce:2b:07:97:e4:cc:e5:33:40:
d0:40:80:ef:49:28:2e:11:64:20:b0:88:a6:27:78:91:89:cf:
58:aa:88:e7:2c:50:45:8a:5d:2c:ef:83:6b:eb:7c:ac:01:ba:
16:7e:c5:36:da:e3:b6:58:92:c0:48:de:89:44:63:a9:d3:06:
49:e7:ae:76:42:19:ac:e9:75:12:d6:bf:1b:43:69:10:b8:74:
7d:27:63:85:0e:a7:58:6c:16:ab:12:95:e1:e8:b5:82:42:24:
76:67:60:61:c0:4d:a7:fd:0d:1c:c2:05:df:46:94:10:50:76:
0d:df:2d:ef:74:a9:d0:a4:80:18:36:6f:5c:8c:b0:8a:f4:26:
d6:76:de:50:33:d0:e5:e0:80:b5:48:b8:3f:d4:2f:c1:6c:01:
a7:8b:27:95:72:2e:cb:25:3f:4c:b6:e7:6e:03:53:13:67:93:
b5:21:14:12:b4:90:0e:f6:6a:48:40:a5:f2:e5:87:16:d4:1e:
45:c0:79:8f:54:b7:f8:bf:bd:c7:80:78:e6:46:44:c6:55:e4:
3c:8f:d0:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNXv9caQ3QrQTz6fQ2m66GNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl
N2Y2MjkwHhcNMjQxMTIzMDY0MDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjJiNDBmYTRiNTFmMmM5NjYwZTM3Y2Q5MzA2OTg5MjVlYmI1MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJakyfT4UogtF2vA3sHCs1JwbEUg
PLtO5is9mxHWenwz2KVkfPm2zKUL9fbxP7CET+FUG2w0ZmWfkfgFXl2zYfjxkX0y
a//a3gbwJg4vb55lLYn+cKqXVWOut1rPnUyy8ZKXZJ82ssQ9NjchGHjW5oEoRjlF
kg0cbRoLKuGtEtHN3QMSMpg3K4SfwY6g/l6cF0lnaSru210xA5p+rqLzxGzrJjvy
wkcrYuirRTDsZpxZ2FpFkjSyfYiThGvN5Kg3q2sbnH/Sm103kiXS9Qg+0BFl2MGz
osHu7najW003GxYFISSzCAA2cbF/LtqQKLhWwn3RUPbn9mOfkW+9QAggbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDsrQPpLUfLJZg43zZMGmJJeu1AFMB8GA1UdIwQY
MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt
MWJmZDEwYTg4NDVhLzEvT3l0QS1rdFI4c2xtRGpmTmt3YVlrbDY3VUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh
LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudYbMA0G
CSqGSIb3DQEBCwUAA4IBAQAjgtrTeQta3+NxAkTzAFuyNYxkOXDeH3M2O99IJL22
gQbKQo63rZKKiFTlsMDOKweX5MzlM0DQQIDvSSguEWQgsIimJ3iRic9YqojnLFBF
il0s74Nr63ysAboWfsU22uO2WJLASN6JRGOp0wZJ5652Qhms6XUS1r8bQ2kQuHR9
J2OFDqdYbBarEpXh6LWCQiR2Z2BhwE2n/Q0cwgXfRpQQUHYN3y3vdKnQpIAYNm9c
jLCK9CbWdt5QM9Dl4IC1SLg/1C/BbAGniyeVci7LJT9MtuduA1MTZ5O1IRQStJAO
9mpIQKXy5YcW1B5FwHmPVLf4v73HgHjmRkTGVeQ8j9A1
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:16 2024 by rpki-client on console.sobornost.net