Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/r8OPxgzqKffjDFPD_qu2Ct5hBps.roa
File: r8OPxgzqKffjDFPD_qu2Ct5hBps.roa (raw, json)
Hash identifier: jHj/OKmz1I6NZxlgNCva0XxHbmqZeLE2A6mAYuG2u7s=
Subject key identifier: AF:C3:8F:C6:0C:EA:29:F7:E3:0C:53:C3:FE:AB:B6:0A:DE:61:06:9B
Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial: 01920505B80329A4915CE4E1A3E515937B74
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/r8OPxgzqKffjDFPD_qu2Ct5hBps.roa
Signing time: Wed 18 Sep 2024 12:05:13 +0000
ROA not before: Wed 18 Sep 2024 12:05:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214171
IP address blocks: 2001:39c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:05:b8:03:29:a4:91:5c:e4:e1:a3:e5:15:93:7b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
Validity
Not Before: Sep 18 12:05:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afc38fc60cea29f7e30c53c3feabb60ade61069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:24:a7:15:c9:1b:e2:94:40:e3:93:2a:b4:
37:be:28:cd:7d:db:6b:67:e0:a1:1e:1e:7e:49:52:
51:7f:29:de:ba:a8:5b:ea:d1:c5:c4:c8:64:e7:ab:
52:db:11:37:b9:f5:c6:3f:c7:d0:9a:32:01:96:b2:
b2:03:89:4a:22:74:44:d3:49:8e:cb:35:f9:c5:0b:
8f:36:1a:e7:1a:01:e6:7c:11:98:16:1e:84:6c:26:
48:49:ba:8e:f2:b9:dc:73:ef:ef:fd:f9:f4:34:35:
cc:57:60:be:32:70:96:57:9c:42:86:f3:73:35:58:
48:4e:c3:b9:c4:91:8f:03:3b:f9:70:c1:d3:ba:ac:
39:5c:98:c4:0e:38:bf:a4:51:ab:80:ce:e3:3c:55:
48:f6:53:30:cb:d6:8e:d9:fb:72:5e:4e:ac:61:ad:
3a:0c:c7:c5:60:d9:33:cd:0d:e5:24:d9:3a:9f:97:
e1:0b:80:66:be:a4:c5:e6:e9:b2:44:44:c2:c7:8d:
79:f8:6a:d5:6f:f3:b7:ba:f3:62:92:5e:98:6b:f3:
6d:09:a4:60:e1:cf:46:45:0e:a0:03:90:06:50:f5:
a9:78:0b:56:bd:95:e7:77:e6:5c:20:5a:0f:e1:cf:
af:a0:23:68:aa:f1:e2:03:c6:51:1e:17:0f:42:c1:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:8F:C6:0C:EA:29:F7:E3:0C:53:C3:FE:AB:B6:0A:DE:61:06:9B
X509v3 Authority Key Identifier:
keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/r8OPxgzqKffjDFPD_qu2Ct5hBps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:48:eb:a0:3e:ac:4a:b9:5a:63:30:4f:92:ea:48:a8:4b:79:
a9:13:15:98:bc:40:ba:18:40:08:94:93:37:9f:05:a9:d6:09:
ed:c9:7c:82:8f:f5:40:01:cc:15:84:1f:bf:51:50:bf:cf:1e:
39:2d:13:5f:bd:dc:8d:d2:8d:fe:98:d3:a4:cb:d4:61:cd:21:
05:49:c4:35:f1:35:de:d1:e0:29:8e:f8:92:78:81:91:5b:5f:
73:2e:13:7a:ba:23:d0:7d:3f:9d:fd:21:5e:67:b9:24:cd:c3:
f3:05:8f:0a:c7:18:45:a9:26:70:c4:9f:f6:91:48:35:67:04:
d1:ca:0a:71:e0:48:e7:4c:de:c1:bf:87:ce:09:82:fc:31:e3:
aa:74:83:d8:4c:73:ba:dd:9b:a8:32:70:de:78:40:cd:e5:ee:
f9:0c:5d:f5:f0:08:9d:5b:bd:3e:ba:e7:bc:51:89:fb:04:4e:
a4:35:d6:cc:16:7e:b1:b4:ba:d6:97:16:50:59:51:00:bd:e0:
2f:d8:de:3f:bf:ff:0a:eb:ce:60:10:16:73:a0:81:6d:0a:be:
3f:8a:f3:6e:08:fa:03:95:3c:0f:68:7f:12:1d:3b:b9:45:05:
ad:24:7e:77:9c:20:d3:76:a7:0a:7f:ee:eb:35:3c:e7:75:cf:
69:c2:05:2e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZIFBbgDKaSRXOTho+UVk3t0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDRmMjBlNDg4MjA3YjAyNWI3MDAwMGQwOGU2NTNhNjQz
Y2Y3OTAwHhcNMjQwOTE4MTIwNTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmMzOGZjNjBjZWEyOWY3ZTMwYzUzYzNmZWFiYjYwYWRlNjEwNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh0kpxXJG+KUQOOTKrQ3vijNfdtr
Z+ChHh5+SVJRfyneuqhb6tHFxMhk56tS2xE3ufXGP8fQmjIBlrKyA4lKInRE00mO
yzX5xQuPNhrnGgHmfBGYFh6EbCZISbqO8rncc+/v/fn0NDXMV2C+MnCWV5xChvNz
NVhITsO5xJGPAzv5cMHTuqw5XJjEDji/pFGrgM7jPFVI9lMwy9aO2ftyXk6sYa06
DMfFYNkzzQ3lJNk6n5fhC4BmvqTF5umyRETCx415+GrVb/O3uvNikl6Ya/NtCaRg
4c9GRQ6gA5AGUPWpeAtWvZXnd+ZcIFoP4c+voCNoqvHiA8ZRHhcPQsEjRwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFK/Dj8YM6in34wxTw/6rtgreYQabMB8GA1UdIwQY
MBaAFFbU8g5IggewJbcAANCOZTpkPPeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYt
OTA4ZTY5MmNmM2MyLzEvcjhPUHhnenFLZmZqREZQRF9xdTJDdDVoQnBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYtOTA4ZTY5MmNmM2My
LzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE5wDAN
BgkqhkiG9w0BAQsFAAOCAQEAlkjroD6sSrlaYzBPkupIqEt5qRMVmLxAuhhACJST
N58FqdYJ7cl8go/1QAHMFYQfv1FQv88eOS0TX73cjdKN/pjTpMvUYc0hBUnENfE1
3tHgKY74kniBkVtfcy4Teroj0H0/nf0hXme5JM3D8wWPCscYRakmcMSf9pFINWcE
0coKceBI50zewb+HzgmC/DHjqnSD2Exzut2bqDJw3nhAzeXu+Qxd9fAInVu9Prrn
vFGJ+wROpDXWzBZ+sbS61pcWUFlRAL3gL9jeP7//CuvOYBAWc6CBbQq+P4rzbgj6
A5U8D2h/Eh07uUUFrSR+d5wg03anCn/u6zU853XPacIFLg==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:24 2024 by rpki-client on console.sobornost.net