Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/RJzHXOzsqNI_nP9BpGENtWlFdQs.roa
File: RJzHXOzsqNI_nP9BpGENtWlFdQs.roa (raw, json)
Hash identifier: ZAmoWBVr9cJouq1EOeAbUBH2hnHUN01RnAyvlxD5NKo=
Subject key identifier: 44:9C:C7:5C:EC:EC:A8:D2:3F:9C:FF:41:A4:61:0D:B5:69:45:75:0B
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 01934E370A46FF19AA00E4D4B13B9FFBE91B
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/RJzHXOzsqNI_nP9BpGENtWlFdQs.roa
Signing time: Thu 21 Nov 2024 10:14:10 +0000
ROA not before: Thu 21 Nov 2024 10:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43013
IP address blocks: 185.88.56.0/22 maxlen: 22
188.65.96.0/21 maxlen: 21
2a02:60c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:37:0a:46:ff:19:aa:00:e4:d4:b1:3b:9f:fb:e9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Nov 21 10:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=449cc75cececa8d23f9cff41a4610db56945750b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:d5:db:f6:91:a6:bb:99:d8:e0:3f:cc:de:
65:12:64:92:b9:80:29:98:e2:b1:6f:b3:4f:ff:9e:
5c:51:c3:fc:8f:da:09:66:26:e0:de:77:62:d7:1e:
af:42:17:e6:0a:f4:cf:75:c1:32:d9:da:59:10:66:
56:57:c9:a9:1d:6a:7b:4d:8a:17:f6:e5:ef:79:3c:
02:2d:f5:a9:05:a1:75:93:78:26:5e:57:e1:2b:64:
5e:17:49:d4:d9:4c:fc:24:72:14:7d:de:fb:bd:33:
dd:51:aa:7e:09:2b:ac:cd:7a:5f:45:1d:b4:df:64:
34:df:48:eb:cb:04:07:ea:4e:b6:d4:c0:47:04:ab:
7e:25:61:4b:10:cf:69:16:e1:c5:60:d1:8d:d9:f3:
93:6c:a6:b9:d2:ba:e2:de:65:c3:20:65:f1:fe:17:
a9:c6:11:91:4f:21:7b:22:4f:17:86:fd:d0:e6:a9:
fa:3b:29:58:ac:07:81:7c:d0:b1:b0:24:d8:ad:22:
0f:57:a9:ca:f1:8f:bd:9f:6c:7c:3d:f3:19:5c:21:
00:f5:fb:69:c4:7b:94:e3:0b:6a:96:ac:45:1a:45:
71:b4:b2:d4:89:4a:57:9d:10:cf:9c:7a:4d:f8:77:
61:69:b4:49:41:8b:f6:85:5d:13:a3:92:f6:a1:72:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9C:C7:5C:EC:EC:A8:D2:3F:9C:FF:41:A4:61:0D:B5:69:45:75:0B
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/RJzHXOzsqNI_nP9BpGENtWlFdQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.56.0/22
188.65.96.0/21
IPv6:
2a02:60c0::/32
Signature Algorithm: sha256WithRSAEncryption
45:2f:b2:ec:e1:b1:c3:ab:35:11:37:45:e6:3c:71:05:97:24:
66:f8:f0:77:a1:83:3f:ef:2a:7c:79:94:74:0e:7e:48:8f:0a:
c8:05:00:2b:71:5a:4b:00:87:a0:df:35:c1:17:ad:e5:9c:d7:
9a:7e:8c:0c:05:28:f6:02:19:6c:29:e2:e8:44:18:8f:41:f6:
32:8d:22:5e:61:71:b5:43:0a:b6:67:b1:82:2f:d6:28:3c:3c:
03:c3:1d:01:24:e1:58:69:8e:bd:ed:40:90:14:5f:a9:a4:04:
24:d9:30:5d:f6:fa:e8:c6:af:5b:4d:39:09:16:41:b9:92:42:
b6:86:10:56:86:6b:17:77:be:36:e1:dd:49:29:ec:c8:6a:97:
26:65:8e:47:f8:ec:38:7b:74:70:0c:9e:dc:f8:ce:72:7a:7f:
4c:50:82:2b:f4:7a:d4:f6:5b:4c:35:3e:b9:6b:2a:fd:e9:91:
6e:e2:72:c4:dd:a2:50:8c:b5:23:bb:be:c5:17:18:f7:2c:20:
3b:9e:a6:17:7c:fa:cf:77:f6:95:29:cc:dc:ae:88:35:7f:4d:
23:6a:b2:f6:64:cf:a0:ab:d0:00:d7:3d:bb:34:9e:d8:e4:19:
bc:b1:8e:c5:f0:c5:85:00:19:79:0f:96:70:67:61:5f:2e:8e:
80:fa:58:df
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZNONwpG/xmqAOTUsTuf++kbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTRkNzBjZmI3ZTY5MDE5YTJlMDFjODdkMGE1ZDU0NWE1
OTliNTIwHhcNMjQxMTIxMTAxNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDljYzc1Y2VjZWNhOGQyM2Y5Y2ZmNDFhNDYxMGRiNTY5NDU3NTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlnV2/aRpruZ2OA/zN5lEmSSuYAp
mOKxb7NP/55cUcP8j9oJZibg3ndi1x6vQhfmCvTPdcEy2dpZEGZWV8mpHWp7TYoX
9uXveTwCLfWpBaF1k3gmXlfhK2ReF0nU2Uz8JHIUfd77vTPdUap+CSuszXpfRR20
32Q030jrywQH6k621MBHBKt+JWFLEM9pFuHFYNGN2fOTbKa50rri3mXDIGXx/hep
xhGRTyF7Ik8Xhv3Q5qn6OylYrAeBfNCxsCTYrSIPV6nK8Y+9n2x8PfMZXCEA9ftp
xHuU4wtqlqxFGkVxtLLUiUpXnRDPnHpN+HdhabRJQYv2hV0To5L2oXIouQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEScx1zs7KjSP5z/QaRhDbVpRXULMB8GA1UdIwQY
MBaAFCyU1wz7fmkBmi4ByH0KXVRaWZtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xYmRhN2MtOTg1OC00M2Y1LTg2NTkt
NjlmYzA1NmIyNjI1LzEvUkp6SFhPenNxTklfblA5QnBHRU50V2xGZFFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xYmRhN2MtOTg1OC00M2Y1LTg2NTktNjlmYzA1NmIyNjI1
LzEvTEpUWERQdC1hUUdhTGdISWZRcGRWRnBabTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuVg4AwQD
vEFgMA0EAgACMAcDBQAqAmDAMA0GCSqGSIb3DQEBCwUAA4IBAQBFL7Ls4bHDqzUR
N0XmPHEFlyRm+PB3oYM/7yp8eZR0Dn5IjwrIBQArcVpLAIeg3zXBF63lnNeafowM
BSj2AhlsKeLoRBiPQfYyjSJeYXG1Qwq2Z7GCL9YoPDwDwx0BJOFYaY697UCQFF+p
pAQk2TBd9vroxq9bTTkJFkG5kkK2hhBWhmsXd7424d1JKezIapcmZY5H+Ow4e3Rw
DJ7c+M5yen9MUIIr9HrU9ltMNT65ayr96ZFu4nLE3aJQjLUju77FFxj3LCA7nqYX
fPrPd/aVKczcrog1f00jarL2ZM+gq9AA1z27NJ7Y5Bm8sY7F8MWFABl5D5ZwZ2Ff
Lo6A+ljf
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:27 2024 by rpki-client on console.sobornost.net