Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/0BJuif0BIOFDUnrYqNIf9JxcwPw.roa
File: 0BJuif0BIOFDUnrYqNIf9JxcwPw.roa (raw, json)
Hash identifier: MlUxh3svvLH46pUeqJdWMtvUpN1/PceeToKXfCjBS5A=
Subject key identifier: D0:12:6E:89:FD:01:20:E1:43:52:7A:D8:A8:D2:1F:F4:9C:5C:C0:FC
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 01938EEE6C886CFB13A84CBEB587E3967C54
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/0BJuif0BIOFDUnrYqNIf9JxcwPw.roa
Signing time: Tue 03 Dec 2024 23:50:10 +0000
ROA not before: Tue 03 Dec 2024 23:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198232
IP address blocks: 91.232.175.0/24 maxlen: 24
195.60.240.0/23 maxlen: 23
195.60.240.0/24 maxlen: 24
195.60.241.0/24 maxlen: 24
195.60.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8e:ee:6c:88:6c:fb:13:a8:4c:be:b5:87:e3:96:7c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Dec 3 23:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0126e89fd0120e143527ad8a8d21ff49c5cc0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:65:ef:51:e4:0c:47:6d:2e:76:a7:3f:b7:
32:42:ff:b4:1a:0e:00:9a:64:03:d9:a7:d0:a4:f3:
ef:87:c4:c5:f1:9b:fa:4b:40:25:d5:ba:79:1b:a6:
d8:17:4e:01:22:c1:50:25:ad:94:62:7c:d3:e8:00:
e0:20:eb:9c:ee:e8:a5:64:ae:f4:c3:ab:84:61:70:
12:7e:0e:00:d9:a1:b0:f9:60:a6:d2:d8:dd:73:56:
03:02:56:84:94:bd:12:9e:aa:cc:c9:db:e3:71:ea:
38:a3:6a:c0:b0:1a:c7:32:e5:41:df:c6:ed:16:7f:
f4:0e:20:32:5d:1e:b4:ce:58:99:b7:f8:5a:ce:fb:
8a:3f:0c:eb:cd:3a:87:65:14:97:bc:43:57:a3:e1:
de:c3:18:c1:17:63:ca:f6:ff:d1:e2:61:5e:e9:c9:
56:2e:75:09:92:91:7a:ce:8d:50:85:cd:24:ee:1c:
ab:e4:bb:da:1b:0e:bb:06:cf:b8:95:75:2d:25:5c:
63:8b:57:44:86:06:a6:04:d1:97:1b:ce:1a:4e:6e:
34:db:ce:31:1d:7e:95:14:6e:ae:90:06:3f:85:97:
2c:33:33:f0:80:d8:b5:c3:f7:fb:1b:10:6f:8b:d8:
83:94:97:f2:9c:f0:6f:5c:d0:bc:33:53:3f:76:e4:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:12:6E:89:FD:01:20:E1:43:52:7A:D8:A8:D2:1F:F4:9C:5C:C0:FC
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/0BJuif0BIOFDUnrYqNIf9JxcwPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.175.0/24
195.60.240.0-195.60.242.255
Signature Algorithm: sha256WithRSAEncryption
0d:6a:05:5d:30:b7:ff:91:fa:59:d0:3d:43:93:b5:c9:43:2c:
86:d6:a6:a1:b1:89:24:da:06:7b:cd:76:5e:d6:ad:16:55:c3:
3b:49:46:af:99:c1:03:54:d5:4d:31:4c:a0:37:ad:4f:72:ad:
70:0d:be:a6:63:37:9c:e9:11:58:37:c7:14:52:47:4f:34:05:
f2:cb:3c:bd:cf:39:26:b6:1e:8f:99:75:2b:39:95:2c:75:88:
b1:a8:b2:b9:a4:66:17:e1:ab:20:80:53:c7:47:10:78:33:f6:
e7:8b:02:a8:b6:6f:8c:32:1b:2e:f3:f5:a3:c3:7d:4a:0c:13:
60:fa:62:7d:31:c7:30:a8:7e:b1:9c:2e:3e:71:45:1f:ca:1f:
51:8d:a9:ce:b6:a3:41:58:f3:9a:90:3b:94:80:e1:7a:d4:78:
a7:90:e0:46:a7:d1:4f:8f:03:10:49:eb:0d:4d:a5:ae:22:c1:
3d:53:bb:f7:84:fb:8b:0e:46:31:66:00:47:4d:de:72:10:75:
2b:1a:61:75:69:26:c4:f1:bb:bd:d2:08:70:27:cc:96:64:57:
38:fc:ba:12:10:26:99:ed:5f:a3:66:2a:91:33:1f:0b:60:b5:
24:3c:7a:43:88:df:aa:e9:ce:d6:f8:fa:8c:2f:c3:97:db:29:
66:7f:6b:34
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZOO7myIbPsTqEy+tYfjlnxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNmU5Yzk0MmNmNTZiZWI4NjkyYzVkNTYyZWQ4ZWFkNjk0
NTI4ZWQwHhcNMjQxMjAzMjM1MDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDEyNmU4OWZkMDEyMGUxNDM1MjdhZDhhOGQyMWZmNDljNWNjMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum1l71HkDEdtLnanP7cyQv+0Gg4A
mmQD2afQpPPvh8TF8Zv6S0Al1bp5G6bYF04BIsFQJa2UYnzT6ADgIOuc7uilZK70
w6uEYXASfg4A2aGw+WCm0tjdc1YDAlaElL0SnqrMydvjceo4o2rAsBrHMuVB38bt
Fn/0DiAyXR60zliZt/hazvuKPwzrzTqHZRSXvENXo+HewxjBF2PK9v/R4mFe6clW
LnUJkpF6zo1Qhc0k7hyr5LvaGw67Bs+4lXUtJVxji1dEhgamBNGXG84aTm40284x
HX6VFG6ukAY/hZcsMzPwgNi1w/f7GxBvi9iDlJfynPBvXNC8M1M/duRU7QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNASbon9ASDhQ1J62KjSH/ScXMD8MB8GA1UdIwQY
MBaAFF5unJQs9WvrhpLF1WLtjq1pRSjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYWIxMmEtNDQ0Yy00NzRhLTg2ZjMt
ZTM0Mzc3N2MzOTczLzEvMEJKdWlmMEJJT0ZEVW5yWXFOSWY5Snhjd1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYWIxMmEtNDQ0Yy00NzRhLTg2ZjMtZTM0Mzc3N2MzOTcz
LzEvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAW+ivMAwD
BATDPPADBADDPPIwDQYJKoZIhvcNAQELBQADggEBAA1qBV0wt/+R+lnQPUOTtclD
LIbWpqGxiSTaBnvNdl7WrRZVwztJRq+ZwQNU1U0xTKA3rU9yrXANvqZjN5zpEVg3
xxRSR080BfLLPL3POSa2Ho+ZdSs5lSx1iLGosrmkZhfhqyCAU8dHEHgz9ueLAqi2
b4wyGy7z9aPDfUoME2D6Yn0xxzCofrGcLj5xRR/KH1GNqc62o0FY85qQO5SA4XrU
eKeQ4Ean0U+PAxBJ6w1Npa4iwT1Tu/eE+4sORjFmAEdN3nIQdSsaYXVpJsTxu73S
CHAnzJZkVzj8uhIQJpntX6NmKpEzHwtgtSQ8ekOI36rpztb4+owvw5fbKWZ/azQ=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net