Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/qDOm1gKEr8LXMok19S1kI7XhEoE.roa
File: qDOm1gKEr8LXMok19S1kI7XhEoE.roa (raw, json)
Hash identifier: BbhjmL0GeQs9HOP77T0v4EGgQoBmFViPkxODe6khqtE=
Subject key identifier: A8:33:A6:D6:02:84:AF:C2:D7:32:89:35:F5:2D:64:23:B5:E1:12:81
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 019391C72E69157FE99B9B1FCB5DA0B8BE86
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/qDOm1gKEr8LXMok19S1kI7XhEoE.roa
Signing time: Wed 04 Dec 2024 13:06:10 +0000
ROA not before: Wed 04 Dec 2024 13:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214330
IP address blocks: 89.44.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:c7:2e:69:15:7f:e9:9b:9b:1f:cb:5d:a0:b8:be:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Dec 4 13:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a833a6d60284afc2d7328935f52d6423b5e11281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:16:91:78:39:59:45:ba:11:75:83:3e:01:
16:be:52:a0:8b:ea:f8:77:a5:47:61:73:8d:a1:e0:
02:b1:76:18:99:c3:17:da:fb:49:73:e7:ec:94:96:
28:d7:c0:35:4c:94:cf:1e:88:a4:9a:24:92:00:2e:
ff:2b:12:49:88:a9:92:90:8d:ce:b1:2c:37:6a:37:
0e:5a:87:27:a1:65:a2:f4:a0:b2:54:d4:28:09:f4:
0b:32:0c:07:17:f4:87:60:e4:a0:cd:be:e0:be:70:
ea:06:66:24:e3:99:d7:bc:d8:66:3c:fc:82:3e:b7:
5e:86:6e:2c:3f:de:52:82:db:ac:3a:1c:7a:b8:df:
bc:c3:d7:68:c4:ce:2f:50:7b:da:e2:63:c6:bd:eb:
ae:51:8a:56:cd:ac:4e:4c:0e:60:3b:1c:30:b5:99:
63:50:88:4b:42:00:ef:c3:b6:d3:2f:78:2f:cc:b5:
77:9c:cf:5e:52:e3:3d:4e:45:ed:61:1f:06:86:43:
96:f5:ea:04:17:92:75:de:97:29:d2:77:4d:1c:3d:
01:c9:3f:ae:66:dd:1e:f3:5f:95:17:fe:b2:87:d7:
99:63:31:f5:10:7c:90:21:46:32:20:3b:de:c6:ef:
d2:9d:dd:71:6d:18:c4:5c:e3:58:16:f2:56:35:02:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:A6:D6:02:84:AF:C2:D7:32:89:35:F5:2D:64:23:B5:E1:12:81
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/qDOm1gKEr8LXMok19S1kI7XhEoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.246.0/24
Signature Algorithm: sha256WithRSAEncryption
39:8f:a1:05:e0:4f:e1:98:13:c6:9d:fe:00:2c:fa:37:51:ec:
c0:c2:a1:df:ea:03:cb:bc:7c:8b:f8:a8:f5:0e:7b:cf:8d:cb:
b3:a5:5e:9b:bc:6f:7f:9d:b2:79:06:96:eb:c6:23:cb:ba:85:
67:e6:83:c5:45:1e:2d:75:56:be:ea:cc:59:0f:33:1f:32:74:
3e:97:65:8e:8d:15:2f:60:81:62:2a:c1:5e:fb:32:18:16:9b:
0c:1e:b8:cc:d2:4b:95:76:f2:fc:ac:ad:30:d3:3f:73:49:ba:
27:fe:05:e1:46:fb:7a:69:c5:d1:31:00:f6:78:5f:61:93:f9:
a3:67:29:e7:14:65:f2:3d:54:7a:0b:3e:d5:69:92:10:16:5a:
33:60:99:d4:19:1b:97:90:dc:b0:4b:dc:2a:48:1c:9e:7b:64:
6a:78:f2:cd:f6:3b:c6:61:69:2a:02:e4:c0:ae:80:8a:97:3c:
91:3e:55:44:2b:9d:26:be:7c:1d:53:b6:b9:99:a9:d3:1a:5d:
de:5c:f6:4f:31:d6:34:b4:b3:90:45:7e:1a:25:f6:dd:5b:b7:
9e:f9:88:ad:a5:58:56:4a:35:54:4b:40:b6:da:50:7c:48:23:
b3:b9:23:00:84:f3:9f:b5:2a:b4:44:df:50:2d:f5:ac:73:c8:
94:ed:fc:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZORxy5pFX/pm5sfy12guL6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4
NWZmOGMwHhcNMjQxMjA0MTMwNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODMzYTZkNjAyODRhZmMyZDczMjg5MzVmNTJkNjQyM2I1ZTExMjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFsWkXg5WUW6EXWDPgEWvlKgi+r4
d6VHYXONoeACsXYYmcMX2vtJc+fslJYo18A1TJTPHoikmiSSAC7/KxJJiKmSkI3O
sSw3ajcOWocnoWWi9KCyVNQoCfQLMgwHF/SHYOSgzb7gvnDqBmYk45nXvNhmPPyC
Prdehm4sP95SgtusOhx6uN+8w9doxM4vUHva4mPGveuuUYpWzaxOTA5gOxwwtZlj
UIhLQgDvw7bTL3gvzLV3nM9eUuM9TkXtYR8GhkOW9eoEF5J13pcp0ndNHD0ByT+u
Zt0e81+VF/6yh9eZYzH1EHyQIUYyIDvexu/Snd1xbRjEXONYFvJWNQKuQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKgzptYChK/C1zKJNfUtZCO14RKBMB8GA1UdIwQY
MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt
MjVkYmY0MzgwNGM1LzEvcURPbTFnS0VyOExYTW9rMTlTMWtJN1hoRW9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1
LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSz2MA0G
CSqGSIb3DQEBCwUAA4IBAQA5j6EF4E/hmBPGnf4ALPo3UezAwqHf6gPLvHyL+Kj1
DnvPjcuzpV6bvG9/nbJ5BpbrxiPLuoVn5oPFRR4tdVa+6sxZDzMfMnQ+l2WOjRUv
YIFiKsFe+zIYFpsMHrjM0kuVdvL8rK0w0z9zSbon/gXhRvt6acXRMQD2eF9hk/mj
ZynnFGXyPVR6Cz7VaZIQFlozYJnUGRuXkNywS9wqSByee2RqePLN9jvGYWkqAuTA
roCKlzyRPlVEK50mvnwdU7a5manTGl3eXPZPMdY0tLOQRX4aJfbdW7ee+YitpVhW
SjVUS0C22lB8SCOzuSMAhPOftSq0RN9QLfWsc8iU7fw4
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net