Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/XC-x0vNLFG2zHEi4HUIC5ajP5xo.roa
File: XC-x0vNLFG2zHEi4HUIC5ajP5xo.roa (raw, json)
Hash identifier: 5LnTVRE/Vl4L87sAu0fSZieWuvR+M+I7HfWwWbUi5IY=
Subject key identifier: 5C:2F:B1:D2:F3:4B:14:6D:B3:1C:48:B8:1D:42:02:E5:A8:CF:E7:1A
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019392B53702FEFE8E7F71B30BD474D6DF49
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/XC-x0vNLFG2zHEi4HUIC5ajP5xo.roa
Signing time: Wed 04 Dec 2024 17:26:09 +0000
ROA not before: Wed 04 Dec 2024 17:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212263
IP address blocks: 83.167.184.0/22 maxlen: 22
185.222.21.0/24 maxlen: 24
2a10:f300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:b5:37:02:fe:fe:8e:7f:71:b3:0b:d4:74:d6:df:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Dec 4 17:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c2fb1d2f34b146db31c48b81d4202e5a8cfe71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:ef:c1:82:a9:1c:23:70:2c:b6:cd:61:ef:
50:76:7c:9d:9d:73:d2:6b:32:96:c2:69:44:38:cb:
60:64:8c:ea:b3:10:2d:e2:74:5b:a4:b9:91:d7:44:
e9:c8:22:e3:2d:d8:a7:06:5d:b8:8a:ba:76:5d:19:
95:d2:ae:36:a8:2e:3f:c5:27:82:d6:98:89:30:2c:
44:01:16:5b:ff:9d:65:3b:75:4c:f6:f3:3e:00:ba:
fa:9a:b3:86:05:24:e3:2a:94:d8:22:5a:b9:67:27:
8e:81:aa:a2:6b:1d:c6:a5:34:1c:f7:8c:85:4e:2c:
13:ce:e8:51:1b:54:fa:91:a4:e0:62:3b:69:72:26:
dd:fc:4b:23:45:61:4a:4a:08:1e:70:37:59:e6:02:
cf:8a:e7:69:c2:62:6f:21:a2:17:e6:af:3b:c1:fb:
fc:99:e7:6a:c6:ac:8c:5f:02:98:f6:70:e5:95:e7:
ed:7a:e4:8e:e2:5d:b9:58:9c:d9:30:f7:bf:30:18:
57:07:82:30:ba:cb:d0:98:b6:66:0c:d8:b3:8b:e7:
7b:04:0e:b9:37:69:d3:1c:e0:ae:a3:d2:4b:b0:c1:
ca:d3:0c:9e:4d:e6:89:0f:8c:2a:1d:90:15:db:1f:
95:6e:95:d6:3e:15:85:06:7d:4e:a8:12:56:c7:3a:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2F:B1:D2:F3:4B:14:6D:B3:1C:48:B8:1D:42:02:E5:A8:CF:E7:1A
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/XC-x0vNLFG2zHEi4HUIC5ajP5xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.167.184.0/22
185.222.21.0/24
IPv6:
2a10:f300::/29
Signature Algorithm: sha256WithRSAEncryption
96:97:e2:74:7d:70:78:78:2c:c6:a9:35:d6:9e:e3:05:e6:b6:
c1:2b:ba:18:91:97:30:c1:05:65:21:a4:3b:03:6b:9b:64:f5:
1f:9b:ba:05:bd:4a:1f:da:02:16:6b:1a:44:8c:f1:fe:99:16:
59:f7:14:da:33:a2:7b:69:1b:51:b2:3e:c1:a1:e9:c1:4c:d3:
e6:99:a4:30:d7:bc:32:d9:39:2d:e2:4e:ad:48:e3:40:da:f5:
94:d1:a8:e8:51:ec:72:2c:aa:69:7f:89:22:a3:a6:e2:c0:26:
13:63:4a:95:73:06:b7:22:80:b3:14:25:8f:cf:49:ea:5c:4f:
04:05:30:f5:e6:0e:7d:fd:b6:07:60:9f:6f:b4:bd:5e:3e:88:
fc:cd:63:38:28:17:f0:37:2c:7a:da:fa:78:5d:66:3e:c9:19:
7a:e7:04:1f:ce:b9:9d:8e:46:b2:9b:8a:f5:d7:78:d0:5d:ed:
50:11:8e:93:c1:f3:ae:d0:aa:f2:1f:f5:cc:3e:f2:45:40:bb:
22:7a:29:70:d0:4b:0e:d9:ed:eb:52:62:5e:e4:19:5f:f1:23:
c8:5d:9c:da:7a:64:e1:01:ca:5f:84:ba:ea:c4:d4:1b:e1:d1:
ad:92:8b:9f:dd:47:39:73:94:dc:b7:8d:09:b5:bb:f7:77:01:
ec:5a:75:35
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZOStTcC/v6Of3GzC9R01t9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2
YWRjOWYwHhcNMjQxMjA0MTcyNjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzJmYjFkMmYzNGIxNDZkYjMxYzQ4YjgxZDQyMDJlNWE4Y2ZlNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOHvwYKpHCNwLLbNYe9QdnydnXPS
azKWwmlEOMtgZIzqsxAt4nRbpLmR10TpyCLjLdinBl24irp2XRmV0q42qC4/xSeC
1piJMCxEARZb/51lO3VM9vM+ALr6mrOGBSTjKpTYIlq5ZyeOgaqiax3GpTQc94yF
TiwTzuhRG1T6kaTgYjtpcibd/EsjRWFKSggecDdZ5gLPiudpwmJvIaIX5q87wfv8
medqxqyMXwKY9nDllefteuSO4l25WJzZMPe/MBhXB4IwusvQmLZmDNizi+d7BA65
N2nTHOCuo9JLsMHK0wyeTeaJD4wqHZAV2x+VbpXWPhWFBn1OqBJWxzpZ2QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFwvsdLzSxRtsxxIuB1CAuWoz+caMB8GA1UdIwQY
MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt
MzIwOGRlMzljMDlkLzEvWEMteDB2TkxGRzJ6SEVpNEhVSUM1YWpQNXhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk
LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCU6e4AwQA
ud4VMA0EAgACMAcDBQMqEPMAMA0GCSqGSIb3DQEBCwUAA4IBAQCWl+J0fXB4eCzG
qTXWnuMF5rbBK7oYkZcwwQVlIaQ7A2ubZPUfm7oFvUof2gIWaxpEjPH+mRZZ9xTa
M6J7aRtRsj7BoenBTNPmmaQw17wy2Tkt4k6tSONA2vWU0ajoUexyLKppf4kio6bi
wCYTY0qVcwa3IoCzFCWPz0nqXE8EBTD15g59/bYHYJ9vtL1ePoj8zWM4KBfwNyx6
2vp4XWY+yRl65wQfzrmdjkaym4r113jQXe1QEY6TwfOu0KryH/XMPvJFQLsieilw
0EsO2e3rUmJe5Blf8SPIXZzaemThAcpfhLrqxNQb4dGtkouf3Uc5c5Tct40Jtbv3
dwHsWnU1
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:42 2024 by rpki-client on console.sobornost.net