Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/M5Su6HwrJfyZeEM72e87PhTv3XM.roa
File: M5Su6HwrJfyZeEM72e87PhTv3XM.roa (raw, json)
Hash identifier: GhxAbInsNpjBzaqfG/ipDspcCEH+S/8twi7UKHbA2nM=
Subject key identifier: 33:94:AE:E8:7C:2B:25:FC:99:78:43:3B:D9:EF:3B:3E:14:EF:DD:73
Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial: 0192D81487FAAB82E001BEB773A1FC3BD52B
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/M5Su6HwrJfyZeEM72e87PhTv3XM.roa
Signing time: Tue 29 Oct 2024 11:41:16 +0000
ROA not before: Tue 29 Oct 2024 11:41:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 176.120.17.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:14:87:fa:ab:82:e0:01:be:b7:73:a1:fc:3b:d5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Validity
Not Before: Oct 29 11:41:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3394aee87c2b25fc9978433bd9ef3b3e14efdd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:f2:dd:13:09:84:22:b7:e1:e2:57:8f:59:
56:26:45:3f:e1:85:1b:2f:4c:31:87:10:d2:20:f9:
60:de:2e:a0:19:a5:30:f7:84:f9:1c:fa:31:5c:1f:
53:ba:eb:ab:20:52:6d:9f:44:26:54:27:d2:60:31:
c7:0e:cc:f6:ba:8d:f7:02:e5:8c:62:a6:f1:c5:33:
0a:42:f2:c0:99:6f:f5:6f:4d:1c:ac:d0:a4:69:24:
c2:6d:e9:c6:39:47:0c:b1:16:64:52:ac:71:da:d9:
ae:a3:8b:54:d8:b7:ca:89:42:89:ce:62:ae:55:79:
ea:b8:77:70:94:01:c3:8b:41:2f:dc:7d:c1:09:1a:
bc:3f:0a:40:93:ad:08:9c:46:25:0d:7b:d0:37:54:
7f:48:b9:9b:14:18:08:57:1c:76:42:7f:80:4d:4f:
0c:c5:99:80:bb:ce:0f:95:31:d1:58:f3:b1:0c:a1:
8d:22:00:04:c7:9f:3c:f3:7a:79:3b:44:5f:76:7d:
c8:8b:3b:0c:ed:a7:74:f8:ae:b0:b2:02:16:7a:7e:
f0:f9:c1:d0:2d:94:47:a4:aa:1e:14:37:65:18:97:
a0:c1:9e:06:d8:c4:c6:f6:bd:d7:57:e8:d3:8e:41:
62:45:54:9f:f7:5b:91:5a:2a:e6:b5:3f:7d:ba:ea:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:AE:E8:7C:2B:25:FC:99:78:43:3B:D9:EF:3B:3E:14:EF:DD:73
X509v3 Authority Key Identifier:
keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/M5Su6HwrJfyZeEM72e87PhTv3XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.17.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f3:61:68:b2:b4:65:52:c0:b7:51:ad:c8:5b:26:89:41:04:
2f:de:20:fe:40:c0:24:52:32:2a:99:7a:98:68:e4:ed:c9:75:
3d:00:d2:7a:5a:5f:4d:04:2d:0f:48:a0:f8:1e:a2:93:3f:b8:
79:ed:5c:37:23:fb:5b:b6:54:05:82:23:f1:2d:4c:ff:b8:0b:
51:55:1d:29:7b:e7:1c:1f:7c:c0:81:de:dc:3c:1c:f9:d1:42:
c4:cd:97:92:22:35:32:c2:19:1d:e4:d3:86:e7:f9:fa:71:f9:
ad:a6:44:16:4d:23:19:e2:68:5e:c7:10:de:d0:61:0d:32:dd:
61:41:43:9a:5b:c9:47:4f:f9:96:4d:71:d8:aa:79:d5:81:96:
f1:a8:2b:b7:24:8b:2b:7e:c4:ad:dd:5b:95:ba:fe:3f:75:ab:
ae:25:03:d3:8f:9d:75:5a:84:de:58:0a:42:a3:38:3d:cd:e8:
90:fc:8c:6f:b2:92:84:c8:04:df:fc:92:ad:fe:b2:d9:f7:7e:
1d:40:08:b4:1b:3f:00:cb:75:94:2d:1d:87:63:02:7a:ee:0a:
12:c1:10:23:d3:d7:c4:e2:e4:b2:d8:a4:6a:92:1a:bf:17:a8:
ed:a1:55:de:2b:e3:27:68:80:df:c2:44:6c:75:31:b1:ab:4b:
46:5c:94:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLYFIf6q4LgAb63c6H8O9UrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Mzk1NDBmZDE2YjYzMzUwMWZiZjc0NDFhNzQ2ZmM1NmY5
ZjU5YmYwHhcNMjQxMDI5MTE0MTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzk0YWVlODdjMmIyNWZjOTk3ODQzM2JkOWVmM2IzZTE0ZWZkZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjby3RMJhCK34eJXj1lWJkU/4YUb
L0wxhxDSIPlg3i6gGaUw94T5HPoxXB9TuuurIFJtn0QmVCfSYDHHDsz2uo33AuWM
YqbxxTMKQvLAmW/1b00crNCkaSTCbenGOUcMsRZkUqxx2tmuo4tU2LfKiUKJzmKu
VXnquHdwlAHDi0Ev3H3BCRq8PwpAk60InEYlDXvQN1R/SLmbFBgIVxx2Qn+ATU8M
xZmAu84PlTHRWPOxDKGNIgAEx58883p5O0Rfdn3IizsM7ad0+K6wsgIWen7w+cHQ
LZRHpKoeFDdlGJegwZ4G2MTG9r3XV+jTjkFiRVSf91uRWirmtT99uuohBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDOUruh8KyX8mXhDO9nvOz4U791zMB8GA1UdIwQY
MBaAFOk5VA/Ra2M1Afv3RBp0b8Vvn1m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQt
OWY1MmM3MzBhY2RmLzEvTTVTdTZId3JKZnlaZUVNNzJlODdQaFR2M1hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQtOWY1MmM3MzBhY2Rm
LzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHgRMA0G
CSqGSIb3DQEBCwUAA4IBAQCU82FosrRlUsC3Ua3IWyaJQQQv3iD+QMAkUjIqmXqY
aOTtyXU9ANJ6Wl9NBC0PSKD4HqKTP7h57Vw3I/tbtlQFgiPxLUz/uAtRVR0pe+cc
H3zAgd7cPBz50ULEzZeSIjUywhkd5NOG5/n6cfmtpkQWTSMZ4mhexxDe0GENMt1h
QUOaW8lHT/mWTXHYqnnVgZbxqCu3JIsrfsSt3VuVuv4/dauuJQPTj511WoTeWApC
ozg9zeiQ/IxvspKEyATf/JKt/rLZ934dQAi0Gz8Ay3WULR2HYwJ67goSwRAj09fE
4uSy2KRqkhq/F6jtoVXeK+MnaIDfwkRsdTGxq0tGXJR0
-----END CERTIFICATE-----
Generated at Thu Nov 14 12:05:44 2024 by rpki-client on console.sobornost.net