Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/bNelJBCUgujx2KXFAk4-sf3t-yo.roa
File: bNelJBCUgujx2KXFAk4-sf3t-yo.roa (raw, json)
Hash identifier: wJVYMKHZM/GtExgpMnH1kgDmOxnGcPl/T15ieMcR30c=
Subject key identifier: 6C:D7:A5:24:10:94:82:E8:F1:D8:A5:C5:02:4E:3E:B1:FD:ED:FB:2A
Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial: 018CC727319813659A4C82FD26A83C7DA21C
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/bNelJBCUgujx2KXFAk4-sf3t-yo.roa
Signing time: Mon 01 Jan 2024 22:31:23 +0000
ROA not before: Mon 01 Jan 2024 22:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39904
IP address blocks: 46.227.168.0/21 maxlen: 32
91.215.12.0/22 maxlen: 32
195.189.0.0/22 maxlen: 32
2a02:7a00::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:31:98:13:65:9a:4c:82:fd:26:a8:3c:7d:a2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cd7a524109482e8f1d8a5c5024e3eb1fdedfb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:36:5c:61:4f:f2:89:d7:37:e2:3a:8b:7b:
f2:e6:46:32:79:04:d7:f7:af:66:20:f9:7c:38:52:
54:91:12:be:84:a7:e0:39:6a:f1:73:dc:e0:53:0a:
7d:64:06:a7:54:fc:79:77:96:c1:9b:08:e1:d5:57:
1d:97:81:7b:7c:dc:60:4d:29:ad:ab:61:b4:06:c9:
30:13:13:ce:4d:f0:bc:5a:33:73:13:b4:a9:bc:79:
51:d1:1b:bb:f1:30:23:54:08:4b:9b:21:4d:88:d2:
ef:2b:7a:ee:2b:a0:3e:21:a2:6d:ec:0d:40:39:f9:
19:e3:e1:0d:1c:69:d8:b0:a6:6f:b6:95:c6:2b:9f:
13:1d:f7:8d:c0:9a:ba:20:a0:64:6e:2f:9b:25:81:
45:09:45:c6:00:c2:ea:8f:e3:27:1a:2c:07:f4:b7:
49:87:de:26:ca:48:cd:62:9d:41:3b:ab:92:32:5d:
ac:16:7d:15:8f:34:7a:e9:c0:d0:f4:e7:98:f3:0b:
9b:08:a0:2e:ae:d7:7f:f5:5c:1f:e4:1d:d3:91:f3:
98:54:0b:f3:63:04:73:91:f3:b2:f2:9a:0c:99:62:
30:dd:1d:4d:e4:e0:b6:3c:87:2d:64:53:42:4d:bd:
c9:a3:37:13:6e:39:69:0d:0a:4c:35:b5:59:81:3a:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D7:A5:24:10:94:82:E8:F1:D8:A5:C5:02:4E:3E:B1:FD:ED:FB:2A
X509v3 Authority Key Identifier:
keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/bNelJBCUgujx2KXFAk4-sf3t-yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.168.0/21
91.215.12.0/22
195.189.0.0/22
IPv6:
2a02:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
87:ea:76:69:73:4f:a7:da:5d:df:f3:9b:1e:d0:25:f0:49:e0:
15:df:3b:45:13:42:87:d7:6e:b7:47:f1:6e:9c:17:a7:2e:de:
2a:e3:06:bc:23:1b:19:3d:94:fe:61:1a:cb:89:b6:f9:f0:a3:
b9:28:37:4c:22:1b:45:b4:2c:5b:f5:0e:d0:1b:df:b8:69:27:
2c:a4:3b:b4:c8:43:18:d2:83:7f:4a:3e:fd:a9:bd:bb:07:bc:
eb:6d:ea:cc:41:85:a7:47:1b:59:ab:a7:b6:c3:08:12:29:f4:
d6:31:8a:0b:d3:ac:22:f9:57:f9:df:ba:5f:a3:f4:3d:0f:54:
8d:f5:65:5e:bc:9d:61:6a:ff:c2:f4:0e:e7:3f:b7:51:42:2a:
1c:98:e8:44:0e:3e:e2:32:da:95:b0:08:19:09:3f:92:0a:ce:
40:62:3b:7d:94:f4:e1:fa:87:0f:c8:8c:6b:f7:9a:68:db:01:
62:bc:50:65:ab:8f:91:b6:75:7e:b4:cb:ef:40:9a:54:56:a8:
e7:ba:b5:3e:1f:42:bd:d6:d9:72:e5:d3:33:1b:6f:e7:18:2e:
6d:31:8d:2d:e1:df:5f:c1:09:ba:e6:81:67:4e:b1:82:3d:2d:
33:bc:48:26:9d:1b:05:d6:3a:1a:55:24:fd:2e:22:a8:e6:24:
b7:c7:38:db
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzHJzGYE2WaTIL9Jqg8faIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk
MGE4YzQwHhcNMjQwMTAxMjIzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2Q3YTUyNDEwOTQ4MmU4ZjFkOGE1YzUwMjRlM2ViMWZkZWRmYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoE2XGFP8onXN+I6i3vy5kYyeQTX
969mIPl8OFJUkRK+hKfgOWrxc9zgUwp9ZAanVPx5d5bBmwjh1Vcdl4F7fNxgTSmt
q2G0BskwExPOTfC8WjNzE7SpvHlR0Ru78TAjVAhLmyFNiNLvK3ruK6A+IaJt7A1A
OfkZ4+ENHGnYsKZvtpXGK58THfeNwJq6IKBkbi+bJYFFCUXGAMLqj+MnGiwH9LdJ
h94mykjNYp1BO6uSMl2sFn0VjzR66cDQ9OeY8wubCKAurtd/9Vwf5B3TkfOYVAvz
YwRzkfOy8poMmWIw3R1N5OC2PIctZFNCTb3JozcTbjlpDQpMNbVZgTrBdwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGzXpSQQlILo8dilxQJOPrH97fsqMB8GA1UdIwQY
MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt
ODY2YjJiMDIxZmM1LzEvYk5lbEpCQ1VndWp4MktYRkFrNC1zZjN0LXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1
LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLuOoAwQC
W9cMAwQCw70AMA0EAgACMAcDBQAqAnoAMA0GCSqGSIb3DQEBCwUAA4IBAQCH6nZp
c0+n2l3f85se0CXwSeAV3ztFE0KH1263R/FunBenLt4q4wa8IxsZPZT+YRrLibb5
8KO5KDdMIhtFtCxb9Q7QG9+4aScspDu0yEMY0oN/Sj79qb27B7zrberMQYWnRxtZ
q6e2wwgSKfTWMYoL06wi+Vf537pfo/Q9D1SN9WVevJ1hav/C9A7nP7dRQiocmOhE
Dj7iMtqVsAgZCT+SCs5AYjt9lPTh+ocPyIxr95po2wFivFBlq4+RtnV+tMvvQJpU
VqjnurU+H0K91tly5dMzG2/nGC5tMY0t4d9fwQm65oFnTrGCPS0zvEgmnRsF1joa
VST9LiKo5iS3xzjb
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:42 2024 by rpki-client on console.sobornost.net