Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/JzivnDnciUZYljvifhZd1_8OqxY.roa
File: JzivnDnciUZYljvifhZd1_8OqxY.roa (raw, json)
Hash identifier: ynXcFmYoF2XB1oAm+o7w7eVjpmQIlp3JnXgIhAXEV8k=
Subject key identifier: 27:38:AF:9C:39:DC:89:46:58:96:3B:E2:7E:16:5D:D7:FF:0E:AB:16
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 0193A03D2646E4F33ADDBE9F35E4A3AFECBB
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/JzivnDnciUZYljvifhZd1_8OqxY.roa
Signing time: Sat 07 Dec 2024 08:29:42 +0000
ROA not before: Sat 07 Dec 2024 08:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213868
IP address blocks: 45.130.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:3d:26:46:e4:f3:3a:dd:be:9f:35:e4:a3:af:ec:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Dec 7 08:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2738af9c39dc894658963be27e165dd7ff0eab16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:11:62:18:8a:38:c7:2b:7a:a4:8f:b3:99:
c7:9e:d1:5e:66:0d:58:3b:1b:4b:3d:74:d3:bb:45:
60:1b:51:df:ec:a1:0d:55:88:ef:21:0f:22:63:aa:
cd:3f:14:c4:3f:a1:11:3a:39:f0:7e:fa:f8:6b:03:
68:7e:8a:86:ac:dd:a2:b7:dd:2f:90:fa:f2:38:50:
f5:26:a4:f1:f8:98:8d:c9:0b:8c:ae:71:e9:e6:b6:
f0:03:09:67:a4:6f:8d:90:7d:08:d6:1a:b5:ff:21:
27:11:64:fe:b3:76:7e:ea:a5:b6:c6:27:a4:b1:6f:
04:b1:ff:c4:2d:a5:43:15:d9:17:d3:f1:f1:2d:b8:
c1:85:47:d4:d5:cc:e2:f0:3a:4e:0b:a0:c0:fd:b6:
75:44:7c:3b:40:b8:cb:f1:e8:60:57:67:34:9b:59:
c7:a3:a8:f4:1a:e2:b4:96:3a:d2:a4:1c:a3:e9:13:
b8:9a:b1:61:9c:ac:dc:46:cd:59:77:8e:52:f8:da:
36:b9:47:4a:af:f6:95:c9:4a:b0:0b:84:f2:a1:c8:
06:5f:94:83:4e:6d:0d:8e:5f:c6:37:51:32:c0:7c:
84:7d:c2:2d:e9:4a:35:e9:e1:d2:72:8a:62:86:04:
7a:11:ea:b8:c9:02:94:4c:85:af:bc:20:64:52:5f:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:38:AF:9C:39:DC:89:46:58:96:3B:E2:7E:16:5D:D7:FF:0E:AB:16
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/JzivnDnciUZYljvifhZd1_8OqxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ad:40:db:39:49:d5:08:85:fb:4a:ae:3b:54:51:36:d0:f5:
8e:0b:5c:1f:cf:37:9f:2d:71:99:85:c3:04:84:20:ab:58:07:
4a:06:a6:1c:1f:25:04:d4:4a:e0:7e:de:cf:4e:ea:f4:2d:5f:
3c:64:09:b3:a5:0b:b7:13:70:fd:ba:07:3b:e7:bc:bd:84:63:
48:9a:a1:9b:b5:6c:e9:1f:ca:4a:5a:70:c3:39:1e:70:7b:11:
a8:50:b6:22:a9:a0:87:87:47:0a:e7:0c:f2:75:f9:5b:7a:57:
96:9a:ee:83:17:3e:59:42:92:9b:6f:92:31:87:f1:1e:22:8d:
20:82:1d:36:d8:ba:ad:4e:66:e8:b8:cd:b7:79:33:93:48:9e:
5c:e2:2a:f3:43:22:7b:49:e5:32:df:a4:d0:3c:93:64:65:05:
4f:ff:71:6f:c5:56:e7:78:a2:99:39:a9:b9:40:ca:c1:a9:9a:
9c:f3:39:18:04:3a:b8:44:c1:cf:7e:4c:f1:77:85:ee:6c:49:
40:d1:46:34:47:0c:c5:a2:6d:0b:a6:5a:dc:12:b6:0f:a3:70:
aa:85:c9:7c:a6:10:ca:ad:5f:19:cf:64:36:dc:18:3f:94:50:
bb:d4:3a:c2:df:37:12:eb:b4:2a:0f:5c:1b:78:67:ac:fc:34:
bd:0b:ab:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOgPSZG5PM63b6fNeSjr+y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MGMzODYwZmI5NmE4MjM5NzFlMmVlNjJmOGFiZmYwOTM4
NjE2MDQwHhcNMjQxMjA3MDgyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzM4YWY5YzM5ZGM4OTQ2NTg5NjNiZTI3ZTE2NWRkN2ZmMGVhYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktYRYhiKOMcreqSPs5nHntFeZg1Y
OxtLPXTTu0VgG1Hf7KENVYjvIQ8iY6rNPxTEP6EROjnwfvr4awNofoqGrN2it90v
kPryOFD1JqTx+JiNyQuMrnHp5rbwAwlnpG+NkH0I1hq1/yEnEWT+s3Z+6qW2xiek
sW8Esf/ELaVDFdkX0/HxLbjBhUfU1czi8DpOC6DA/bZ1RHw7QLjL8ehgV2c0m1nH
o6j0GuK0ljrSpByj6RO4mrFhnKzcRs1Zd45S+No2uUdKr/aVyUqwC4TyocgGX5SD
Tm0Njl/GN1EywHyEfcIt6Uo16eHScopihgR6Eeq4yQKUTIWvvCBkUl87/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCc4r5w53IlGWJY74n4WXdf/DqsWMB8GA1UdIwQY
MBaAFCgMOGD7lqgjlx4u5i+Kv/CThhYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQt
MDYzYWVhOTNhZDdkLzEvSnppdm5EbmNpVVpZbGp2aWZoWmQxXzhPcXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQtMDYzYWVhOTNhZDdk
LzEvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYIvMA0G
CSqGSIb3DQEBCwUAA4IBAQA7rUDbOUnVCIX7Sq47VFE20PWOC1wfzzefLXGZhcME
hCCrWAdKBqYcHyUE1Ergft7PTur0LV88ZAmzpQu3E3D9ugc757y9hGNImqGbtWzp
H8pKWnDDOR5wexGoULYiqaCHh0cK5wzydflbeleWmu6DFz5ZQpKbb5Ixh/EeIo0g
gh022LqtTmbouM23eTOTSJ5c4irzQyJ7SeUy36TQPJNkZQVP/3FvxVbneKKZOam5
QMrBqZqc8zkYBDq4RMHPfkzxd4XubElA0UY0RwzFom0LplrcErYPo3Cqhcl8phDK
rV8Zz2Q23Bg/lFC71DrC3zcS67QqD1wbeGes/DS9C6uO
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:05 2024 by rpki-client on console.sobornost.net