Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/aBCnOlqPZmuqGlTHcCGbXw_T77M.roa
File: aBCnOlqPZmuqGlTHcCGbXw_T77M.roa (raw, json)
Hash identifier: b8fkwgzowEnFUl6rEqVnWm+L3tWrzUc0TakMTEoV3uo=
Subject key identifier: 68:10:A7:3A:5A:8F:66:6B:AA:1A:54:C7:70:21:9B:5F:0F:D3:EF:B3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01936DD278424DB1919B5B26F316E5EF43F9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/aBCnOlqPZmuqGlTHcCGbXw_T77M.roa
Signing time: Wed 27 Nov 2024 13:32:09 +0000
ROA not before: Wed 27 Nov 2024 13:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 104.239.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:d2:78:42:4d:b1:91:9b:5b:26:f3:16:e5:ef:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 27 13:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6810a73a5a8f666baa1a54c770219b5f0fd3efb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:a6:9d:0a:ad:cc:db:bc:73:2d:52:4b:6b:
94:63:bd:01:15:40:1b:bf:c4:7b:84:1d:fa:cf:25:
ed:24:c6:93:e7:06:6e:3c:0c:f9:40:70:ca:76:5c:
55:00:d5:1f:61:a2:85:b2:36:3f:54:b4:c1:99:62:
7a:87:99:dc:25:e3:db:44:68:25:f2:0c:4e:23:86:
05:25:8a:21:25:f1:fc:06:7c:fe:11:28:db:90:fc:
4a:12:96:d2:81:0e:4b:db:97:bc:39:29:d3:df:ee:
93:32:75:e0:e5:4f:4b:7a:85:33:6f:3b:c8:48:21:
31:d1:37:58:e8:d6:2b:15:09:51:bf:37:a6:68:10:
e5:09:09:3d:f5:8c:a3:1b:61:6a:a8:7f:cf:c3:e3:
2e:49:fa:a0:3d:2d:91:dd:15:3d:67:30:4a:36:d3:
6f:9f:dd:48:99:5b:57:6e:39:78:06:f7:e5:fb:47:
f2:59:ab:d3:c7:17:66:7a:5b:09:3d:3c:9f:ad:96:
d4:56:cc:12:ad:23:6c:f3:21:b7:55:25:a2:c4:a4:
45:66:ee:fb:f7:a4:d1:79:24:08:26:3e:59:e2:9b:
56:7b:14:95:f5:9c:ed:66:08:00:96:c6:a4:af:2e:
23:02:ce:c2:9e:1a:74:39:03:59:96:0f:26:7a:54:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:A7:3A:5A:8F:66:6B:AA:1A:54:C7:70:21:9B:5F:0F:D3:EF:B3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/aBCnOlqPZmuqGlTHcCGbXw_T77M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.51.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f7:19:bc:e7:03:f1:c3:f3:60:ad:9a:97:64:83:a0:bb:ff:
44:75:37:4e:d5:0b:66:17:d2:6d:82:4b:8b:da:85:19:66:fb:
2c:6b:53:38:f9:19:e5:7d:e1:35:59:5a:c9:f3:19:2b:4f:bb:
7b:97:00:3d:c7:de:fb:67:59:3c:8a:fc:69:d1:11:c5:5b:62:
a3:7b:f9:2c:ac:08:a9:65:29:98:a0:8e:c8:1c:87:a4:9a:c4:
df:1b:27:db:f3:55:ff:c8:e5:41:78:8a:47:00:36:4c:51:99:
f2:b3:0b:f6:ae:76:a8:66:e8:7e:9c:6b:da:46:15:39:e4:c8:
c5:99:1b:ed:6b:78:b5:8d:f3:8d:70:61:75:a3:f9:57:5f:9f:
31:ed:f5:ca:b7:94:f6:42:50:88:08:18:c1:85:13:cf:35:f4:
9c:9e:21:51:a7:0a:a5:62:eb:77:4f:6e:c4:4f:80:d9:5c:96:
59:cb:83:7e:f5:e0:47:68:f3:bf:e9:6f:15:1e:8f:7d:74:e7:
4c:dc:c4:76:ca:27:67:c1:ff:09:5f:fd:9d:67:e4:ea:17:d2:
52:27:19:68:5b:30:e7:ba:54:64:e9:b8:0f:b1:35:9f:e5:51:
19:e7:2b:f4:73:19:24:8c:1f:31:a8:46:a9:e7:5c:47:7e:b1:
70:38:be:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNt0nhCTbGRm1sm8xbl70P5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQxMTI3MTMzMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODEwYTczYTVhOGY2NjZiYWExYTU0Yzc3MDIxOWI1ZjBmZDNlZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroGmnQqtzNu8cy1SS2uUY70BFUAb
v8R7hB36zyXtJMaT5wZuPAz5QHDKdlxVANUfYaKFsjY/VLTBmWJ6h5ncJePbRGgl
8gxOI4YFJYohJfH8Bnz+ESjbkPxKEpbSgQ5L25e8OSnT3+6TMnXg5U9LeoUzbzvI
SCEx0TdY6NYrFQlRvzemaBDlCQk99YyjG2FqqH/Pw+MuSfqgPS2R3RU9ZzBKNtNv
n91ImVtXbjl4Bvfl+0fyWavTxxdmelsJPTyfrZbUVswSrSNs8yG3VSWixKRFZu77
96TReSQIJj5Z4ptWexSV9ZztZggAlsakry4jAs7Cnhp0OQNZlg8melRV9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGgQpzpaj2ZrqhpUx3Ahm18P0++zMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvYUJDbk9scVBabXVxR2xUSGNDR2JYd19UNzdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO8zMA0G
CSqGSIb3DQEBCwUAA4IBAQAh9xm85wPxw/NgrZqXZIOgu/9EdTdO1QtmF9JtgkuL
2oUZZvssa1M4+RnlfeE1WVrJ8xkrT7t7lwA9x977Z1k8ivxp0RHFW2Kje/ksrAip
ZSmYoI7IHIekmsTfGyfb81X/yOVBeIpHADZMUZnyswv2rnaoZuh+nGvaRhU55MjF
mRvta3i1jfONcGF1o/lXX58x7fXKt5T2QlCICBjBhRPPNfScniFRpwqlYut3T27E
T4DZXJZZy4N+9eBHaPO/6W8VHo99dOdM3MR2yidnwf8JX/2dZ+TqF9JSJxloWzDn
ulRk6bgPsTWf5VEZ5yv0cxkkjB8xqEap51xHfrFwOL4u
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:42 2024 by rpki-client on console.sobornost.net