Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/11EB2Knbz3gr9fgShHZIybDBD7Y.roa
File: 11EB2Knbz3gr9fgShHZIybDBD7Y.roa (raw, json)
Hash identifier: WUk4tx+rnVaCkIrxEizqgj/sTx0wcLi7/OcJ5Bdukcw=
Subject key identifier: D7:51:01:D8:A9:DB:CF:78:2B:F5:F8:12:84:76:48:C9:B0:C1:0F:B6
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0193ACDE7F8EA6F8182CBBEE08D7DE2DE249
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/11EB2Knbz3gr9fgShHZIybDBD7Y.roa
Signing time: Mon 09 Dec 2024 19:21:22 +0000
ROA not before: Mon 09 Dec 2024 19:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:e9c5::/32 maxlen: 32
2a14:2dc0::/32 maxlen: 32
2a14:2dc1::/32 maxlen: 32
2a14:2dc2::/32 maxlen: 32
2a14:2dc3::/32 maxlen: 32
2a14:2dc4::/32 maxlen: 32
2a14:2dc5::/32 maxlen: 32
2a14:2dc6::/32 maxlen: 32
2a14:2dc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:de:7f:8e:a6:f8:18:2c:bb:ee:08:d7:de:2d:e2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Dec 9 19:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d75101d8a9dbcf782bf5f812847648c9b0c10fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:31:b6:b6:9a:52:5c:8c:6a:c6:90:6a:eb:
8e:0e:21:37:23:63:29:ab:59:68:e6:c7:27:21:f4:
3f:a2:04:e5:36:1a:2b:02:fa:09:28:0b:f1:4d:91:
d5:84:77:34:a3:f7:f4:98:c2:6b:0f:2b:72:e2:7b:
d4:e0:07:44:0d:2c:ef:0d:30:b9:5f:4c:08:e4:f7:
7b:0a:69:c4:e8:6f:e2:1d:e8:8e:15:87:6f:ad:64:
24:17:4b:d0:60:9a:86:8b:d8:12:9b:b7:db:7f:e8:
29:8e:3f:2e:1d:22:79:6e:ab:36:79:46:d5:64:96:
e2:2d:ff:49:c9:d0:37:11:9f:58:45:d9:88:41:b8:
70:6d:fd:9f:63:97:0f:1f:fb:41:d1:45:8e:03:1b:
0d:b5:c3:b4:a8:cb:6f:fd:35:33:ca:f6:b9:f8:f9:
c5:98:84:68:c3:b3:89:c6:90:aa:aa:07:32:17:ec:
3d:7b:72:cb:24:50:ce:ba:00:e4:a7:6c:ce:0b:2e:
e6:ed:e8:9f:27:21:e4:58:67:df:ae:23:60:78:b9:
29:9e:df:94:6d:50:cc:fa:4b:14:25:80:04:4e:9d:
a3:3d:81:14:4c:e7:0a:1d:6f:a5:e2:41:98:b1:51:
a0:87:2c:98:49:62:63:3a:2b:ae:78:f8:20:fd:e2:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:01:D8:A9:DB:CF:78:2B:F5:F8:12:84:76:48:C9:B0:C1:0F:B6
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/11EB2Knbz3gr9fgShHZIybDBD7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e9c5::/32
2a14:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:0f:8d:1a:95:50:d6:92:84:4c:9c:1f:a0:c4:70:7c:c2:a2:
36:b7:39:c6:da:a0:ff:62:39:89:36:58:f5:e1:da:56:5a:c4:
1c:70:fb:cc:74:de:74:da:bf:04:da:4f:4a:2f:e9:94:e1:69:
0c:0b:9b:85:90:6d:92:ee:79:21:29:c4:55:11:41:f4:c4:04:
77:f3:55:9f:da:08:c0:c2:bc:92:6b:f7:c3:22:f1:20:29:e0:
1d:9b:92:f8:98:6a:d9:54:53:bb:50:47:a3:dc:9f:c9:c0:0b:
e5:86:59:6c:ed:08:7d:aa:80:fe:31:f6:75:6d:38:40:e0:fa:
2b:6b:61:8c:00:45:fd:8f:8f:e1:ad:49:9b:5c:af:1d:3b:4c:
e5:35:3c:0c:f4:03:06:e6:62:11:4e:0b:e8:21:b5:29:80:c6:
5d:5b:38:03:e9:b5:5c:84:58:82:ef:89:bd:0e:24:71:97:1a:
ff:f0:fa:b7:db:cb:01:0e:ac:e0:13:fa:38:5e:7d:34:1f:98:
e4:fb:b7:33:51:b9:2d:6c:81:30:05:2f:4e:8e:98:bb:c2:b2:
61:f6:0d:48:e5:01:c3:a7:5a:71:64:bf:8a:f9:4a:e6:20:a4:
2c:78:d8:de:8c:c0:e3:26:19:87:3c:e6:74:de:3e:1c:0a:d9:
6d:05:9c:03
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZOs3n+OpvgYLLvuCNfeLeJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQxMjA5MTkyMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzUxMDFkOGE5ZGJjZjc4MmJmNWY4MTI4NDc2NDhjOWIwYzEwZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTkxtraaUlyMasaQauuODiE3I2Mp
q1lo5scnIfQ/ogTlNhorAvoJKAvxTZHVhHc0o/f0mMJrDyty4nvU4AdEDSzvDTC5
X0wI5Pd7CmnE6G/iHeiOFYdvrWQkF0vQYJqGi9gSm7fbf+gpjj8uHSJ5bqs2eUbV
ZJbiLf9JydA3EZ9YRdmIQbhwbf2fY5cPH/tB0UWOAxsNtcO0qMtv/TUzyva5+PnF
mIRow7OJxpCqqgcyF+w9e3LLJFDOugDkp2zOCy7m7eifJyHkWGffriNgeLkpnt+U
bVDM+ksUJYAETp2jPYEUTOcKHW+l4kGYsVGghyyYSWJjOiuuePgg/eL1YQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNdRAdip2894K/X4EoR2SMmwwQ+2MB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvMTFFQjJLbmJ6M2dyOWZnU2hIWkl5YkRCRDdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhHpxQMF
AyoULcAwDQYJKoZIhvcNAQELBQADggEBAG0PjRqVUNaShEycH6DEcHzCoja3Ocba
oP9iOYk2WPXh2lZaxBxw+8x03nTavwTaT0ov6ZThaQwLm4WQbZLueSEpxFURQfTE
BHfzVZ/aCMDCvJJr98Mi8SAp4B2bkviYatlUU7tQR6Pcn8nAC+WGWWztCH2qgP4x
9nVtOEDg+itrYYwARf2Pj+GtSZtcrx07TOU1PAz0AwbmYhFOC+ghtSmAxl1bOAPp
tVyEWILvib0OJHGXGv/w+rfbywEOrOAT+jhefTQfmOT7tzNRuS1sgTAFL06OmLvC
smH2DUjlAcOnWnFkv4r5SuYgpCx42N6MwOMmGYc85nTePhwK2W0FnAM=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:47 2024 by rpki-client on console.sobornost.net