Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UtakY68bOQlmdjM4wSTyRJfLlx4.roa
File: UtakY68bOQlmdjM4wSTyRJfLlx4.roa (raw, json)
Hash identifier: wwxjctg8iwtb5OSSBnvqLR4rfoDj10d9ahERA7y9yLg=
Subject key identifier: 52:D6:A4:63:AF:1B:39:09:66:76:33:38:C1:24:F2:44:97:CB:97:1E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01931F96D255FB54BDC700F89A8425520C65
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UtakY68bOQlmdjM4wSTyRJfLlx4.roa
Signing time: Tue 12 Nov 2024 08:56:38 +0000
ROA not before: Tue 12 Nov 2024 08:56:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60808
IP address blocks: 185.215.246.0/24 maxlen: 24
188.253.96.0/19 maxlen: 24
193.36.73.0/24 maxlen: 24
2a05:ec80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:96:d2:55:fb:54:bd:c7:00:f8:9a:84:25:52:0c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 12 08:56:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52d6a463af1b390966763338c124f24497cb971e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:dd:23:d8:ad:a5:4f:d6:68:21:08:68:3b:
c3:04:23:0e:44:44:99:6d:dc:b3:e0:e8:cd:65:d9:
dc:ff:2d:8b:55:4c:b0:2b:3c:8f:a5:0d:64:fb:91:
09:36:ef:a4:95:73:fd:24:b0:56:23:83:0a:d3:37:
84:d1:c4:64:75:ec:93:fd:ba:cf:28:e7:93:a9:9a:
79:96:79:d8:a0:97:db:ba:fd:40:32:04:99:9b:88:
ac:6f:12:9b:00:ad:81:cd:98:7d:01:f5:1f:71:50:
45:17:05:8c:f9:33:54:8d:4b:84:37:ea:4f:06:11:
1f:fa:67:3d:23:8c:a6:13:94:d0:f2:84:6f:fc:e6:
5a:49:b4:84:aa:c3:6c:0c:e3:82:72:20:d5:a8:1e:
03:4b:da:bd:fb:8c:cc:82:4b:45:c8:66:b7:9b:2d:
f5:00:5a:9d:89:ca:26:ca:70:13:4c:92:f5:1c:37:
a2:af:48:73:5c:ed:55:11:87:3b:5b:74:6e:f9:7a:
46:7f:5c:cc:92:27:c2:18:f1:fe:d0:52:0f:14:de:
42:0c:29:85:e4:8b:8d:2e:f1:df:07:31:3c:df:0e:
a1:10:22:00:08:9d:7b:ee:56:8b:88:f3:d2:43:48:
1a:db:b7:f5:e6:bc:fc:a8:c2:0d:ed:35:d8:de:3f:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:A4:63:AF:1B:39:09:66:76:33:38:C1:24:F2:44:97:CB:97:1E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UtakY68bOQlmdjM4wSTyRJfLlx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.246.0/24
188.253.96.0/19
193.36.73.0/24
IPv6:
2a05:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
c7:51:cc:f7:36:17:7c:53:81:d0:38:60:46:1a:54:b3:36:e0:
09:7b:64:11:69:c0:11:8c:ee:b7:7d:a7:a9:a0:d4:69:73:b6:
5a:b3:46:74:b1:f9:ba:3f:7e:c4:e0:69:57:c0:f3:ea:ad:af:
28:ed:e2:bd:94:d0:17:d6:70:1c:05:b1:18:90:cc:2a:91:08:
77:92:7e:c2:08:96:92:31:a8:ce:b5:6d:6e:40:d6:bd:75:5f:
38:d1:99:2a:25:fa:a7:e6:76:a2:da:89:e6:e6:30:ae:0b:ae:
89:8d:81:d4:44:cd:45:35:47:bc:d7:14:29:b8:26:ca:6a:40:
6c:4c:f6:77:55:9b:d6:f4:ef:cf:78:77:79:16:1d:e9:90:82:
35:c6:8f:a5:d8:04:f3:ff:6d:a6:c9:b4:79:8e:e4:f7:00:33:
0b:bf:33:5a:64:ae:bd:f6:fc:31:c1:61:48:db:22:2e:c4:96:
83:f9:53:a1:23:04:29:89:50:7f:f2:bf:30:1d:59:83:d9:29:
84:fc:b8:a3:89:f2:bf:0b:91:fb:52:85:b4:19:8b:a6:c0:a1:
fd:ac:cb:7a:c2:cd:7a:48:84:9a:e0:b2:a8:bf:3e:01:99:0f:
78:10:21:ec:d8:93:88:d0:87:34:c4:db:10:1a:c1:5f:e4:dd:
63:37:03:15
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZMfltJV+1S9xwD4moQlUgxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQxMTEyMDg1NjM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmQ2YTQ2M2FmMWIzOTA5NjY3NjMzMzhjMTI0ZjI0NDk3Y2I5NzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mLdI9itpU/WaCEIaDvDBCMORESZ
bdyz4OjNZdnc/y2LVUywKzyPpQ1k+5EJNu+klXP9JLBWI4MK0zeE0cRkdeyT/brP
KOeTqZp5lnnYoJfbuv1AMgSZm4isbxKbAK2BzZh9AfUfcVBFFwWM+TNUjUuEN+pP
BhEf+mc9I4ymE5TQ8oRv/OZaSbSEqsNsDOOCciDVqB4DS9q9+4zMgktFyGa3my31
AFqdicomynATTJL1HDeir0hzXO1VEYc7W3Ru+XpGf1zMkifCGPH+0FIPFN5CDCmF
5IuNLvHfBzE83w6hECIACJ177laLiPPSQ0ga27f15rz8qMIN7TXY3j/BsQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFFLWpGOvGzkJZnYzOMEk8kSXy5ceMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvVXRha1k2OGJPUWxtZGpNNHdTVHlSSmZMbHg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAudf2AwQF
vP1gAwQAwSRJMA0EAgACMAcDBQMqBeyAMA0GCSqGSIb3DQEBCwUAA4IBAQDHUcz3
Nhd8U4HQOGBGGlSzNuAJe2QRacARjO63faepoNRpc7Zas0Z0sfm6P37E4GlXwPPq
ra8o7eK9lNAX1nAcBbEYkMwqkQh3kn7CCJaSMajOtW1uQNa9dV840ZkqJfqn5nai
2onm5jCuC66JjYHURM1FNUe81xQpuCbKakBsTPZ3VZvW9O/PeHd5Fh3pkII1xo+l
2ATz/22mybR5juT3ADMLvzNaZK699vwxwWFI2yIuxJaD+VOhIwQpiVB/8r8wHVmD
2SmE/LijifK/C5H7UoW0GYumwKH9rMt6ws16SISa4LKovz4BmQ94ECHs2JOI0Ic0
xNsQGsFf5N1jNwMV
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:03 2024 by rpki-client on console.sobornost.net