Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/LuQ7yvLINkVtebloXIhlp7Kcee8.roa
File: LuQ7yvLINkVtebloXIhlp7Kcee8.roa (raw, json)
Hash identifier: WgfW+SLZtaxzPjwcE/Z45ojvnCoJV0XFm2uibSWBgFs=
Subject key identifier: 2E:E4:3B:CA:F2:C8:36:45:6D:79:B9:68:5C:88:65:A7:B2:9C:79:EF
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 01936D94374CF3FB4474E68FB0950F0B53FC
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/LuQ7yvLINkVtebloXIhlp7Kcee8.roa
Signing time: Wed 27 Nov 2024 12:24:10 +0000
ROA not before: Wed 27 Nov 2024 12:24:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60216
IP address blocks: 176.121.20.0/22 maxlen: 24
176.121.20.0/24 maxlen: 24
176.121.21.0/24 maxlen: 24
176.121.22.0/24 maxlen: 24
176.121.23.0/24 maxlen: 24
2001:67c:fb0::/48 maxlen: 48
2001:67c:18d0::/48 maxlen: 48
2001:67c:1bc0::/48 maxlen: 48
2001:67c:2390::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:94:37:4c:f3:fb:44:74:e6:8f:b0:95:0f:0b:53:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Nov 27 12:24:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ee43bcaf2c836456d79b9685c8865a7b29c79ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:04:01:53:a8:b5:d0:6d:d0:35:ca:60:4d:
6b:7a:bc:66:ca:f2:1f:51:53:7a:b1:c6:63:a9:d7:
72:6c:6f:1d:67:c3:2a:46:e7:2a:e5:c9:09:7a:6a:
87:6a:56:1a:9d:95:4f:9a:11:fd:93:22:44:ba:a7:
9e:36:95:0e:0d:0c:95:c5:28:c6:06:0a:08:4e:96:
3c:b0:18:5b:95:cb:95:c1:aa:fe:79:e8:2a:c7:6b:
18:6a:e5:e7:a5:68:05:f2:94:5b:47:5f:fb:8c:50:
7d:03:5a:6e:f1:4f:31:a2:05:bd:6c:ac:89:e7:c4:
2a:89:9e:46:c3:22:7e:5e:60:18:e9:5b:29:bc:79:
65:0b:55:a4:27:56:91:ba:e4:52:05:a5:7b:d3:d8:
2f:6e:98:7c:e6:66:11:36:6d:b5:79:a4:60:cb:3e:
c9:4c:44:58:e2:fd:7b:44:7d:3b:88:69:03:98:e0:
75:05:32:36:12:98:dd:9b:58:e1:16:14:3d:5d:b2:
18:ab:8a:a5:cd:7e:03:b0:09:1c:4c:6b:a0:61:07:
90:a6:a2:55:c3:f7:30:1d:b3:eb:77:99:01:5c:2b:
f3:3c:90:35:30:30:55:13:86:42:95:12:d3:e1:37:
82:76:0e:c9:2a:3e:cc:91:70:99:5f:70:10:03:73:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:3B:CA:F2:C8:36:45:6D:79:B9:68:5C:88:65:A7:B2:9C:79:EF
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/LuQ7yvLINkVtebloXIhlp7Kcee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.20.0/22
IPv6:
2001:67c:fb0::/48
2001:67c:18d0::/48
2001:67c:1bc0::/48
2001:67c:2390::/48
Signature Algorithm: sha256WithRSAEncryption
3a:90:aa:c2:b6:7c:6c:24:f9:0c:a8:ad:f9:9a:52:60:f2:2d:
06:bc:7d:ac:31:fc:34:1e:a0:2a:d4:7b:e3:b5:bb:39:89:ef:
5b:19:b1:d8:ff:4d:88:4f:8f:4b:28:c8:5e:02:22:36:b2:89:
b7:23:77:31:9f:87:94:79:6c:63:d4:50:7c:2d:f8:60:dc:ec:
99:9d:d4:b9:69:37:f9:1a:e5:9e:35:d2:2a:44:6a:82:0d:60:
a2:66:a4:07:88:bb:42:86:6b:81:87:e8:85:2a:f5:b9:02:84:
bd:a9:5a:75:de:48:dc:9f:f3:24:c0:cb:93:b2:3b:39:78:fe:
5e:1a:53:da:3a:57:32:50:d8:55:c6:c9:79:39:52:b3:15:a5:
59:9f:fc:28:68:15:29:17:a7:b2:58:dc:6b:42:d0:90:1f:82:
71:bb:26:cf:92:a7:a2:a1:72:28:7f:c2:d3:88:03:6f:61:fe:
f7:7b:f7:1e:e9:06:96:5d:92:20:8a:29:af:20:1e:02:96:46:
63:73:e1:fc:f1:ff:ce:9f:3c:76:31:f1:97:31:ae:cb:88:0d:
03:fd:67:59:33:4f:57:53:28:6f:db:45:60:2a:aa:38:12:75:
73:c1:51:a6:ef:09:70:2e:e0:85:cd:94:4c:db:db:9d:1f:d9:
66:cb:a8:4f
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZNtlDdM8/tEdOaPsJUPC1P8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2JhNDM1NzY2Njc2NjRhZDZmMjlhNjY2MjcwZTMzNTc4
MzZmMWEwHhcNMjQxMTI3MTIyNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWU0M2JjYWYyYzgzNjQ1NmQ3OWI5Njg1Yzg4NjVhN2IyOWM3OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZMEAVOotdBt0DXKYE1rerxmyvIf
UVN6scZjqddybG8dZ8MqRucq5ckJemqHalYanZVPmhH9kyJEuqeeNpUODQyVxSjG
BgoITpY8sBhblcuVwar+eegqx2sYauXnpWgF8pRbR1/7jFB9A1pu8U8xogW9bKyJ
58QqiZ5GwyJ+XmAY6VspvHllC1WkJ1aRuuRSBaV709gvbph85mYRNm21eaRgyz7J
TERY4v17RH07iGkDmOB1BTI2Epjdm1jhFhQ9XbIYq4qlzX4DsAkcTGugYQeQpqJV
w/cwHbPrd5kBXCvzPJA1MDBVE4ZClRLT4TeCdg7JKj7MkXCZX3AQA3OxHwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFC7kO8ryyDZFbXm5aFyIZaeynHnvMB8GA1UdIwQY
MBaAFKt7pDV2ZnZkrW8ppmYnDjNXg28aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYt
MjNhYzc1ODA0OGVjLzEvTHVRN3l2TElOa1Z0ZWJsb1hJaGxwN0tjZWU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYtMjNhYzc1ODA0OGVj
LzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQCsHkUMCoE
AgACMCQDBwAgAQZ8D7ADBwAgAQZ8GNADBwAgAQZ8G8ADBwAgAQZ8I5AwDQYJKoZI
hvcNAQELBQADggEBADqQqsK2fGwk+QyorfmaUmDyLQa8fawx/DQeoCrUe+O1uzmJ
71sZsdj/TYhPj0soyF4CIjayibcjdzGfh5R5bGPUUHwt+GDc7Jmd1LlpN/ka5Z41
0ipEaoINYKJmpAeIu0KGa4GH6IUq9bkChL2pWnXeSNyf8yTAy5OyOzl4/l4aU9o6
VzJQ2FXGyXk5UrMVpVmf/ChoFSkXp7JY3GtC0JAfgnG7Js+Sp6Khcih/wtOIA29h
/vd79x7pBpZdkiCKKa8gHgKWRmNz4fzx/86fPHYx8ZcxrsuIDQP9Z1kzT1dTKG/b
RWAqqjgSdXPBUabvCXAu4IXNlEzb250f2WbLqE8=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:37 2024 by rpki-client on console.sobornost.net