Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/vLfQTgC_o1P2ydKSjDxRTjNcLDY.roa
File: vLfQTgC_o1P2ydKSjDxRTjNcLDY.roa (raw, json)
Hash identifier: 6OUbFlvc3ZEpdHAVnVfBYHZ4ihyFfhNQ+xQ5JA514IQ=
Subject key identifier: BC:B7:D0:4E:00:BF:A3:53:F6:C9:D2:92:8C:3C:51:4E:33:5C:2C:36
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B68D104AAE9955A686CCB7D07819F0
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/vLfQTgC_o1P2ydKSjDxRTjNcLDY.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211639
IP address blocks: 185.13.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8d:10:4a:ae:99:55:a6:86:cc:b7:d0:78:19:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcb7d04e00bfa353f6c9d2928c3c514e335c2c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:db:d3:bf:0b:5e:a6:3a:d4:95:00:81:8f:
4a:28:9f:38:89:cd:01:bc:40:eb:85:44:40:92:b3:
20:2c:a6:1b:11:32:7a:2b:e1:11:86:19:39:de:01:
14:4b:43:94:69:12:01:64:e8:89:0d:73:77:34:80:
2b:b7:14:df:db:19:1f:08:f8:08:83:d9:2e:60:e7:
c2:40:61:ae:0b:d7:41:c7:d2:1b:d5:74:3b:f6:8f:
b1:65:b3:fc:32:e8:be:12:4d:bc:36:5e:d7:40:96:
7b:24:02:75:4a:5d:1c:c0:89:f9:bc:b4:21:eb:77:
b7:35:d5:b3:dc:1f:03:a2:66:5b:1f:20:55:12:44:
00:1f:00:31:e6:d7:d5:56:4c:1c:ae:51:2f:50:7a:
79:67:6e:02:75:d9:b3:65:da:ad:09:ae:7e:74:6b:
6a:d0:36:4c:18:e1:8f:fd:1b:53:4f:75:c2:1f:58:
c2:5c:c4:70:87:d9:fb:0b:59:0a:5e:6e:b7:9d:dd:
f4:c2:65:a0:16:6f:b8:8f:6d:36:3b:28:8c:a4:0c:
71:f5:a7:91:fa:a2:4a:65:0e:12:93:bb:46:32:b6:
e7:1f:3b:f1:1c:fd:08:cd:5f:34:b4:7d:96:5f:f7:
2e:c1:86:b6:f9:50:48:71:b6:fc:54:ab:82:5b:1d:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B7:D0:4E:00:BF:A3:53:F6:C9:D2:92:8C:3C:51:4E:33:5C:2C:36
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/vLfQTgC_o1P2ydKSjDxRTjNcLDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.33.0/24
Signature Algorithm: sha256WithRSAEncryption
46:1f:35:73:22:1b:e4:8e:06:0f:5b:f3:62:0c:00:56:5d:4f:
2c:5a:fe:fe:cf:38:8c:e5:81:53:ea:31:d7:b2:4e:72:d6:69:
fa:6f:7d:ee:e0:e8:ce:65:56:6c:2c:46:fd:fd:68:2f:b7:4d:
7e:97:3a:78:4b:28:b2:9c:df:8c:ea:08:bd:27:37:65:89:c5:
d4:56:05:29:73:ec:ee:09:31:a0:4f:e0:ad:db:a0:b2:78:7a:
97:80:f0:ac:3e:de:d9:da:fc:9b:8d:b4:08:65:8f:19:9c:fa:
40:ae:49:18:ca:d6:e7:0d:e4:32:fa:94:4f:0d:2b:63:fd:42:
25:b3:e0:29:5b:a2:b1:2d:6c:dd:57:a1:8d:79:38:cd:7a:d6:
8d:08:f2:b9:2d:cf:5b:72:ef:ee:c8:4a:50:76:23:05:6f:9c:
40:8a:04:fc:2a:3b:5f:f5:98:85:b5:bf:35:5e:be:01:87:35:
db:60:82:bf:d5:9b:24:96:52:38:d6:42:d7:41:b8:31:a3:2c:
c1:e6:88:cf:2f:c6:d6:d9:5e:1a:e0:78:b9:cd:0d:09:9f:17:
fa:f7:79:ba:a0:f1:57:09:36:40:41:7b:54:49:4f:b8:b2:74:
ec:b2:8e:0a:b7:04:1c:f0:64:b3:10:50:1e:2b:a1:92:c3:06:
99:e6:e7:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDto0QSq6ZVaaGzLfQeBnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjQwMTAxMDYyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2I3ZDA0ZTAwYmZhMzUzZjZjOWQyOTI4YzNjNTE0ZTMzNWMyYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAbb078LXqY61JUAgY9KKJ84ic0B
vEDrhURAkrMgLKYbETJ6K+ERhhk53gEUS0OUaRIBZOiJDXN3NIArtxTf2xkfCPgI
g9kuYOfCQGGuC9dBx9Ib1XQ79o+xZbP8Mui+Ek28Nl7XQJZ7JAJ1Sl0cwIn5vLQh
63e3NdWz3B8DomZbHyBVEkQAHwAx5tfVVkwcrlEvUHp5Z24CddmzZdqtCa5+dGtq
0DZMGOGP/RtTT3XCH1jCXMRwh9n7C1kKXm63nd30wmWgFm+4j202OyiMpAxx9aeR
+qJKZQ4Sk7tGMrbnHzvxHP0IzV80tH2WX/cuwYa2+VBIcbb8VKuCWx3+yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLy30E4Av6NT9snSkow8UU4zXCw2MB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvdkxmUVRnQ19vMVAyeWRLU2pEeFJUak5jTERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ0hMA0G
CSqGSIb3DQEBCwUAA4IBAQBGHzVzIhvkjgYPW/NiDABWXU8sWv7+zziM5YFT6jHX
sk5y1mn6b33u4OjOZVZsLEb9/Wgvt01+lzp4SyiynN+M6gi9JzdlicXUVgUpc+zu
CTGgT+Ct26CyeHqXgPCsPt7Z2vybjbQIZY8ZnPpArkkYytbnDeQy+pRPDStj/UIl
s+ApW6KxLWzdV6GNeTjNetaNCPK5Lc9bcu/uyEpQdiMFb5xAigT8Kjtf9ZiFtb81
Xr4BhzXbYIK/1ZskllI41kLXQbgxoyzB5ojPL8bW2V4a4Hi5zQ0Jnxf693m6oPFX
CTZAQXtUSU+4snTsso4KtwQc8GSzEFAeK6GSwwaZ5ufM
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net