Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/JGcP38WMB-vF8vFixFQMN_MIdCE.roa
File: JGcP38WMB-vF8vFixFQMN_MIdCE.roa (raw, json)
Hash identifier: xkTqzNhB8XS4RRoHuH9O7pt7+bOz5p4um2sO1Xism7A=
Subject key identifier: 24:67:0F:DF:C5:8C:07:EB:C5:F2:F1:62:C4:54:0C:37:F3:08:74:21
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 01930116A53C407C737FFDB1876FBAC24D43
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/JGcP38WMB-vF8vFixFQMN_MIdCE.roa
Signing time: Wed 06 Nov 2024 10:48:01 +0000
ROA not before: Wed 06 Nov 2024 10:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33921
IP address blocks: 45.92.79.0/24 maxlen: 24
84.246.112.0/24 maxlen: 24
84.246.113.0/24 maxlen: 24
84.246.114.0/24 maxlen: 24
84.246.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:16:a5:3c:40:7c:73:7f:fd:b1:87:6f:ba:c2:4d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Nov 6 10:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24670fdfc58c07ebc5f2f162c4540c37f3087421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:24:04:ca:e3:d6:8c:45:0c:7b:fc:c9:fe:
c7:05:09:b3:a2:ba:d9:c8:06:f2:2f:56:97:c0:28:
88:b1:f1:c4:fd:5d:ff:ab:9e:5c:23:4d:80:6a:a3:
22:c1:ea:55:6f:b6:e0:b7:58:33:24:22:cb:8b:87:
16:d7:fe:7c:8a:34:73:57:a4:83:f0:e6:42:8a:13:
24:36:f7:c6:d7:59:00:48:6a:1b:5a:38:ac:39:b9:
14:d1:9b:45:df:64:94:ac:6a:3f:7e:5b:19:bb:9a:
e0:b1:37:4f:a0:d8:d9:9d:b9:14:4b:1a:ea:27:34:
ea:43:35:8f:46:04:31:71:da:f2:1f:2e:68:e2:14:
82:7c:e8:37:62:ae:36:34:e0:b2:0e:be:76:ec:87:
35:b8:2f:0d:fe:f6:7a:b1:ac:d5:ec:cd:fe:8d:ed:
e0:01:0d:30:b9:0f:6d:52:e0:6f:94:82:ec:f8:21:
de:4e:60:31:29:77:90:15:3e:5a:ad:c4:b2:1c:01:
01:7f:91:f8:d5:a5:d0:4d:88:7d:58:7c:ee:2f:86:
ac:ca:9e:bf:33:f3:a6:11:d0:02:b7:bc:3a:5c:35:
8c:35:1f:d9:57:ea:87:7f:81:45:cc:fd:4a:76:e1:
8b:aa:5e:ca:55:97:e6:35:08:6f:da:c6:46:40:ba:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:0F:DF:C5:8C:07:EB:C5:F2:F1:62:C4:54:0C:37:F3:08:74:21
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/JGcP38WMB-vF8vFixFQMN_MIdCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.79.0/24
84.246.112.0/22
Signature Algorithm: sha256WithRSAEncryption
31:52:fa:bf:86:4a:ec:aa:c7:ac:fe:b2:74:bd:fa:fd:1e:c3:
3d:47:8d:29:87:f0:00:25:3a:0a:34:93:ca:ed:af:49:8b:ea:
fd:fd:da:ca:20:76:98:31:10:a8:e7:3c:b5:cf:a8:b8:c9:9b:
79:7c:34:bc:7d:78:df:16:9c:d2:7a:4c:b2:b5:68:7e:e5:d9:
81:a1:e2:9e:c1:99:fe:57:12:a4:e1:1b:89:85:4a:e0:a6:b9:
30:7f:8c:99:c7:13:7a:bb:04:06:91:ab:1a:e4:99:e1:2a:13:
88:49:c8:4c:26:1d:0a:32:ac:0d:d4:97:ce:79:33:30:bb:c4:
fe:69:a9:3b:30:e1:fd:3b:50:86:28:6c:14:3d:35:fb:05:e5:
bd:28:1c:db:17:27:e0:8b:8d:d1:76:4d:21:d0:29:0b:f1:ee:
31:17:b8:1f:76:cb:1a:64:3b:12:c0:97:69:75:ec:46:74:f8:
cf:0a:6d:29:73:3e:d1:c4:12:f0:de:52:71:20:6c:f1:ae:01:
99:87:40:a3:53:e7:b9:c2:2e:fd:1d:43:30:ae:4b:5b:2e:94:
84:f1:06:b0:82:16:6f:d8:95:f4:c4:aa:05:f8:51:51:ef:0a:
e1:d0:4c:51:16:b8:a0:a1:e7:3b:2d:e4:a6:cc:95:4a:f8:03:
c5:a6:40:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMBFqU8QHxzf/2xh2+6wk1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl
ZTgyOGUwHhcNMjQxMTA2MTA0ODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDY3MGZkZmM1OGMwN2ViYzVmMmYxNjJjNDU0MGMzN2YzMDg3NDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qMkBMrj1oxFDHv8yf7HBQmzorrZ
yAbyL1aXwCiIsfHE/V3/q55cI02AaqMiwepVb7bgt1gzJCLLi4cW1/58ijRzV6SD
8OZCihMkNvfG11kASGobWjisObkU0ZtF32SUrGo/flsZu5rgsTdPoNjZnbkUSxrq
JzTqQzWPRgQxcdryHy5o4hSCfOg3Yq42NOCyDr527Ic1uC8N/vZ6sazV7M3+je3g
AQ0wuQ9tUuBvlILs+CHeTmAxKXeQFT5arcSyHAEBf5H41aXQTYh9WHzuL4asyp6/
M/OmEdACt7w6XDWMNR/ZV+qHf4FFzP1KduGLql7KVZfmNQhv2sZGQLr0BQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCRnD9/FjAfrxfLxYsRUDDfzCHQhMB8GA1UdIwQY
MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt
OTI2YzRhMzI2ZTA4LzEvSkdjUDM4V01CLXZGOHZGaXhGUU1OX01JZENFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4
LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVxPAwQC
VPZwMA0GCSqGSIb3DQEBCwUAA4IBAQAxUvq/hkrsqses/rJ0vfr9HsM9R40ph/AA
JToKNJPK7a9Ji+r9/drKIHaYMRCo5zy1z6i4yZt5fDS8fXjfFpzSekyytWh+5dmB
oeKewZn+VxKk4RuJhUrgprkwf4yZxxN6uwQGkasa5JnhKhOISchMJh0KMqwN1JfO
eTMwu8T+aak7MOH9O1CGKGwUPTX7BeW9KBzbFyfgi43Rdk0h0CkL8e4xF7gfdssa
ZDsSwJdpdexGdPjPCm0pcz7RxBLw3lJxIGzxrgGZh0CjU+e5wi79HUMwrktbLpSE
8QawghZv2JX0xKoF+FFR7wrh0ExRFrigoec7LeSmzJVK+APFpkDM
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net