Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/54rDiGuNf-5tbFCR-JdQo_fSjFc.roa
File: 54rDiGuNf-5tbFCR-JdQo_fSjFc.roa (raw, json)
Hash identifier: Mp4kDb2tbaeyM8FTnpoVbVuzoUP5teljuhBq9IwhjZg=
Subject key identifier: E7:8A:C3:88:6B:8D:7F:EE:6D:6C:50:91:F8:97:50:A3:F7:D2:8C:57
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0193DEDC5D03F525AA170B54D807688579AA
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/54rDiGuNf-5tbFCR-JdQo_fSjFc.roa
Signing time: Thu 19 Dec 2024 12:20:03 +0000
ROA not before: Thu 19 Dec 2024 12:20:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204402
IP address blocks: 188.72.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:dc:5d:03:f5:25:aa:17:0b:54:d8:07:68:85:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Dec 19 12:20:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e78ac3886b8d7fee6d6c5091f89750a3f7d28c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:b8:ab:22:c0:d2:73:0f:4b:7b:cb:02:8b:
b6:f1:3d:a6:a1:e6:62:ac:6f:cb:06:42:0d:d3:74:
c4:c0:3c:ef:f4:fa:be:1d:a8:b0:d4:ba:9f:dd:a8:
8c:69:ce:79:65:2d:cb:b0:d0:80:96:de:1a:c9:4c:
27:c9:b9:6f:f0:50:d8:7b:97:74:42:79:be:35:c4:
b9:15:fb:f6:9c:a0:f9:3f:29:2d:22:22:ce:dd:62:
6e:8c:69:03:83:9e:a3:25:02:59:fa:55:ad:90:44:
ae:26:64:81:a1:6c:37:12:2c:fa:bb:a2:f0:bd:78:
cf:80:fb:e7:40:52:f5:3c:0d:ef:f4:03:c1:06:69:
7a:91:ad:a2:f2:6b:33:43:30:a9:e7:4c:9c:91:e5:
2a:c1:8f:7a:97:c4:ee:e6:9e:9e:58:29:7f:2e:0a:
72:d7:04:3c:c9:e2:cb:47:97:aa:4f:37:c1:3c:35:
02:ac:ae:32:1f:e3:8e:c7:c8:09:fc:0b:28:97:29:
a6:f9:83:71:77:0f:e8:1d:d5:03:c7:7b:c0:a1:e4:
f1:06:6f:89:7c:f9:58:df:c0:40:4f:b6:d0:d1:c6:
6c:fb:79:16:d0:aa:72:29:de:48:14:ab:d0:d0:ee:
b6:01:7f:79:6d:c2:c5:4c:28:27:b0:0a:e0:3e:53:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:C3:88:6B:8D:7F:EE:6D:6C:50:91:F8:97:50:A3:F7:D2:8C:57
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/54rDiGuNf-5tbFCR-JdQo_fSjFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f3:a9:62:4d:bf:9b:90:0b:90:c3:72:bb:ad:94:08:75:00:
2f:67:ac:f1:54:fe:b3:8f:cf:55:5a:ce:0d:77:27:7d:8b:de:
27:2f:c2:9a:cc:b5:c2:84:ba:4b:fa:48:83:29:cb:fc:35:f8:
ce:01:f8:42:01:ff:d4:c4:cd:31:db:00:10:7f:9b:87:c8:29:
bd:64:a5:7a:52:63:d5:ef:03:c3:c4:25:cb:1f:c3:0d:ea:97:
3e:4e:85:7d:38:68:57:b4:fa:08:52:eb:56:71:64:0d:1b:2b:
7b:7a:6e:21:7a:04:37:31:88:83:a3:ea:2f:53:07:2b:2d:c7:
dd:a0:bd:58:15:5a:76:7c:5f:99:78:84:87:f0:48:d4:cd:0d:
12:77:22:f0:57:04:70:ac:df:ef:c2:f7:50:62:d4:fc:17:d5:
13:83:34:30:2b:4f:84:3e:fe:1d:19:9e:4a:09:11:2f:dd:93:
c8:5f:5d:c1:3d:ca:de:fd:be:96:3a:df:91:1f:70:35:dc:a3:
18:4b:7f:c3:18:d9:89:55:76:00:f2:79:c6:55:69:5a:78:eb:
d3:f4:98:c4:56:32:b7:6e:3a:11:dc:bf:b7:b4:60:41:1f:80:
28:fb:5b:a2:c8:d1:85:30:e9:36:f9:1a:63:a9:9c:b3:4f:c3:
bc:03:41:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPe3F0D9SWqFwtU2AdohXmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjQxMjE5MTIyMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzhhYzM4ODZiOGQ3ZmVlNmQ2YzUwOTFmODk3NTBhM2Y3ZDI4YzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq+4qyLA0nMPS3vLAou28T2moeZi
rG/LBkIN03TEwDzv9Pq+Haiw1Lqf3aiMac55ZS3LsNCAlt4ayUwnyblv8FDYe5d0
Qnm+NcS5Ffv2nKD5PyktIiLO3WJujGkDg56jJQJZ+lWtkESuJmSBoWw3Eiz6u6Lw
vXjPgPvnQFL1PA3v9APBBml6ka2i8mszQzCp50yckeUqwY96l8Tu5p6eWCl/Lgpy
1wQ8yeLLR5eqTzfBPDUCrK4yH+OOx8gJ/Asolymm+YNxdw/oHdUDx3vAoeTxBm+J
fPlY38BAT7bQ0cZs+3kW0KpyKd5IFKvQ0O62AX95bcLFTCgnsArgPlMBMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeKw4hrjX/ubWxQkfiXUKP30oxXMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvNTRyRGlHdU5mLTV0YkZDUi1KZFFvX2ZTakZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEheMA0G
CSqGSIb3DQEBCwUAA4IBAQAd86liTb+bkAuQw3K7rZQIdQAvZ6zxVP6zj89VWs4N
dyd9i94nL8KazLXChLpL+kiDKcv8NfjOAfhCAf/UxM0x2wAQf5uHyCm9ZKV6UmPV
7wPDxCXLH8MN6pc+ToV9OGhXtPoIUutWcWQNGyt7em4hegQ3MYiDo+ovUwcrLcfd
oL1YFVp2fF+ZeISH8EjUzQ0SdyLwVwRwrN/vwvdQYtT8F9UTgzQwK0+EPv4dGZ5K
CREv3ZPIX13BPcre/b6WOt+RH3A13KMYS3/DGNmJVXYA8nnGVWlaeOvT9JjEVjK3
bjoR3L+3tGBBH4Ao+1uiyNGFMOk2+RpjqZyzT8O8A0El
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:18 2024 by rpki-client on console.sobornost.net