Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/gEBD1SrlixKLUIhv281F9gdrYRU.roa
File: gEBD1SrlixKLUIhv281F9gdrYRU.roa (raw, json)
Hash identifier: zq165Ib3ZWzi609hfGZ6pOD80SzZXLMH5NgYIdn8C9M=
Subject key identifier: 80:40:43:D5:2A:E5:8B:12:8B:50:88:6F:DB:CD:45:F6:07:6B:61:15
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 018CC5011D784FEDAFEE9F3595067CC410E2
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/gEBD1SrlixKLUIhv281F9gdrYRU.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35523
IP address blocks: 193.239.216.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1d:78:4f:ed:af:ee:9f:35:95:06:7c:c4:10:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=804043d52ae58b128b50886fdbcd45f6076b6115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:27:ab:9f:7c:6c:b4:7a:53:30:94:7f:6d:
af:99:f5:b7:f2:26:03:3a:a7:b8:1b:f7:8f:d9:2e:
23:de:15:dd:28:9b:e7:c7:8d:0d:ed:43:c4:c7:2d:
57:96:c9:ed:ee:5e:ae:ec:33:66:74:0a:8d:6e:72:
c3:ad:ea:74:fa:32:2e:d1:36:7e:d4:25:58:c9:9c:
aa:ef:c2:c3:23:2e:27:9b:04:26:d6:4a:dc:9e:e0:
82:cc:63:db:9f:20:33:0a:b7:9b:fd:01:bc:6e:82:
94:0b:40:31:02:d3:64:0f:23:0a:c1:89:c3:0b:ed:
03:ec:a7:c0:f6:d8:81:fa:2d:da:98:15:ee:9f:77:
0d:c3:91:4b:64:b8:18:27:aa:83:93:c5:26:cf:e9:
4f:f0:6a:c3:bf:b9:d5:7d:a5:3e:34:d5:6e:46:1b:
05:6a:de:75:f2:14:ad:58:5a:98:7c:9a:bb:5f:50:
c4:1d:4d:7a:33:91:68:30:ee:89:6a:e6:a0:ae:c4:
23:04:03:6e:4e:cc:c6:ee:82:cd:0d:96:e6:e1:14:
a7:a2:65:09:82:df:eb:ce:84:5a:09:c6:bc:ae:1f:
c3:62:ec:2c:9c:19:3f:cb:da:4b:a3:28:28:16:f7:
03:72:e8:6f:d8:ce:d2:33:f2:2a:a8:c8:d3:f3:21:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:40:43:D5:2A:E5:8B:12:8B:50:88:6F:DB:CD:45:F6:07:6B:61:15
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/gEBD1SrlixKLUIhv281F9gdrYRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.216.0/23
Signature Algorithm: sha256WithRSAEncryption
62:c8:96:61:3e:3d:20:80:9f:6c:8f:63:e4:5e:a4:b2:bc:b0:
40:81:80:3d:08:f6:e1:1a:f1:4d:94:8e:10:e0:76:3d:d4:9d:
22:bb:0e:8f:ab:da:7a:00:63:1a:34:3f:3a:1e:cb:4a:e4:44:
c2:ae:87:5d:06:db:a4:a5:92:a7:af:5d:0e:71:70:7c:08:17:
46:d4:95:7a:a1:ea:ad:e3:6b:53:c2:36:7f:7b:f5:97:69:1f:
43:8e:7a:d9:f8:4a:c7:29:00:15:28:92:1d:ab:48:98:9f:1f:
53:cd:1b:75:89:a5:8a:8c:7f:16:97:60:d0:d8:82:81:72:22:
5e:37:ee:74:ee:d2:0a:2c:e6:1e:ef:87:7e:86:62:94:67:3d:
53:71:aa:80:49:11:0a:fa:db:9a:a3:d4:be:cc:3d:25:c0:b9:
df:46:6c:d7:1d:87:31:63:e4:70:3e:b6:de:4b:73:ca:58:28:
88:b5:58:26:33:2c:d7:50:64:02:05:d6:04:3d:4d:4b:ef:ac:
cc:e9:06:44:c1:db:7c:24:53:eb:2c:54:79:47:72:86:4a:dc:
6b:b2:f8:39:5f:8c:8a:82:76:6e:20:fd:69:29:3e:90:22:8c:
61:b6:47:fe:59:6d:04:09:a7:c6:ec:30:3f:38:ed:ba:a0:cc:
cd:28:91:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAR14T+2v7p81lQZ8xBDiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODcxNDJiZGMyYjNmMGQwODQ4YTBkODAwYjY5MzBiMWFi
YjM0YmMwHhcNMjQwMTAxMTIzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDQwNDNkNTJhZTU4YjEyOGI1MDg4NmZkYmNkNDVmNjA3NmI2MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik8nq598bLR6UzCUf22vmfW38iYD
Oqe4G/eP2S4j3hXdKJvnx40N7UPExy1Xlsnt7l6u7DNmdAqNbnLDrep0+jIu0TZ+
1CVYyZyq78LDIy4nmwQm1krcnuCCzGPbnyAzCreb/QG8boKUC0AxAtNkDyMKwYnD
C+0D7KfA9tiB+i3amBXun3cNw5FLZLgYJ6qDk8Umz+lP8GrDv7nVfaU+NNVuRhsF
at518hStWFqYfJq7X1DEHU16M5FoMO6JauagrsQjBANuTszG7oLNDZbm4RSnomUJ
gt/rzoRaCca8rh/DYuwsnBk/y9pLoygoFvcDcuhv2M7SM/IqqMjT8yG5TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBAQ9Uq5YsSi1CIb9vNRfYHa2EVMB8GA1UdIwQY
MBaAFA2HFCvcKz8NCEig2AC2kwsauzS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQt
YTMxNzA4ZDQwMzkxLzEvZ0VCRDFTcmxpeEtMVUlodjI4MUY5Z2RyWVJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQtYTMxNzA4ZDQwMzkx
LzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe/YMA0G
CSqGSIb3DQEBCwUAA4IBAQBiyJZhPj0ggJ9sj2PkXqSyvLBAgYA9CPbhGvFNlI4Q
4HY91J0iuw6Pq9p6AGMaND86HstK5ETCroddBtukpZKnr10OcXB8CBdG1JV6oeqt
42tTwjZ/e/WXaR9DjnrZ+ErHKQAVKJIdq0iYnx9TzRt1iaWKjH8Wl2DQ2IKBciJe
N+507tIKLOYe74d+hmKUZz1TcaqASREK+tuao9S+zD0lwLnfRmzXHYcxY+RwPrbe
S3PKWCiItVgmMyzXUGQCBdYEPU1L76zM6QZEwdt8JFPrLFR5R3KGStxrsvg5X4yK
gnZuIP1pKT6QIoxhtkf+WW0ECafG7DA/OO26oMzNKJET
-----END CERTIFICATE-----
Generated at Wed Sep 11 05:47:52 2024 by rpki-client on console.sobornost.net