Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/vCSEsyv0f8S9eCH6jiyJ2uKEWbM.roa
File: vCSEsyv0f8S9eCH6jiyJ2uKEWbM.roa (raw, json)
Hash identifier: 1XQtEI552pJplIora0IvWafYdZGHSV687ocbj2mBBuc=
Subject key identifier: BC:24:84:B3:2B:F4:7F:C4:BD:78:21:FA:8E:2C:89:DA:E2:84:59:B3
Certificate issuer: /CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Certificate serial: 0193D53B2292BF883432276147107DF544AD
Authority key identifier: D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/vCSEsyv0f8S9eCH6jiyJ2uKEWbM.roa
Signing time: Tue 17 Dec 2024 15:27:22 +0000
ROA not before: Tue 17 Dec 2024 15:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 195.43.44.0/24 maxlen: 24
195.43.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:3b:22:92:bf:88:34:32:27:61:47:10:7d:f5:44:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Validity
Not Before: Dec 17 15:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc2484b32bf47fc4bd7821fa8e2c89dae28459b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:07:b2:38:f1:fd:8a:40:2e:be:88:ff:52:
44:cb:b8:6d:76:c3:08:bc:e9:5a:13:7d:5d:1a:9d:
fd:c3:8b:a2:a4:11:3b:3a:e0:4a:c5:98:5b:af:c6:
01:6f:3a:de:d3:d5:d4:8a:aa:b4:45:dc:95:4b:6e:
c1:b3:be:8a:1c:5a:e1:bb:8f:a4:da:1f:86:bb:a5:
6a:9f:5e:41:72:78:92:61:6f:45:6c:e1:6b:61:2c:
96:56:b3:ea:9d:07:81:87:21:7f:c3:0c:b8:64:be:
f6:c4:89:e8:c8:5c:00:55:e8:9e:b6:f3:77:c4:b7:
a0:b4:a5:b2:0c:ee:e8:59:47:46:79:ed:10:d5:57:
31:31:e1:5a:c9:45:c8:66:67:d6:93:1a:b9:68:79:
4e:e5:c6:b1:65:ec:26:4a:18:9e:18:e4:6d:e1:bd:
49:35:4d:6d:f3:95:fd:4c:e2:56:74:f4:75:bb:d4:
e1:96:b5:78:68:a4:55:86:c0:45:f5:a3:c0:f6:ef:
f1:a4:79:9d:44:15:28:b5:a8:94:28:fd:97:ba:45:
d1:10:43:75:89:b0:32:5a:fa:77:2e:37:96:0a:20:
cf:2e:7e:19:dc:46:bf:6b:62:0c:ec:ba:a4:28:52:
6b:c7:12:7f:32:da:73:c3:59:fe:fe:72:82:95:ff:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:24:84:B3:2B:F4:7F:C4:BD:78:21:FA:8E:2C:89:DA:E2:84:59:B3
X509v3 Authority Key Identifier:
keyid:D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/vCSEsyv0f8S9eCH6jiyJ2uKEWbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.44.0/24
195.43.46.0/24
Signature Algorithm: sha256WithRSAEncryption
df:45:96:80:a6:8f:44:36:64:8d:c7:57:be:39:7f:48:05:c2:
3f:b6:ac:60:08:fa:54:f2:90:d3:cb:eb:50:9b:75:a9:74:62:
e5:07:38:d9:c7:e8:d8:9e:72:01:06:af:b5:7a:6e:77:d8:2b:
52:08:69:4a:d4:bc:89:cc:73:e1:dd:59:58:9d:be:f2:f5:99:
4e:42:d3:fb:30:a6:0c:3c:7c:3b:a3:4a:cb:08:19:71:6b:6c:
4d:ed:92:ce:6f:46:ae:f9:95:60:70:29:ab:44:75:9b:28:c3:
40:25:64:63:67:ca:35:22:91:3d:28:bf:ef:6a:c5:1c:4b:a1:
5e:9a:82:bc:0d:58:d0:61:32:f5:65:c9:9a:f0:e0:d9:94:5f:
46:b9:90:c0:6e:51:c3:ac:2f:78:f4:8e:da:8a:fc:75:2d:67:
f8:62:82:ee:3e:63:56:48:97:a6:28:0a:95:b6:cb:5b:93:fb:
88:bf:24:f4:b4:e0:f7:37:2f:9c:10:2a:28:85:17:05:49:fa:
01:13:05:4c:08:25:e1:93:d5:74:48:08:ee:b1:e0:52:a9:d0:
09:ad:b3:51:6d:a8:6a:91:03:d3:ae:76:16:8b:c5:63:ae:c9:
13:11:98:13:05:70:95:5f:8b:e3:11:93:0b:4c:9b:f9:c5:8a:
9a:66:c0:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZPVOyKSv4g0MidhRxB99UStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWU5MGQzNDJkODY1ZWE2N2YyYjBkMmZiNzRjMDM5Zjgz
ZTRhNDgwHhcNMjQxMjE3MTUyNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzI0ODRiMzJiZjQ3ZmM0YmQ3ODIxZmE4ZTJjODlkYWUyODQ1OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvcHsjjx/YpALr6I/1JEy7htdsMI
vOlaE31dGp39w4uipBE7OuBKxZhbr8YBbzre09XUiqq0RdyVS27Bs76KHFrhu4+k
2h+Gu6Vqn15BcniSYW9FbOFrYSyWVrPqnQeBhyF/wwy4ZL72xInoyFwAVeietvN3
xLegtKWyDO7oWUdGee0Q1VcxMeFayUXIZmfWkxq5aHlO5caxZewmShieGORt4b1J
NU1t85X9TOJWdPR1u9ThlrV4aKRVhsBF9aPA9u/xpHmdRBUotaiUKP2XukXREEN1
ibAyWvp3LjeWCiDPLn4Z3Ea/a2IM7LqkKFJrxxJ/Mtpzw1n+/nKClf/3HwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLwkhLMr9H/EvXgh+o4sidrihFmzMB8GA1UdIwQY
MBaAFNjukNNC2GXqZ/Kw0vt0wDn4PkpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk82UTAwTFlaZXBuOHJEUy0zVEFPZmctU2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZjVjMTAtMjEzMS00MTE2LWI2Zjkt
NTEwNTI1YzQ3NDRjLzEvdkNTRXN5djBmOFM5ZUNINmppeUoydUtFV2JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jZjVjMTAtMjEzMS00MTE2LWI2ZjktNTEwNTI1YzQ3NDRj
LzEvMk82UTAwTFlaZXBuOHJEUy0zVEFPZmctU2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwyssAwQA
wysuMA0GCSqGSIb3DQEBCwUAA4IBAQDfRZaApo9ENmSNx1e+OX9IBcI/tqxgCPpU
8pDTy+tQm3WpdGLlBzjZx+jYnnIBBq+1em532CtSCGlK1LyJzHPh3VlYnb7y9ZlO
QtP7MKYMPHw7o0rLCBlxa2xN7ZLOb0au+ZVgcCmrRHWbKMNAJWRjZ8o1IpE9KL/v
asUcS6FemoK8DVjQYTL1Zcma8ODZlF9GuZDAblHDrC949I7aivx1LWf4YoLuPmNW
SJemKAqVtstbk/uIvyT0tOD3Ny+cECoohRcFSfoBEwVMCCXhk9V0SAjuseBSqdAJ
rbNRbahqkQPTrnYWi8VjrskTEZgTBXCVX4vjEZMLTJv5xYqaZsB8
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:53 2024 by rpki-client on console.sobornost.net