Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/t9T-V2pu0pxF6_RT9_SBE5gC1VY.roa
File: t9T-V2pu0pxF6_RT9_SBE5gC1VY.roa (raw, json)
Hash identifier: lBsRlQYPpl3VfCj1epXIgW1whv0RsX7VJhEfKIFXGQY=
Subject key identifier: B7:D4:FE:57:6A:6E:D2:9C:45:EB:F4:53:F7:F4:81:13:98:02:D5:56
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 01907730B2F61826757E9326E26196955A3B
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/t9T-V2pu0pxF6_RT9_SBE5gC1VY.roa
Signing time: Wed 03 Jul 2024 06:03:18 +0000
ROA not before: Wed 03 Jul 2024 06:03:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199637
IP address blocks: 193.24.96.0/24 maxlen: 24
2a13:e480::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:30:b2:f6:18:26:75:7e:93:26:e2:61:96:95:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Jul 3 06:03:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7d4fe576a6ed29c45ebf453f7f481139802d556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:be:0f:04:38:45:ca:14:f2:da:58:7a:69:
47:e6:67:8c:d2:6b:a3:35:a3:7c:0c:82:30:03:dc:
20:03:da:a4:d2:fd:aa:89:b0:a8:2e:bf:3d:b1:3f:
80:f3:1d:f2:c0:50:3d:04:32:6d:d6:17:a1:a1:39:
c2:64:af:fc:b2:d5:c7:38:d1:82:67:9b:6d:ee:e2:
e4:6d:01:7e:29:91:d2:7f:f6:49:02:09:e2:b8:b0:
ee:e7:7e:f7:70:3e:18:f4:d8:2c:af:1b:0b:87:d1:
b8:34:d0:f1:85:bf:e5:56:d9:a0:79:8b:0e:15:bb:
2e:fd:ce:9a:36:2c:40:82:74:84:be:da:59:12:1f:
e9:6c:7b:47:7d:94:24:33:85:8b:12:c1:de:c3:7b:
7c:11:c0:52:f3:8e:59:c6:dd:91:f1:48:38:2f:d7:
1b:46:ca:53:b1:94:0f:a2:a8:1e:6d:37:06:b5:d9:
9f:9d:9d:03:49:92:bd:61:e8:73:b8:8f:4c:1c:8c:
e5:0c:d8:22:40:3a:1c:f8:08:aa:5f:89:da:0b:34:
ce:6f:38:7e:64:3d:ab:0b:dd:ab:74:22:3b:ce:4b:
3f:4c:fb:51:4b:1d:37:f2:fa:7a:cd:6d:a1:28:c0:
8b:cd:9e:83:82:46:56:ec:69:1d:2c:d4:3f:de:a4:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:FE:57:6A:6E:D2:9C:45:EB:F4:53:F7:F4:81:13:98:02:D5:56
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/t9T-V2pu0pxF6_RT9_SBE5gC1VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.96.0/24
IPv6:
2a13:e480::/29
Signature Algorithm: sha256WithRSAEncryption
1b:bd:02:6d:8b:e0:e2:a4:e3:a9:70:c4:48:92:ce:16:2f:76:
81:ee:72:33:f5:c1:99:f9:d9:90:79:a4:a5:17:84:9b:fc:6e:
fc:be:7b:e3:ac:ea:7b:35:e8:56:1c:ef:8f:8b:58:b5:95:54:
de:c8:63:d1:85:64:63:ae:07:9a:62:5f:d9:f0:c5:b9:c2:e3:
8b:70:38:99:99:91:bf:4e:b7:45:bc:23:e7:69:1a:d2:f1:44:
78:87:b8:94:24:0f:3a:6f:9d:b5:e7:ac:f4:bd:ce:c5:76:78:
11:0a:ab:47:cb:1e:52:5f:e2:63:bb:dc:71:0a:25:b8:7f:b9:
a8:12:2f:3f:17:78:bc:5c:6b:9b:50:4f:91:ee:f3:9e:d6:e3:
53:ba:ea:76:f2:85:4c:c6:41:ce:50:7e:12:d0:94:dc:36:30:
0d:e8:ab:22:71:20:a0:9b:6b:ed:bf:17:9f:88:60:bd:c3:08:
2e:38:1d:fd:d2:16:05:10:79:29:43:cf:f7:bb:32:c7:09:84:
d1:e1:c3:fd:20:7a:43:ec:02:7c:fc:00:cf:85:67:e2:8d:03:
6d:a7:ca:c3:7d:34:4d:35:d7:7e:27:56:8d:f3:df:4c:a0:bf:
84:49:1b:38:82:9f:9f:df:72:d9:d7:4b:b9:6e:62:93:e0:e5:
95:ce:43:ac
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZB3MLL2GCZ1fpMm4mGWlVo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjFjOGI2MWZmNGFiOTc1YTJmNmM2N2QwYmNlNjM3OTM2
MmUyZmUwHhcNMjQwNzAzMDYwMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2Q0ZmU1NzZhNmVkMjljNDVlYmY0NTNmN2Y0ODExMzk4MDJkNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDq+DwQ4RcoU8tpYemlH5meM0muj
NaN8DIIwA9wgA9qk0v2qibCoLr89sT+A8x3ywFA9BDJt1hehoTnCZK/8stXHONGC
Z5tt7uLkbQF+KZHSf/ZJAgniuLDu5373cD4Y9NgsrxsLh9G4NNDxhb/lVtmgeYsO
Fbsu/c6aNixAgnSEvtpZEh/pbHtHfZQkM4WLEsHew3t8EcBS845Zxt2R8Ug4L9cb
RspTsZQPoqgebTcGtdmfnZ0DSZK9YehzuI9MHIzlDNgiQDoc+AiqX4naCzTObzh+
ZD2rC92rdCI7zks/TPtRSx038vp6zW2hKMCLzZ6DgkZW7GkdLNQ/3qQ00wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLfU/ldqbtKcRev0U/f0gROYAtVWMB8GA1UdIwQY
MBaAFDthyLYf9KuXWi9sZ9C85jeTYuL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYzBlZDEtNTY2Ni00YmI3LWJiN2Mt
N2I2Mjc1ODJmZDJkLzEvdDlULVYycHUwcHhGNl9SVDlfU0JFNWdDMVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mYzBlZDEtNTY2Ni00YmI3LWJiN2MtN2I2Mjc1ODJmZDJk
LzEvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRhgMA0E
AgACMAcDBQMqE+SAMA0GCSqGSIb3DQEBCwUAA4IBAQAbvQJti+DipOOpcMRIks4W
L3aB7nIz9cGZ+dmQeaSlF4Sb/G78vnvjrOp7NehWHO+Pi1i1lVTeyGPRhWRjrgea
Yl/Z8MW5wuOLcDiZmZG/TrdFvCPnaRrS8UR4h7iUJA86b52156z0vc7FdngRCqtH
yx5SX+Jju9xxCiW4f7moEi8/F3i8XGubUE+R7vOe1uNTuup28oVMxkHOUH4S0JTc
NjAN6KsicSCgm2vtvxefiGC9wwguOB390hYFEHkpQ8/3uzLHCYTR4cP9IHpD7AJ8
/ADPhWfijQNtp8rDfTRNNdd+J1aN899MoL+ESRs4gp+f33LZ10u5bmKT4OWVzkOs
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:42 2024 by rpki-client on console.sobornost.net