Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/eJAUK6XY9z2KV1JSJmpNJAiciw8.roa
File: eJAUK6XY9z2KV1JSJmpNJAiciw8.roa (raw, json)
Hash identifier: LmC1D+kl2WuCZsLhnT8rRIsnnxa6t7t8NSgqjvqYeHk=
Subject key identifier: 78:90:14:2B:A5:D8:F7:3D:8A:57:52:52:26:6A:4D:24:08:9C:8B:0F
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 0193785F45BD6D61396B01EFD2AAD9BA7A7F
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/eJAUK6XY9z2KV1JSJmpNJAiciw8.roa
Signing time: Fri 29 Nov 2024 14:42:09 +0000
ROA not before: Fri 29 Nov 2024 14:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 193.246.62.0/23 maxlen: 23
193.246.62.0/24 maxlen: 24
193.246.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:78:5f:45:bd:6d:61:39:6b:01:ef:d2:aa:d9:ba:7a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Nov 29 14:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7890142ba5d8f73d8a575252266a4d24089c8b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:8a:78:73:49:c8:36:cf:74:e7:b8:d5:23:
7a:f8:8d:2a:c3:4a:7a:b7:69:0e:ce:22:e1:f9:e7:
87:d5:28:61:75:3c:d4:86:c2:90:ba:8f:a8:2f:4f:
7a:6d:16:c1:f0:87:85:8a:3f:ef:c3:4e:1c:b7:e7:
9f:8f:d3:d3:ef:cd:12:af:22:e6:00:8a:52:6e:d1:
fd:4a:f0:63:6b:b5:06:cf:83:ec:35:39:ae:2d:3c:
65:8e:e3:3b:6d:d9:c1:0a:b7:af:9d:91:df:3f:23:
f8:cd:80:e1:eb:ca:5e:77:49:cf:25:59:b9:49:e6:
8c:9d:e1:24:b7:7f:68:95:88:a3:f3:a6:85:b6:f6:
3a:4d:c7:7c:51:ed:c1:05:fa:4f:a4:95:e4:5a:73:
f3:13:1e:b5:4f:2e:b9:a0:39:d1:14:94:05:a4:a2:
c4:8a:0b:9e:f9:af:ca:2f:38:bf:04:1e:37:81:7d:
93:0b:d9:f9:27:e4:1e:e2:4f:af:b2:db:b9:fa:49:
b8:1d:62:0f:0e:85:5a:f1:af:08:47:c6:4a:80:b7:
79:cc:fc:5d:e3:44:22:f9:f5:dc:dd:5a:1a:0b:5a:
9d:02:35:eb:a6:92:87:44:e9:19:c2:ad:0a:58:af:
23:69:c3:1a:7d:cd:ce:9f:dd:00:b4:4d:e5:b9:42:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:14:2B:A5:D8:F7:3D:8A:57:52:52:26:6A:4D:24:08:9C:8B:0F
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/eJAUK6XY9z2KV1JSJmpNJAiciw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.62.0/23
Signature Algorithm: sha256WithRSAEncryption
10:c1:c2:63:0d:3e:60:45:26:63:bb:cd:d7:38:31:d8:23:2e:
d6:a5:39:4a:88:5c:9a:8c:da:c5:57:39:4a:92:1a:fa:df:ba:
ea:3e:70:33:4c:fd:58:eb:e7:cd:a4:fd:a1:58:6f:75:3a:07:
c1:9a:09:76:72:88:96:68:d7:1f:69:ac:e3:ad:7b:b8:82:07:
df:7d:2b:ea:a6:b9:68:72:ce:42:08:b6:f2:c1:c8:e0:ea:4e:
c4:ce:3f:bf:6a:da:e3:f3:f1:95:43:8a:f4:f8:9a:59:8e:69:
f2:3d:f9:8d:4b:69:8a:e8:f8:89:2b:0a:f4:ab:db:ba:3b:86:
6e:bf:9b:e3:60:86:f7:81:24:53:4a:0e:68:82:da:2d:29:db:
1f:7d:c2:2c:cb:27:22:4c:0f:bc:e0:a2:15:d5:ae:2a:64:89:
e0:6b:f4:69:8e:52:e4:03:0a:78:5f:1b:61:27:b9:a8:ce:be:
47:c5:e9:59:19:12:a8:fa:56:55:4c:27:66:a1:bf:01:aa:e4:
8f:e3:8c:72:80:36:99:f5:57:44:50:1e:d3:f8:8c:15:6e:aa:
8f:d0:ff:36:b4:82:48:b1:dd:9e:c4:41:77:63:cb:b7:e7:be:
59:24:c3:f0:97:06:45:f4:6c:2e:4d:36:9f:e7:80:b9:82:6a:
77:36:31:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN4X0W9bWE5awHv0qrZunp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNDY2NDQwNjZjZWFmMzlkM2FmYjBmZDczNWIwMTljZWM5
ZGEzNjQwHhcNMjQxMTI5MTQ0MjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODkwMTQyYmE1ZDhmNzNkOGE1NzUyNTIyNjZhNGQyNDA4OWM4YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB+KeHNJyDbPdOe41SN6+I0qw0p6
t2kOziLh+eeH1ShhdTzUhsKQuo+oL096bRbB8IeFij/vw04ct+efj9PT780SryLm
AIpSbtH9SvBja7UGz4PsNTmuLTxljuM7bdnBCrevnZHfPyP4zYDh68ped0nPJVm5
SeaMneEkt39olYij86aFtvY6Tcd8Ue3BBfpPpJXkWnPzEx61Ty65oDnRFJQFpKLE
igue+a/KLzi/BB43gX2TC9n5J+Qe4k+vstu5+km4HWIPDoVa8a8IR8ZKgLd5zPxd
40Qi+fXc3VoaC1qdAjXrppKHROkZwq0KWK8jacMafc3On90AtE3luUIUCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHiQFCul2Pc9ildSUiZqTSQInIsPMB8GA1UdIwQY
MBaAFK5GZEBmzq8506+w/XNbAZzsnaNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMt
OGQ5ZjExZjkxNmU5LzEvZUpBVUs2WFk5ejJLVjFKU0ptcE5KQWljaXc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMtOGQ5ZjExZjkxNmU5
LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwfY+MA0G
CSqGSIb3DQEBCwUAA4IBAQAQwcJjDT5gRSZju83XODHYIy7WpTlKiFyajNrFVzlK
khr637rqPnAzTP1Y6+fNpP2hWG91OgfBmgl2coiWaNcfaazjrXu4ggfffSvqprlo
cs5CCLbywcjg6k7Ezj+/atrj8/GVQ4r0+JpZjmnyPfmNS2mK6PiJKwr0q9u6O4Zu
v5vjYIb3gSRTSg5ogtotKdsffcIsyyciTA+84KIV1a4qZInga/RpjlLkAwp4Xxth
J7mozr5HxelZGRKo+lZVTCdmob8BquSP44xygDaZ9VdEUB7T+IwVbqqP0P82tIJI
sd2exEF3Y8u3575ZJMPwlwZF9GwuTTaf54C5gmp3NjHp
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:38 2024 by rpki-client on console.sobornost.net