Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/Mzb5z3l6bewIRV0XAbkBznd5Kz4.roa
File: Mzb5z3l6bewIRV0XAbkBznd5Kz4.roa (raw, json)
Hash identifier: o3N84LT5Ltb0nvfvlqskkYyFNi4RvE64/x/qBmIx8WY=
Subject key identifier: 33:36:F9:CF:79:7A:6D:EC:08:45:5D:17:01:B9:01:CE:77:79:2B:3E
Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial: 0193EFB5A87B70D76BF2B23B4FA57883B8EC
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/Mzb5z3l6bewIRV0XAbkBznd5Kz4.roa
Signing time: Sun 22 Dec 2024 18:51:19 +0000
ROA not before: Sun 22 Dec 2024 18:51:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 176.120.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ef:b5:a8:7b:70:d7:6b:f2:b2:3b:4f:a5:78:83:b8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Validity
Not Before: Dec 22 18:51:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3336f9cf797a6dec08455d1701b901ce77792b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:52:6d:67:2c:ae:f7:b6:ce:df:43:0e:3b:
4e:f5:9f:33:48:95:0f:2b:ca:35:98:5d:0d:4a:c4:
b3:63:9b:c0:cf:91:30:cb:6a:d7:f7:91:61:0f:dd:
d6:4e:77:95:74:b8:7c:99:21:15:7f:8a:74:4d:d9:
c7:0a:8d:5a:7e:8a:e8:c4:0b:7b:aa:ff:3d:b5:9d:
da:35:48:5d:32:38:b2:7e:c0:67:b4:15:59:92:a2:
d7:8b:31:f7:8b:2a:57:ed:ad:13:dd:55:7e:92:81:
d9:b0:8a:dc:9b:b1:28:c2:ae:23:a4:b3:fa:cb:4a:
08:eb:63:f3:13:8f:25:7c:06:ed:d7:27:ea:4b:a9:
3f:63:ec:8e:c5:2f:23:fd:56:a5:26:68:37:6b:5e:
02:dc:ee:0b:c3:3f:d2:21:c3:c1:2f:6d:43:6a:74:
e8:75:99:54:5b:38:e7:44:6c:30:05:74:b0:5a:2b:
d1:2e:f6:18:79:ca:3e:8f:01:53:a7:f2:ce:38:e3:
89:73:fc:9d:4b:1a:74:6d:a0:a2:11:49:17:ae:8e:
73:a1:16:93:47:c9:26:b6:eb:09:ff:6e:16:25:bb:
bd:e9:50:58:08:cf:d1:97:25:b7:f1:ce:f9:ab:c0:
82:0f:12:79:b6:1e:b2:96:d9:16:67:1b:51:f1:74:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:36:F9:CF:79:7A:6D:EC:08:45:5D:17:01:B9:01:CE:77:79:2B:3E
X509v3 Authority Key Identifier:
keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/Mzb5z3l6bewIRV0XAbkBznd5Kz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1a:d5:e4:9b:69:3f:a4:12:ba:44:22:cf:00:85:da:10:06:
f3:f0:79:c7:6b:5e:d3:d5:44:01:96:05:e6:c4:7b:46:29:09:
38:55:4f:66:f4:8e:d0:1c:b4:0a:fd:8b:33:46:d0:fe:83:e8:
ee:f4:af:8d:2a:ff:a2:fe:43:14:1f:d8:0e:fc:a9:6b:36:e7:
a6:a1:b9:de:ac:70:44:72:b8:49:1f:f1:45:eb:aa:ca:74:ad:
ab:85:e8:33:a2:de:ce:3f:09:60:5e:4d:a6:39:2e:39:7d:f3:
b2:08:6b:48:82:a3:72:03:f3:0e:18:ca:19:9b:11:25:79:7f:
e1:3e:87:c6:47:87:22:34:10:36:9d:a8:6e:b6:f3:fe:3f:3a:
2c:52:b1:25:34:f1:ec:5d:23:fa:e4:9b:33:f6:1f:29:53:1e:
f5:9b:e4:52:68:bc:0a:f5:3c:52:c4:4b:c7:08:3c:9d:1c:a2:
67:b7:03:d9:33:d7:4e:24:dc:01:6e:f0:48:57:10:f1:ec:62:
50:c8:29:9a:85:af:de:ef:ce:3c:2c:04:25:6e:a0:e0:c5:52:
bd:b3:48:bc:ba:5b:6d:e8:4b:b1:64:c8:6b:d2:32:7a:b7:57:
aa:cc:1d:ad:0d:e9:1e:8b:0e:e5:da:95:87:94:35:a0:bf:11:
eb:75:bd:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPvtah7cNdr8rI7T6V4g7jsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Mzk1NDBmZDE2YjYzMzUwMWZiZjc0NDFhNzQ2ZmM1NmY5
ZjU5YmYwHhcNMjQxMjIyMTg1MTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzM2ZjljZjc5N2E2ZGVjMDg0NTVkMTcwMWI5MDFjZTc3NzkyYjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseBSbWcsrve2zt9DDjtO9Z8zSJUP
K8o1mF0NSsSzY5vAz5Ewy2rX95FhD93WTneVdLh8mSEVf4p0TdnHCo1aforoxAt7
qv89tZ3aNUhdMjiyfsBntBVZkqLXizH3iypX7a0T3VV+koHZsIrcm7Eowq4jpLP6
y0oI62PzE48lfAbt1yfqS6k/Y+yOxS8j/ValJmg3a14C3O4Lwz/SIcPBL21DanTo
dZlUWzjnRGwwBXSwWivRLvYYeco+jwFTp/LOOOOJc/ydSxp0baCiEUkXro5zoRaT
R8kmtusJ/24WJbu96VBYCM/RlyW38c75q8CCDxJ5th6yltkWZxtR8XTBJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDM2+c95em3sCEVdFwG5Ac53eSs+MB8GA1UdIwQY
MBaAFOk5VA/Ra2M1Afv3RBp0b8Vvn1m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQt
OWY1MmM3MzBhY2RmLzEvTXpiNXozbDZiZXdJUlYwWEFia0J6bmQ1S3o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQtOWY1MmM3MzBhY2Rm
LzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHgRMA0G
CSqGSIb3DQEBCwUAA4IBAQB+GtXkm2k/pBK6RCLPAIXaEAbz8HnHa17T1UQBlgXm
xHtGKQk4VU9m9I7QHLQK/YszRtD+g+ju9K+NKv+i/kMUH9gO/KlrNuemobnerHBE
crhJH/FF66rKdK2rhegzot7OPwlgXk2mOS45ffOyCGtIgqNyA/MOGMoZmxEleX/h
PofGR4ciNBA2nahutvP+PzosUrElNPHsXSP65Jsz9h8pUx71m+RSaLwK9TxSxEvH
CDydHKJntwPZM9dOJNwBbvBIVxDx7GJQyCmaha/e7848LAQlbqDgxVK9s0i8ultt
6EuxZMhr0jJ6t1eqzB2tDekeiw7l2pWHlDWgvxHrdb06
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:24 2024 by rpki-client on console.sobornost.net