Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/N5gSpMXs8g_QCUjqd7R86bpf6IM.roa
File: N5gSpMXs8g_QCUjqd7R86bpf6IM.roa (raw, json)
Hash identifier: 4hd3kTVI7WHxVWhY1HstRhVW+QpTmSHP2IEDd7RJkrY=
Subject key identifier: 37:98:12:A4:C5:EC:F2:0F:D0:09:48:EA:77:B4:7C:E9:BA:5F:E8:83
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019362897CC2084AF13B265612F633B49C9A
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/N5gSpMXs8g_QCUjqd7R86bpf6IM.roa
Signing time: Mon 25 Nov 2024 08:56:37 +0000
ROA not before: Mon 25 Nov 2024 08:56:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34369
IP address blocks: 84.241.0.0/18 maxlen: 24
94.182.0.0/15 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:89:7c:c2:08:4a:f1:3b:26:56:12:f6:33:b4:9c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Nov 25 08:56:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=379812a4c5ecf20fd00948ea77b47ce9ba5fe883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:c0:8f:04:35:a6:13:5b:c2:14:82:e7:ca:
dd:6f:e1:55:4f:8b:73:8e:0e:41:8f:37:15:72:79:
55:3b:93:1b:78:fd:46:cd:ba:88:28:3a:73:da:e3:
94:d2:9d:fb:61:53:c0:51:b9:2f:cf:1b:1e:4e:84:
39:e7:d2:ae:55:8d:13:f3:94:98:da:d9:64:4e:45:
6b:56:6b:1a:06:4b:f4:98:83:93:a7:ba:1d:96:4d:
9b:2d:31:a0:b2:1e:da:16:4d:8f:25:0c:fe:6c:47:
a6:ca:7f:a8:d8:ab:8d:6a:a0:c5:93:64:cf:3a:49:
73:15:47:67:46:93:a5:95:49:61:38:ca:73:be:29:
ed:ed:ed:bd:45:b5:4a:a3:0f:e3:26:f4:58:d4:58:
e4:ba:4e:d5:6d:79:40:aa:c5:28:12:28:4f:ae:41:
3b:07:a6:f3:25:d1:1b:57:7a:5f:74:75:11:9c:4a:
0f:73:cd:b8:96:11:0e:b5:9e:36:8b:25:ab:05:e1:
e2:27:16:0c:03:b3:86:ca:dc:a7:a0:f2:da:6e:f0:
c3:69:06:f8:8e:38:dd:5c:ea:a2:7e:e7:32:b5:e1:
9b:d5:54:82:90:cd:67:7d:1f:e9:56:9e:1c:50:cf:
b4:b2:d0:9c:25:73:46:98:dd:19:94:d4:bc:d6:ca:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:98:12:A4:C5:EC:F2:0F:D0:09:48:EA:77:B4:7C:E9:BA:5F:E8:83
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/N5gSpMXs8g_QCUjqd7R86bpf6IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.241.0.0/18
94.182.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a7:a3:73:c7:f7:f7:d1:9f:85:50:ba:07:7a:56:db:9a:71:eb:
b8:32:df:a2:1d:e3:a9:5f:ea:1e:00:cc:35:87:9b:6b:57:db:
2f:ef:9e:e1:5e:ba:6e:90:26:73:90:b5:96:7d:87:f5:0f:ef:
65:34:ea:f3:11:9d:c2:7c:17:79:71:85:62:28:3b:82:98:f4:
6a:f4:b8:7b:9a:ec:aa:72:73:a7:14:5d:88:9e:8f:90:df:be:
90:55:98:4c:36:9c:be:07:1d:6d:dc:35:69:3a:6d:6c:22:a5:
0c:de:b5:b8:21:40:0e:74:23:b7:2a:6e:ec:61:b9:bb:d5:f8:
1c:58:d8:bf:ec:10:d7:65:98:c3:f1:53:79:b1:93:33:ad:e1:
50:10:f8:7e:4d:06:c9:21:39:3a:88:59:a6:28:c7:d1:21:d6:
b5:16:f7:16:57:f6:06:80:43:c0:43:33:b8:af:43:d6:6a:ba:
59:9c:03:7f:10:d7:d0:13:5c:c7:b0:cb:4f:66:6d:8e:7f:12:
a7:6c:64:03:25:90:9b:9a:3b:85:11:10:f6:6e:c6:50:22:c1:
27:22:a0:18:6a:43:fd:c0:f2:53:a1:10:9c:f7:63:6f:0d:00:
4d:78:27:e9:bb:f9:97:12:5c:72:8b:4a:d1:05:45:75:5a:04:
94:ae:fd:94
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZNiiXzCCErxOyZWEvYztJyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjQxMTI1MDg1NjM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzk4MTJhNGM1ZWNmMjBmZDAwOTQ4ZWE3N2I0N2NlOWJhNWZlODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SHAjwQ1phNbwhSC58rdb+FVT4tz
jg5BjzcVcnlVO5MbeP1GzbqIKDpz2uOU0p37YVPAUbkvzxseToQ559KuVY0T85SY
2tlkTkVrVmsaBkv0mIOTp7odlk2bLTGgsh7aFk2PJQz+bEemyn+o2KuNaqDFk2TP
OklzFUdnRpOllUlhOMpzvint7e29RbVKow/jJvRY1Fjkuk7VbXlAqsUoEihPrkE7
B6bzJdEbV3pfdHURnEoPc824lhEOtZ42iyWrBeHiJxYMA7OGytynoPLabvDDaQb4
jjjdXOqifucyteGb1VSCkM1nfR/pVp4cUM+0stCcJXNGmN0ZlNS81soUyQIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFDeYEqTF7PIP0AlI6ne0fOm6X+iDMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvTjVnU3BNWHM4Z19RQ1VqcWQ3Ujg2YnBmNklNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwQGVPEAAwMB
XrYwDQYJKoZIhvcNAQELBQADggEBAKejc8f399GfhVC6B3pW25px67gy36Id46lf
6h4AzDWHm2tX2y/vnuFeum6QJnOQtZZ9h/UP72U06vMRncJ8F3lxhWIoO4KY9Gr0
uHua7Kpyc6cUXYiej5DfvpBVmEw2nL4HHW3cNWk6bWwipQzetbghQA50I7cqbuxh
ubvV+BxY2L/sENdlmMPxU3mxkzOt4VAQ+H5NBskhOTqIWaYox9Eh1rUW9xZX9gaA
Q8BDM7ivQ9ZqulmcA38Q19ATXMewy09mbY5/EqdsZAMlkJuaO4UREPZuxlAiwSci
oBhqQ/3A8lOhEJz3Y28NAE14J+m7+ZcSXHKLStEFRXVaBJSu/ZQ=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net