Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/JSc8ipJChG3I2_kLqVEXUMPalYE.roa
File: JSc8ipJChG3I2_kLqVEXUMPalYE.roa (raw, json)
Hash identifier: W+Va4UhikI45vtRw/Jh6mJUm5G4Gu4jktxSWq0M/RME=
Subject key identifier: 25:27:3C:8A:92:42:84:6D:C8:DB:F9:0B:A9:51:17:50:C3:DA:95:81
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0192AF0D1CE241B7B2D0AA7A29FC96E177E5
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/JSc8ipJChG3I2_kLqVEXUMPalYE.roa
Signing time: Mon 21 Oct 2024 12:28:44 +0000
ROA not before: Mon 21 Oct 2024 12:28:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41994
IP address blocks: 212.163.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:0d:1c:e2:41:b7:b2:d0:aa:7a:29:fc:96:e1:77:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Oct 21 12:28:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25273c8a9242846dc8dbf90ba9511750c3da9581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:da:b2:79:d9:cd:49:f5:80:77:8e:67:81:
11:e6:78:b6:a1:51:3d:ca:20:86:d8:76:22:83:e8:
86:96:61:66:40:1a:88:37:3d:e8:ce:ff:1d:0a:84:
d4:d3:eb:f9:c9:13:93:84:bc:78:ae:23:8e:d1:f7:
1a:c6:ee:2b:7c:ad:f4:ae:93:0a:7d:76:92:c8:07:
ea:bb:e3:38:d1:6a:dc:44:c2:d6:04:bf:7c:94:39:
b6:53:a4:98:21:16:57:ed:a5:cb:cc:87:2c:d4:bd:
cd:de:6a:02:b3:6a:8d:f6:52:7f:95:8f:a7:36:fd:
71:7a:e0:06:ac:eb:41:9d:77:52:04:a1:fa:91:32:
04:4d:5b:2a:66:ba:4c:95:73:fa:a3:97:86:c1:71:
9e:f5:0a:be:5d:e1:71:dd:be:6e:0a:35:39:c5:9f:
45:a4:05:0d:81:b9:31:65:4e:fd:71:32:6a:67:77:
52:ba:f3:02:06:a4:f7:f4:14:03:b0:34:a3:24:9c:
4b:a7:d6:dd:96:bd:b1:91:eb:e1:ce:7d:42:5d:ee:
c4:92:3d:bd:a8:7a:c8:69:7c:d1:e5:3f:0f:88:1c:
22:7d:f6:4b:f0:33:70:8a:51:6d:e9:f8:3c:6a:d4:
bf:c8:49:b9:d7:d7:97:58:f4:4f:c4:db:58:ba:f2:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:3C:8A:92:42:84:6D:C8:DB:F9:0B:A9:51:17:50:C3:DA:95:81
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/JSc8ipJChG3I2_kLqVEXUMPalYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.163.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f3:53:8a:56:21:56:51:bb:3d:12:5d:76:bd:68:95:25:08:
8a:50:23:89:d0:ea:e5:a6:1a:df:33:6f:41:f7:17:e6:60:37:
c6:be:e1:b5:9b:70:f0:23:68:ed:0a:c7:fa:43:cc:13:0e:7c:
b1:cf:cd:4a:1f:a4:f8:86:66:82:29:b0:31:27:da:d7:27:90:
0a:f1:a3:14:2d:f0:d2:05:16:a1:2e:92:1b:54:23:ed:02:10:
02:8e:90:54:7c:be:12:28:5e:33:41:13:3a:7d:36:96:76:db:
5b:f5:53:13:91:7e:32:be:b5:13:98:5e:9e:c6:d2:17:3c:03:
06:d4:9f:6c:fc:bf:7f:6e:9c:ac:b2:e7:58:7f:e5:44:b6:68:
db:fe:6d:c7:f2:80:f5:41:e1:2c:45:cc:bf:0f:87:c5:d8:07:
15:bf:80:e2:d8:e9:f4:94:db:cf:f5:a1:d7:47:3e:f9:8b:24:
52:ad:a9:06:0c:12:8f:40:71:5c:eb:5e:d6:39:12:9c:b9:27:
a7:51:05:12:4f:cd:db:51:82:a6:26:a8:cb:c3:54:1f:c2:db:
d7:42:b3:4b:3f:cb:20:d7:0a:81:49:31:fc:fa:36:e2:5f:bf:
4f:75:7b:b0:f9:37:fc:e2:16:a1:40:58:4f:3c:8c:91:91:87:
94:a4:9e:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKvDRziQbey0Kp6KfyW4XflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx
ZDA5OWIwHhcNMjQxMDIxMTIyODQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTI3M2M4YTkyNDI4NDZkYzhkYmY5MGJhOTUxMTc1MGMzZGE5NTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+zasnnZzUn1gHeOZ4ER5ni2oVE9
yiCG2HYig+iGlmFmQBqINz3ozv8dCoTU0+v5yROThLx4riOO0fcaxu4rfK30rpMK
fXaSyAfqu+M40WrcRMLWBL98lDm2U6SYIRZX7aXLzIcs1L3N3moCs2qN9lJ/lY+n
Nv1xeuAGrOtBnXdSBKH6kTIETVsqZrpMlXP6o5eGwXGe9Qq+XeFx3b5uCjU5xZ9F
pAUNgbkxZU79cTJqZ3dSuvMCBqT39BQDsDSjJJxLp9bdlr2xkevhzn1CXe7Ekj29
qHrIaXzR5T8PiBwiffZL8DNwilFt6fg8atS/yEm519eXWPRPxNtYuvLEMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCUnPIqSQoRtyNv5C6lRF1DD2pWBMB8GA1UdIwQY
MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt
Mjc0NzNjYTYxMmRlLzEvSlNjOGlwSkNoRzNJMl9rTHFWRVhVTVBhbFlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl
LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1KMKMA0G
CSqGSIb3DQEBCwUAA4IBAQCK81OKViFWUbs9El12vWiVJQiKUCOJ0OrlphrfM29B
9xfmYDfGvuG1m3DwI2jtCsf6Q8wTDnyxz81KH6T4hmaCKbAxJ9rXJ5AK8aMULfDS
BRahLpIbVCPtAhACjpBUfL4SKF4zQRM6fTaWdttb9VMTkX4yvrUTmF6extIXPAMG
1J9s/L9/bpyssudYf+VEtmjb/m3H8oD1QeEsRcy/D4fF2AcVv4Di2On0lNvP9aHX
Rz75iyRSrakGDBKPQHFc617WORKcuSenUQUST83bUYKmJqjLw1QfwtvXQrNLP8sg
1wqBSTH8+jbiX79PdXuw+Tf84hahQFhPPIyRkYeUpJ76
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:59 2024 by rpki-client on console.sobornost.net