Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ruD_MdKoVjeb7pTCnVyRuK1IziY.roa
File: ruD_MdKoVjeb7pTCnVyRuK1IziY.roa (raw, json)
Hash identifier: zSloTeF0n9FAKuKGnvM+4HamgGafjUPiqRoCBtvi6v8=
Subject key identifier: AE:E0:FF:31:D2:A8:56:37:9B:EE:94:C2:9D:5C:91:B8:AD:48:CE:26
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 018EF13378838F0D803CD3E481F963C6B6A1
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ruD_MdKoVjeb7pTCnVyRuK1IziY.roa
Signing time: Thu 18 Apr 2024 12:34:25 +0000
ROA not before: Thu 18 Apr 2024 12:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202364
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.109.0/24 maxlen: 24
185.119.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:33:78:83:8f:0d:80:3c:d3:e4:81:f9:63:c6:b6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Apr 18 12:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aee0ff31d2a856379bee94c29d5c91b8ad48ce26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:1a:b0:4e:73:0f:09:a8:b5:4f:94:57:5c:
50:36:a2:8f:42:8f:dc:f6:26:1b:ed:e0:2b:a3:de:
56:9f:ea:e1:25:ec:37:8d:81:14:f4:d0:f6:be:28:
e1:91:d4:4e:b8:3a:d6:a3:f5:4b:45:10:05:f2:b9:
02:12:de:9c:be:f1:3e:55:32:40:5c:87:12:77:55:
6b:24:e1:0e:75:cf:10:42:6f:9d:90:b6:ef:29:bb:
48:e8:2a:f8:48:29:c6:a2:f3:d9:32:ac:37:db:5f:
bd:e6:b4:86:af:09:31:4f:17:67:e6:3f:03:5f:ff:
59:3f:40:ac:fa:e9:7f:be:57:be:b8:76:67:31:ad:
21:10:d3:94:31:31:73:6e:e3:28:a7:e4:97:29:fa:
20:15:22:ef:29:41:33:ef:40:d1:b9:68:18:b4:45:
d5:5c:06:8f:d5:d8:aa:00:33:79:cb:f8:27:fc:52:
be:5e:48:7b:07:14:45:98:d0:36:d9:2e:52:43:7c:
94:51:37:e6:ad:85:3c:f5:84:f0:61:93:6a:75:a8:
0a:b0:28:70:3e:c1:23:e3:6a:73:c3:7c:ae:69:7b:
70:d9:59:4a:0e:7e:a4:5c:6d:4e:3e:8b:ce:1c:e6:
33:19:ca:b5:ec:60:a0:42:63:c4:8e:f9:e1:bb:15:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E0:FF:31:D2:A8:56:37:9B:EE:94:C2:9D:5C:91:B8:AD:48:CE:26
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/ruD_MdKoVjeb7pTCnVyRuK1IziY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/23
185.119.111.0/24
Signature Algorithm: sha256WithRSAEncryption
76:14:45:1e:a9:81:99:95:c5:0f:7d:ef:61:27:5f:05:e6:9e:
bb:9f:e9:83:82:20:ae:27:58:ab:09:5b:a5:f5:2f:23:99:d2:
c9:89:43:19:a7:29:88:f8:06:3f:27:de:8d:a9:c7:ee:e2:9a:
be:55:33:f1:53:83:42:22:52:89:08:5d:ba:a3:93:e7:ef:ee:
d8:d3:62:2b:74:78:5f:65:13:21:3a:f2:6a:d1:50:ac:e5:d9:
b6:5b:e1:29:49:bb:de:71:62:3f:76:00:0b:66:47:0f:27:aa:
7d:08:84:46:0c:8b:12:1a:f6:fd:4d:70:52:57:78:b2:0e:af:
f6:35:61:b9:57:a2:d0:f3:c1:4f:c3:ea:cb:da:0f:13:2f:a9:
1a:bb:85:90:04:d1:be:f4:38:1b:f8:ad:09:7a:a1:c3:9d:1f:
d7:ce:db:a4:3b:f7:39:ce:60:39:ef:6d:87:8a:78:d9:1a:ee:
ab:d1:b5:e1:b3:cb:cc:ef:81:8c:35:1a:aa:30:9b:97:32:4a:
e7:07:56:1e:98:c2:08:c4:3d:9a:b2:2c:e6:d8:12:e8:4f:e4:
dc:76:0c:45:f1:af:d2:e3:8d:fc:e4:b7:19:2c:d8:b0:85:72:
3c:ec:fa:fd:5c:8d:79:a7:75:3e:0b:dc:ab:09:f3:e1:ae:11:
b0:a6:f5:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7xM3iDjw2APNPkgfljxrahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk
ZjI3ZTkwHhcNMjQwNDE4MTIzNDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWUwZmYzMWQyYTg1NjM3OWJlZTk0YzI5ZDVjOTFiOGFkNDhjZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIIasE5zDwmotU+UV1xQNqKPQo/c
9iYb7eAro95Wn+rhJew3jYEU9ND2vijhkdROuDrWo/VLRRAF8rkCEt6cvvE+VTJA
XIcSd1VrJOEOdc8QQm+dkLbvKbtI6Cr4SCnGovPZMqw321+95rSGrwkxTxdn5j8D
X/9ZP0Cs+ul/vle+uHZnMa0hENOUMTFzbuMop+SXKfogFSLvKUEz70DRuWgYtEXV
XAaP1diqADN5y/gn/FK+Xkh7BxRFmNA22S5SQ3yUUTfmrYU89YTwYZNqdagKsChw
PsEj42pzw3yuaXtw2VlKDn6kXG1OPovOHOYzGcq17GCgQmPEjvnhuxVM+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK7g/zHSqFY3m+6Uwp1ckbitSM4mMB8GA1UdIwQY
MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt
MjNiYTRhOTFhMTA1LzEvcnVEX01kS29WamViN3BUQ25WeVJ1SzFJemlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1
LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXdsAwQA
uXdvMA0GCSqGSIb3DQEBCwUAA4IBAQB2FEUeqYGZlcUPfe9hJ18F5p67n+mDgiCu
J1irCVul9S8jmdLJiUMZpymI+AY/J96Nqcfu4pq+VTPxU4NCIlKJCF26o5Pn7+7Y
02IrdHhfZRMhOvJq0VCs5dm2W+EpSbvecWI/dgALZkcPJ6p9CIRGDIsSGvb9TXBS
V3iyDq/2NWG5V6LQ88FPw+rL2g8TL6kau4WQBNG+9Dgb+K0JeqHDnR/XztukO/c5
zmA5722HinjZGu6r0bXhs8vM74GMNRqqMJuXMkrnB1YemMIIxD2asizm2BLoT+Tc
dgxF8a/S44385LcZLNiwhXI87Pr9XI15p3U+C9yrCfPhrhGwpvWa
-----END CERTIFICATE-----
Generated at Wed Sep 11 05:45:08 2024 by rpki-client on console.sobornost.net