Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/jHt9Scad-LL0qoVgBi3Mzbk4pA8.roa
File: jHt9Scad-LL0qoVgBi3Mzbk4pA8.roa (raw, json)
Hash identifier: eF+QsE37RVw7nTrAYYPnU5XUO8OGWPNTjlH/WiOtE7E=
Subject key identifier: 8C:7B:7D:49:C6:9D:F8:B2:F4:AA:85:60:06:2D:CC:CD:B9:38:A4:0F
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 0192EC54EC527257A1231778FCDAEBB33BED
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/jHt9Scad-LL0qoVgBi3Mzbk4pA8.roa
Signing time: Sat 02 Nov 2024 10:04:01 +0000
ROA not before: Sat 02 Nov 2024 10:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203900
IP address blocks: 193.104.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ec:54:ec:52:72:57:a1:23:17:78:fc:da:eb:b3:3b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Nov 2 10:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c7b7d49c69df8b2f4aa8560062dcccdb938a40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:49:64:7f:4f:2b:e5:79:4e:59:8f:27:bd:
f8:38:06:27:15:a3:1d:4c:9b:f2:f2:78:e1:24:4f:
59:6e:2c:c8:20:25:06:89:fd:6b:42:77:80:99:58:
96:e2:50:a1:36:ad:4a:e4:0d:e0:e9:b3:21:66:4e:
89:99:c2:b5:c9:98:4b:07:f9:34:33:37:38:ac:f3:
20:b1:27:c4:2c:38:43:9e:86:b0:e4:27:1d:96:13:
2a:2b:d8:7b:15:a0:4a:31:a3:7d:dd:e5:c3:91:e7:
e9:b5:75:89:3b:94:61:b8:d2:4f:32:b1:67:c2:5c:
79:6a:61:3f:36:88:bf:5f:7e:e3:48:5a:aa:e5:33:
f5:29:f1:9c:bb:9c:cc:e2:fd:8a:6d:ef:0f:3f:80:
87:b2:ef:0f:27:57:5a:cf:d2:26:7b:4c:35:13:a4:
58:c7:ed:c5:e9:b8:c2:5f:54:c7:b4:a9:86:70:d3:
96:c0:bc:83:7d:e7:e5:1d:40:d3:f8:fd:6a:6a:36:
2c:b0:bf:5e:b9:b6:0b:85:00:53:6e:c6:5f:59:48:
8a:2a:57:97:0a:8b:d3:4d:58:12:38:d6:b9:93:b6:
5f:0e:1e:cb:0c:ea:4f:7b:15:e2:6c:77:b3:c9:ed:
4f:18:30:45:c8:45:d5:bf:f6:47:5b:c0:13:ea:63:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:7D:49:C6:9D:F8:B2:F4:AA:85:60:06:2D:CC:CD:B9:38:A4:0F
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/jHt9Scad-LL0qoVgBi3Mzbk4pA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.29.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7b:ff:61:94:1a:0a:de:55:96:f3:bd:e0:ec:92:f7:43:02:
ba:df:b3:62:f1:97:a5:78:0b:e1:d8:89:b9:69:d7:ea:88:0a:
b9:1e:5f:81:11:3e:dd:84:88:80:a9:4b:74:e1:9c:52:95:6a:
96:8a:17:ee:4b:1a:fd:76:fd:db:c8:75:e2:2a:4b:3c:aa:7e:
51:86:33:ef:c6:c2:74:2f:d2:cd:4d:d4:2d:4e:b3:c6:ba:4b:
2d:f9:c0:9d:3b:b1:b9:7a:8f:9c:cf:92:f4:a9:c2:e8:7a:77:
50:ab:31:20:6c:3d:ea:09:52:b1:d8:74:8d:91:9e:ef:f0:5f:
77:ab:b6:13:67:06:7e:30:cf:2b:92:6e:db:60:f4:37:c0:9c:
19:45:8c:5d:c1:3f:25:a0:2d:d1:68:9e:11:80:c4:1e:ad:5c:
dc:f9:65:7a:cc:57:45:e3:dd:21:44:6d:4f:be:f0:86:20:4e:
ac:72:5b:1c:2f:ec:61:00:f9:3b:0d:cb:0a:7b:6a:b1:94:a1:
bc:98:97:03:3e:88:96:74:78:a6:50:11:93:78:ad:1e:d9:2b:
12:24:fb:da:4a:06:2f:58:50:5a:5e:2b:d6:99:f3:2f:49:c9:
f9:54:c6:13:63:67:48:de:e1:7f:1a:f9:2c:f5:e7:71:3d:57:
cf:0f:13:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLsVOxSclehIxd4/NrrszvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2QyODBjYjRlYWU4MTU2YTc3ZGZlN2EzZmZjNWZkNGI0
ZGJmYWEwHhcNMjQxMTAyMTAwNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzdiN2Q0OWM2OWRmOGIyZjRhYTg1NjAwNjJkY2NjZGI5MzhhNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaVJZH9PK+V5TlmPJ734OAYnFaMd
TJvy8njhJE9ZbizIICUGif1rQneAmViW4lChNq1K5A3g6bMhZk6JmcK1yZhLB/k0
Mzc4rPMgsSfELDhDnoaw5CcdlhMqK9h7FaBKMaN93eXDkefptXWJO5RhuNJPMrFn
wlx5amE/Noi/X37jSFqq5TP1KfGcu5zM4v2Kbe8PP4CHsu8PJ1daz9Ime0w1E6RY
x+3F6bjCX1THtKmGcNOWwLyDfeflHUDT+P1qajYssL9eubYLhQBTbsZfWUiKKleX
CovTTVgSONa5k7ZfDh7LDOpPexXibHezye1PGDBFyEXVv/ZHW8AT6mOvSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIx7fUnGnfiy9KqFYAYtzM25OKQPMB8GA1UdIwQY
MBaAFEN9KAy06ugVanff56P/xf1LTb+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4Yjct
ZWM1MGRhYWQ4MmY3LzEvakh0OVNjYWQtTEwwcW9WZ0JpM016Yms0cEE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4YjctZWM1MGRhYWQ4MmY3
LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgdMA0G
CSqGSIb3DQEBCwUAA4IBAQA1e/9hlBoK3lWW873g7JL3QwK637Ni8ZeleAvh2Im5
adfqiAq5Hl+BET7dhIiAqUt04ZxSlWqWihfuSxr9dv3byHXiKks8qn5RhjPvxsJ0
L9LNTdQtTrPGukst+cCdO7G5eo+cz5L0qcLoendQqzEgbD3qCVKx2HSNkZ7v8F93
q7YTZwZ+MM8rkm7bYPQ3wJwZRYxdwT8loC3RaJ4RgMQerVzc+WV6zFdF490hRG1P
vvCGIE6sclscL+xhAPk7DcsKe2qxlKG8mJcDPoiWdHimUBGTeK0e2SsSJPvaSgYv
WFBaXivWmfMvScn5VMYTY2dI3uF/Gvks9edxPVfPDxPl
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net