Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/ijTsDLXzWKCFTx8TFUCDTt5_3yc.roa
File: ijTsDLXzWKCFTx8TFUCDTt5_3yc.roa (raw, json)
Hash identifier: ZIRzd7X5eV7/AVh8t43kyFISBFskcXf/yRuY3tniJG4=
Subject key identifier: 8A:34:EC:0C:B5:F3:58:A0:85:4F:1F:13:15:40:83:4E:DE:7F:DF:27
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 01914C20BD672F81882D3C8E4EBC63EED3B8
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/ijTsDLXzWKCFTx8TFUCDTt5_3yc.roa
Signing time: Tue 13 Aug 2024 14:24:59 +0000
ROA not before: Tue 13 Aug 2024 14:24:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34700
IP address blocks: 5.255.160.0/20 maxlen: 20
31.202.0.0/16 maxlen: 20
46.160.64.0/18 maxlen: 21
79.171.120.0/21 maxlen: 21
82.117.247.0/24 maxlen: 24
82.117.248.0/22 maxlen: 23
85.90.222.0/24 maxlen: 24
178.165.0.0/17 maxlen: 20
185.147.96.0/22 maxlen: 22
2a00:1210::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:20:bd:67:2f:81:88:2d:3c:8e:4e:bc:63:ee:d3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Aug 13 14:24:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a34ec0cb5f358a0854f1f131540834ede7fdf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f8:0d:7a:cd:da:66:c9:05:09:36:01:aa:da:
13:c3:32:7d:1c:a8:37:d5:9d:41:ab:5c:7d:51:65:
f1:84:af:5d:70:c3:fc:da:d5:8f:b9:12:1a:4e:58:
3e:cb:52:1e:1d:2a:f1:d1:74:d0:ab:e6:ba:9f:f6:
55:47:77:bf:ad:2b:64:35:33:cd:d7:ed:da:a0:2a:
10:f3:a8:a8:a6:83:71:5f:47:74:94:26:79:7d:02:
80:19:0c:83:83:92:37:ea:1f:17:38:79:c2:79:c5:
3e:15:70:46:84:71:47:5e:11:8c:c1:8d:29:c9:e8:
e1:8f:2b:fe:9d:0e:ff:b0:86:d3:ef:b7:f1:a9:ec:
18:1a:12:a8:3d:74:7b:c9:bb:90:39:be:26:1c:24:
50:81:ee:ba:ad:24:b1:96:3e:2f:76:db:09:d5:05:
01:55:07:e7:7c:33:27:ec:8d:8e:2b:42:82:44:31:
02:77:c1:60:b8:23:a7:a7:d6:d9:6f:07:a5:77:96:
e3:37:3f:32:a6:84:b8:40:68:b3:51:5d:c3:5d:67:
f7:b0:ad:2d:f4:39:20:6d:c2:98:47:b5:04:3d:f6:
91:97:b4:50:0e:7a:8a:c4:0b:ee:d8:9e:41:b1:64:
68:a1:c2:de:fc:3f:47:77:93:5b:d4:a4:e2:3b:6b:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:34:EC:0C:B5:F3:58:A0:85:4F:1F:13:15:40:83:4E:DE:7F:DF:27
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/ijTsDLXzWKCFTx8TFUCDTt5_3yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.160.0/20
31.202.0.0/16
46.160.64.0/18
79.171.120.0/21
82.117.247.0-82.117.251.255
85.90.222.0/24
178.165.0.0/17
185.147.96.0/22
IPv6:
2a00:1210::/32
Signature Algorithm: sha256WithRSAEncryption
77:8b:81:18:a2:c5:4f:7e:be:3c:bc:99:f2:b1:b1:24:1d:9d:
a4:65:a3:22:b7:58:6c:7f:1d:27:18:1b:61:69:0f:1a:ae:e9:
d9:28:ff:c5:80:63:29:1e:b1:5c:79:bc:38:e7:b0:5b:e7:7a:
5b:99:e6:c4:2c:0c:86:cb:09:bb:bf:a2:64:d3:ce:61:12:7b:
eb:fb:ff:e9:26:27:38:6e:0e:c1:83:50:b9:b6:5b:ac:9b:04:
9b:13:91:16:89:a3:c7:c0:7f:14:72:e5:e0:b3:0d:dd:5d:6d:
f8:ef:1e:db:c8:23:db:f6:94:13:2f:5d:50:0a:33:a4:21:73:
57:26:7b:98:d6:17:d6:5f:80:04:d7:a0:47:1d:b3:b0:15:0b:
a9:84:b9:77:e9:80:44:17:75:65:ca:bb:02:8f:e0:8b:54:87:
5c:72:79:b2:83:52:2d:f4:a9:32:04:e0:cb:35:72:59:a6:8e:
51:e1:ce:59:f4:95:ae:12:18:c0:35:60:4b:f4:2a:7c:f4:60:
ba:fb:f0:1e:f9:b9:f9:ce:56:ea:d5:2b:ca:6a:ae:18:a4:e0:
71:19:41:35:71:8d:0c:50:56:be:86:84:ec:25:b8:99:48:f1:
35:0d:5e:d5:96:a8:4d:cf:82:07:b6:12:49:3d:72:dc:ab:cf:
1d:f6:db:97
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZFMIL1nL4GILTyOTrxj7tO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2E5YjE3NDVhNWE3MGMzYmY3YmNjMmMyZWUxNjY0NjBh
ZmY3YTgwHhcNMjQwODEzMTQyNDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTM0ZWMwY2I1ZjM1OGEwODU0ZjFmMTMxNTQwODM0ZWRlN2ZkZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PgNes3aZskFCTYBqtoTwzJ9HKg3
1Z1Bq1x9UWXxhK9dcMP82tWPuRIaTlg+y1IeHSrx0XTQq+a6n/ZVR3e/rStkNTPN
1+3aoCoQ86iopoNxX0d0lCZ5fQKAGQyDg5I36h8XOHnCecU+FXBGhHFHXhGMwY0p
yejhjyv+nQ7/sIbT77fxqewYGhKoPXR7ybuQOb4mHCRQge66rSSxlj4vdtsJ1QUB
VQfnfDMn7I2OK0KCRDECd8FguCOnp9bZbweld5bjNz8ypoS4QGizUV3DXWf3sK0t
9DkgbcKYR7UEPfaRl7RQDnqKxAvu2J5BsWRoocLe/D9Hd5Nb1KTiO2v53QIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFIo07Ay181ighU8fExVAg07ef98nMB8GA1UdIwQY
MBaAFK56mxdFpacMO/e8wsLuFmRgr/eoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMt
Y2M5YTc1OGM5OTE2LzEvaWpUc0RMWHpXS0NGVHg4VEZVQ0RUdDVfM3ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMtY2M5YTc1OGM5OTE2
LzEvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA9BAIAATA3AwQEBf+gAwMA
H8oDBAYuoEADBANPq3gwDAMEAFJ19wMEAlJ1+AMEAFVa3gMEB7KlAAMEArmTYDAN
BAIAAjAHAwUAKgASEDANBgkqhkiG9w0BAQsFAAOCAQEAd4uBGKLFT36+PLyZ8rGx
JB2dpGWjIrdYbH8dJxgbYWkPGq7p2Sj/xYBjKR6xXHm8OOewW+d6W5nmxCwMhssJ
u7+iZNPOYRJ76/v/6SYnOG4OwYNQubZbrJsEmxORFomjx8B/FHLl4LMN3V1t+O8e
28gj2/aUEy9dUAozpCFzVyZ7mNYX1l+ABNegRx2zsBULqYS5d+mARBd1Zcq7Ao/g
i1SHXHJ5soNSLfSpMgTgyzVyWaaOUeHOWfSVrhIYwDVgS/QqfPRguvvwHvm5+c5W
6tUrymquGKTgcRlBNXGNDFBWvoaE7CW4mUjxNQ1e1ZaoTc+CB7YSST1y3KvPHfbb
lw==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:44 2024 by rpki-client on console.sobornost.net