Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/ncezFr4aPSYhYlYWdmoXFm9pkLI.roa
File: ncezFr4aPSYhYlYWdmoXFm9pkLI.roa (raw, json)
Hash identifier: bDg2PeVJwRH65ijvlR8fcMgyMfZ/SIpdEGA+fjmvtQw=
Subject key identifier: 9D:C7:B3:16:BE:1A:3D:26:21:62:56:16:76:6A:17:16:6F:69:90:B2
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 018CC6B927CB592A1A7894A98F937DB84C48
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/ncezFr4aPSYhYlYWdmoXFm9pkLI.roa
Signing time: Mon 01 Jan 2024 20:31:12 +0000
ROA not before: Mon 01 Jan 2024 20:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44823
IP address blocks: 193.16.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:27:cb:59:2a:1a:78:94:a9:8f:93:7d:b8:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Jan 1 20:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dc7b316be1a3d2621625616766a17166f6990b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e2:d2:cd:c5:01:97:28:2f:2c:b2:84:a1:36:
48:63:12:54:1d:84:50:64:de:77:17:a1:56:71:a4:
08:66:e9:27:58:94:87:c9:a9:e7:8c:4b:af:da:da:
45:6f:4e:51:6f:f3:25:77:40:b2:d6:f6:46:25:cd:
6f:4f:30:d8:00:e9:6b:95:d5:a1:ca:f5:4d:5f:52:
19:a5:64:be:89:4a:a1:cf:ba:f2:51:8b:2b:9a:5e:
a4:f9:4a:30:be:f8:30:c4:0a:e7:15:74:70:10:7d:
dd:f0:15:2f:00:22:5a:21:03:85:b0:ba:8d:ae:80:
50:13:87:34:f3:5c:7f:72:e4:f3:73:f0:d5:9b:00:
ac:aa:75:df:ba:10:60:81:2c:a4:16:79:94:18:ad:
75:7f:01:74:29:a0:07:8d:66:1d:fa:b7:80:12:29:
4e:46:58:f6:6c:cc:b9:53:20:00:cd:f2:f0:ad:bd:
f7:32:3a:a7:8a:fa:95:cc:6f:52:69:1b:f8:f4:99:
b3:e7:a3:14:d6:4a:dc:57:bc:27:92:5c:03:bb:0d:
a8:5b:72:ae:f6:7f:6e:73:d9:5e:b5:3a:cd:55:26:
10:35:6f:dc:7b:db:9b:c7:e9:52:9a:48:42:29:39:
b9:c0:e2:b1:b6:f3:18:a7:25:ec:f1:e2:d9:9e:7b:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C7:B3:16:BE:1A:3D:26:21:62:56:16:76:6A:17:16:6F:69:90:B2
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/ncezFr4aPSYhYlYWdmoXFm9pkLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.152.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2b:48:24:2d:0c:e7:4e:5d:47:37:a0:45:8a:eb:59:28:65:
00:79:05:9b:b4:de:26:72:16:39:1f:c7:7b:8b:63:8a:9a:f4:
bc:99:81:e3:81:4f:98:c0:be:32:31:33:e4:dd:ae:76:0e:1f:
17:0c:ae:9e:a8:b4:7a:ec:f2:a4:eb:9b:59:d3:53:1a:fd:8a:
85:95:29:59:fc:91:86:e3:0e:c7:77:a0:09:30:5d:09:68:06:
e5:69:9b:d8:13:4f:4a:44:b7:70:0d:9d:d1:52:83:4b:0e:81:
fb:8b:b3:11:d3:f3:34:7d:c0:4c:4e:96:a0:cc:06:b2:f4:d6:
be:c7:e7:0c:36:7e:5d:fa:4a:d3:0c:2b:86:4a:81:7b:63:f6:
8f:ef:18:c3:80:17:af:3d:d3:e4:43:d0:32:fb:36:4f:fc:a4:
fa:a3:d8:6c:4b:1b:44:b6:0b:e4:3e:dc:bb:03:cd:1b:cc:22:
ad:0d:a8:2d:b6:4e:72:31:ba:ec:37:eb:1e:55:1d:aa:2f:d6:
c9:9a:3c:7f:50:95:1c:21:51:96:cd:e5:58:fc:e3:72:4c:56:
ac:19:aa:84:0a:b0:8a:8a:6b:2a:28:94:fb:3b:b6:56:a5:ba:
19:d2:e1:71:72:1c:1a:4a:ff:b4:7a:48:7c:e7:30:78:85:78:
8d:e5:f5:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuSfLWSoaeJSpj5N9uExIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmQ0MGVmMzQwNjY0NzE1YzhjMmNmYTUwZTNkNjFiYTI4
NmUwMzcwHhcNMjQwMTAxMjAzMTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGM3YjMxNmJlMWEzZDI2MjE2MjU2MTY3NjZhMTcxNjZmNjk5MGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguLSzcUBlygvLLKEoTZIYxJUHYRQ
ZN53F6FWcaQIZuknWJSHyannjEuv2tpFb05Rb/Mld0Cy1vZGJc1vTzDYAOlrldWh
yvVNX1IZpWS+iUqhz7ryUYsrml6k+UowvvgwxArnFXRwEH3d8BUvACJaIQOFsLqN
roBQE4c081x/cuTzc/DVmwCsqnXfuhBggSykFnmUGK11fwF0KaAHjWYd+reAEilO
Rlj2bMy5UyAAzfLwrb33MjqnivqVzG9SaRv49Jmz56MU1krcV7wnklwDuw2oW3Ku
9n9uc9letTrNVSYQNW/ce9ubx+lSmkhCKTm5wOKxtvMYpyXs8eLZnnsd9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ3Hsxa+Gj0mIWJWFnZqFxZvaZCyMB8GA1UdIwQY
MBaAFNC9QO80BmRxXIws+lDj1huihuA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEt
MmNkMDliNTc3MDY2LzEvbmNlekZyNGFQU1loWWxZV2Rtb1hGbTlwa0xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEtMmNkMDliNTc3MDY2
LzEvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRCYMA0G
CSqGSIb3DQEBCwUAA4IBAQA6K0gkLQznTl1HN6BFiutZKGUAeQWbtN4mchY5H8d7
i2OKmvS8mYHjgU+YwL4yMTPk3a52Dh8XDK6eqLR67PKk65tZ01Ma/YqFlSlZ/JGG
4w7Hd6AJMF0JaAblaZvYE09KRLdwDZ3RUoNLDoH7i7MR0/M0fcBMTpagzAay9Na+
x+cMNn5d+krTDCuGSoF7Y/aP7xjDgBevPdPkQ9Ay+zZP/KT6o9hsSxtEtgvkPty7
A80bzCKtDagttk5yMbrsN+seVR2qL9bJmjx/UJUcIVGWzeVY/ONyTFasGaqECrCK
imsqKJT7O7ZWpboZ0uFxchwaSv+0ekh85zB4hXiN5fVH
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:27 2024 by rpki-client on console.sobornost.net