Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/nqDSkbEpsR1GWOwZMOzIVn4R15Q.roa
File: nqDSkbEpsR1GWOwZMOzIVn4R15Q.roa (raw, json)
Hash identifier: KtrNYZvHFbPBlEEhC7LSn8oLzPqHBSC0Hgb8f8CHe3Y=
Subject key identifier: 9E:A0:D2:91:B1:29:B1:1D:46:58:EC:19:30:EC:C8:56:7E:11:D7:94
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 0193D557830AACE5C557816C1747A69AF27B
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/nqDSkbEpsR1GWOwZMOzIVn4R15Q.roa
Signing time: Tue 17 Dec 2024 15:58:22 +0000
ROA not before: Tue 17 Dec 2024 15:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44283
IP address blocks: 194.156.4.0/23 maxlen: 23
194.156.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:57:83:0a:ac:e5:c5:57:81:6c:17:47:a6:9a:f2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Dec 17 15:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ea0d291b129b11d4658ec1930ecc8567e11d794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:67:12:e1:be:1e:bc:e2:5e:00:0b:42:33:
6b:6c:0c:e6:65:b5:53:90:de:37:67:35:2c:ad:9d:
df:79:81:d6:1a:56:be:cf:4c:1d:18:ca:94:72:db:
4e:ee:75:a9:6d:bb:30:83:0f:13:26:bd:ba:46:e4:
fb:f1:f8:07:d3:34:7f:eb:c1:e0:60:04:fb:27:92:
04:66:ec:21:ea:6a:74:08:7c:d6:1f:c5:3e:00:cd:
11:22:89:0b:c8:66:84:4c:c6:06:3b:21:20:2d:0a:
12:05:44:b5:65:02:30:45:11:71:b1:fc:b8:05:dc:
7c:12:86:6c:05:25:7a:fd:7e:4b:27:d5:47:aa:59:
c6:b5:c1:20:7e:3c:aa:10:7c:55:ce:ac:80:95:74:
ca:cf:19:e7:1a:02:63:37:8f:58:5d:b1:a8:aa:52:
6b:a9:c1:ae:1c:66:b1:47:c8:9a:86:ee:b2:68:38:
bd:eb:6f:02:63:9d:64:98:a0:f7:6a:25:ec:20:9c:
06:fa:8f:e3:af:91:0e:1b:35:03:22:52:93:1b:fd:
f2:19:19:73:ea:bf:75:dc:1b:5d:de:64:8d:0c:e1:
55:39:0c:c9:37:27:42:e9:08:c7:65:f9:57:34:1d:
e9:59:91:7d:54:e0:ed:b0:4c:e8:fd:28:1e:c8:eb:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:D2:91:B1:29:B1:1D:46:58:EC:19:30:EC:C8:56:7E:11:D7:94
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/nqDSkbEpsR1GWOwZMOzIVn4R15Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.4.0-194.156.6.255
Signature Algorithm: sha256WithRSAEncryption
97:d1:1b:13:bb:b1:2f:08:ea:ec:51:9a:d6:54:ba:69:69:5c:
72:66:51:e7:63:b9:8f:74:11:43:68:98:36:53:27:17:45:ec:
a6:4a:71:b3:a0:e4:05:3c:b8:f7:42:8e:8e:9f:a6:97:c8:22:
5a:61:a9:dc:1d:82:eb:3d:38:f9:e3:03:d0:d5:b1:00:8c:76:
b8:cc:1d:ec:e0:81:4b:1c:8e:7e:bd:55:41:82:ed:ea:05:b4:
ea:1f:96:47:3f:88:19:a3:a6:ba:4f:d4:b4:69:a3:c0:b0:bf:
81:8a:26:4d:8d:89:8f:ff:43:a1:2f:63:4b:48:36:e4:01:62:
32:e8:ec:7a:67:f7:f6:53:83:9f:9a:1b:f8:71:64:6f:ed:e1:
7e:fc:0d:3d:ee:1b:e4:9f:46:30:b6:b9:47:a1:9b:08:49:f8:
ea:0b:7d:cb:dc:85:bd:d2:78:12:c3:a6:9c:bc:21:9e:c4:2f:
e9:1e:ca:0c:d3:a9:59:88:57:6d:c5:0e:28:59:60:87:93:cc:
25:54:c3:0f:46:67:aa:3e:15:7c:a1:ca:66:52:dd:f4:ab:ed:
4a:30:94:b5:e6:1e:e2:4b:aa:e1:4b:76:c0:d3:23:90:e3:c2:
ab:76:4f:83:d9:63:9b:21:e3:4c:c4:d0:77:5c:16:1d:13:e7:
4a:62:56:9b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZPVV4MKrOXFV4FsF0emmvJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTkzZTQwZGE1YTUyZjMyMmRiNWEwNGMyMGZiNDg2ZDRl
MTU1MDIwHhcNMjQxMjE3MTU1ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWEwZDI5MWIxMjliMTFkNDY1OGVjMTkzMGVjYzg1NjdlMTFkNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uFnEuG+HrziXgALQjNrbAzmZbVT
kN43ZzUsrZ3feYHWGla+z0wdGMqUcttO7nWpbbswgw8TJr26RuT78fgH0zR/68Hg
YAT7J5IEZuwh6mp0CHzWH8U+AM0RIokLyGaETMYGOyEgLQoSBUS1ZQIwRRFxsfy4
Bdx8EoZsBSV6/X5LJ9VHqlnGtcEgfjyqEHxVzqyAlXTKzxnnGgJjN49YXbGoqlJr
qcGuHGaxR8iahu6yaDi9628CY51kmKD3aiXsIJwG+o/jr5EOGzUDIlKTG/3yGRlz
6r913Btd3mSNDOFVOQzJNydC6QjHZflXNB3pWZF9VODtsEzo/SgeyOu62wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJ6g0pGxKbEdRljsGTDsyFZ+EdeUMB8GA1UdIwQY
MBaAFEhZPkDaWlLzIttaBMIPtIbU4VUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEt
ZTY4YTA4ZDllNTRmLzEvbnFEU2tiRXBzUjFHV093Wk1PeklWbjRSMTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEtZTY4YTA4ZDllNTRm
LzEvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCnAQD
BADCnAYwDQYJKoZIhvcNAQELBQADggEBAJfRGxO7sS8I6uxRmtZUumlpXHJmUedj
uY90EUNomDZTJxdF7KZKcbOg5AU8uPdCjo6fppfIIlphqdwdgus9OPnjA9DVsQCM
drjMHezggUscjn69VUGC7eoFtOoflkc/iBmjprpP1LRpo8Cwv4GKJk2NiY//Q6Ev
Y0tINuQBYjLo7Hpn9/ZTg5+aG/hxZG/t4X78DT3uG+SfRjC2uUehmwhJ+OoLfcvc
hb3SeBLDppy8IZ7EL+keygzTqVmIV23FDihZYIeTzCVUww9GZ6o+FXyhymZS3fSr
7UowlLXmHuJLquFLdsDTI5Djwqt2T4PZY5sh40zE0HdcFh0T50piVps=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net