Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/sA7yUz5q7xhs92YBg3oTN0rbc3M.roa
File: sA7yUz5q7xhs92YBg3oTN0rbc3M.roa (raw, json)
Hash identifier: Drb1GBZSVo0yQJpg0Yeh9HuvmdVLx+NMkk0IemIOyuM=
Subject key identifier: B0:0E:F2:53:3E:6A:EF:18:6C:F7:66:01:83:7A:13:37:4A:DB:73:73
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0193C4A4E9EC564FD4EAA8013D6A73BEAEAD
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/sA7yUz5q7xhs92YBg3oTN0rbc3M.roa
Signing time: Sat 14 Dec 2024 10:09:22 +0000
ROA not before: Sat 14 Dec 2024 10:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29028
IP address blocks: 82.150.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c4:a4:e9:ec:56:4f:d4:ea:a8:01:3d:6a:73:be:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Dec 14 10:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b00ef2533e6aef186cf76601837a13374adb7373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:8f:b6:8f:a1:0b:39:dc:70:cf:bd:3c:98:
82:0d:cb:30:05:60:ef:ad:99:77:cd:9c:7d:67:c5:
f1:8e:32:a8:0d:7f:1f:d3:ac:8e:51:55:a6:17:a9:
ed:2f:09:bf:b5:2a:f6:a2:ec:62:70:b2:09:fb:bf:
83:1c:0c:5d:35:ec:5f:a6:6a:73:33:b6:8e:22:66:
57:6e:c9:d1:13:3d:d1:b5:a8:29:ea:3b:66:1d:6d:
3e:50:d6:dd:c5:32:65:a1:96:cb:58:9b:e9:09:8f:
7e:26:33:d4:d6:5b:4e:a2:64:71:40:63:86:81:8e:
c8:7d:9f:61:b4:2d:3f:ed:5f:fb:28:70:0a:72:96:
c0:ed:98:91:4a:2d:cc:08:32:18:d9:7a:4e:76:06:
a6:29:b5:78:25:d5:6d:aa:69:1f:15:89:be:ca:26:
a5:39:b5:75:cc:77:31:c1:14:3a:d9:f9:09:3a:42:
d1:2c:b8:2f:ce:f6:ce:fd:3d:f0:1f:cb:e7:5c:94:
9a:d3:40:64:6b:a4:5d:71:50:49:7e:dc:ef:d6:02:
0e:ba:1f:1c:18:14:68:0b:22:9a:57:fb:5c:6a:fd:
eb:59:8c:ee:c0:63:56:b1:e8:dd:2d:78:c2:09:58:
27:d3:b6:69:8c:f2:b9:bf:55:38:64:45:96:28:af:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0E:F2:53:3E:6A:EF:18:6C:F7:66:01:83:7A:13:37:4A:DB:73:73
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/sA7yUz5q7xhs92YBg3oTN0rbc3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:8d:33:9c:0d:b3:03:fb:0d:2e:94:66:7c:18:2c:89:75:73:
da:05:c9:bc:18:61:e4:78:7b:c5:21:6d:5a:35:45:08:44:42:
d5:bb:6f:5b:c2:55:18:45:e7:cc:35:6a:ab:ef:1b:40:74:a3:
2f:24:26:2e:8c:ea:03:0a:ce:18:a3:cd:a0:50:17:52:35:a9:
fa:44:07:ac:e6:ce:ad:27:66:a1:35:40:36:d8:c3:21:b0:ea:
77:e4:d4:cf:47:74:62:8c:67:7a:f9:88:90:a7:e9:50:b7:5a:
49:28:e2:17:55:c5:1f:af:3d:04:56:e7:b3:21:95:15:f5:7a:
47:6c:77:42:a7:11:08:a4:5f:bd:03:85:df:1d:1d:62:ce:db:
76:10:e4:7f:92:19:52:69:b6:5d:32:d5:13:c0:ae:99:bb:57:
7f:be:e5:e6:fc:ac:1c:ee:3a:18:ef:f8:1e:a7:42:1f:18:f8:
86:32:b9:77:0b:77:f8:82:cf:97:bd:f7:7f:eb:5f:83:f4:a0:
d1:77:30:f9:4a:ef:cd:f0:aa:7a:00:41:2f:ed:e0:ea:59:9b:
79:fc:5c:c3:04:ca:d1:11:f1:bd:e1:d9:76:bb:fd:3d:87:fb:
f9:bc:93:5c:48:62:50:b6:9a:6d:2c:df:5e:a6:0b:c5:b4:b0:
4b:da:d4:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPEpOnsVk/U6qgBPWpzvq6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjQxMjE0MTAwOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDBlZjI1MzNlNmFlZjE4NmNmNzY2MDE4MzdhMTMzNzRhZGI3MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyayPto+hCznccM+9PJiCDcswBWDv
rZl3zZx9Z8XxjjKoDX8f06yOUVWmF6ntLwm/tSr2ouxicLIJ+7+DHAxdNexfpmpz
M7aOImZXbsnREz3Rtagp6jtmHW0+UNbdxTJloZbLWJvpCY9+JjPU1ltOomRxQGOG
gY7IfZ9htC0/7V/7KHAKcpbA7ZiRSi3MCDIY2XpOdgamKbV4JdVtqmkfFYm+yial
ObV1zHcxwRQ62fkJOkLRLLgvzvbO/T3wH8vnXJSa00Bka6RdcVBJftzv1gIOuh8c
GBRoCyKaV/tcav3rWYzuwGNWsejdLXjCCVgn07ZpjPK5v1U4ZEWWKK9pYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLAO8lM+au8YbPdmAYN6EzdK23NzMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvc0E3eVV6NXE3eGhzOTJZQmczb1ROMHJiYzNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpaKMA0G
CSqGSIb3DQEBCwUAA4IBAQAPjTOcDbMD+w0ulGZ8GCyJdXPaBcm8GGHkeHvFIW1a
NUUIRELVu29bwlUYRefMNWqr7xtAdKMvJCYujOoDCs4Yo82gUBdSNan6RAes5s6t
J2ahNUA22MMhsOp35NTPR3RijGd6+YiQp+lQt1pJKOIXVcUfrz0EVuezIZUV9XpH
bHdCpxEIpF+9A4XfHR1iztt2EOR/khlSabZdMtUTwK6Zu1d/vuXm/Kwc7joY7/ge
p0IfGPiGMrl3C3f4gs+Xvfd/61+D9KDRdzD5Su/N8Kp6AEEv7eDqWZt5/FzDBMrR
EfG94dl2u/09h/v5vJNcSGJQtpptLN9epgvFtLBL2tRi
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:23 2024 by rpki-client on console.sobornost.net