Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/5fC_G0sMQQs3q82fp3kj5C7Qebs.roa
File: 5fC_G0sMQQs3q82fp3kj5C7Qebs.roa (raw, json)
Hash identifier: rSXXtw2gCimsZGDkPYfkrS8A5no6iMQrnGfHNXpv9G0=
Subject key identifier: E5:F0:BF:1B:4B:0C:41:0B:37:AB:CD:9F:A7:79:23:E4:2E:D0:79:BB
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 0193F42069C670873D54D1F4719D03E6E1DF
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/5fC_G0sMQQs3q82fp3kj5C7Qebs.roa
Signing time: Mon 23 Dec 2024 15:26:25 +0000
ROA not before: Mon 23 Dec 2024 15:26:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196865
IP address blocks: 109.232.136.0/21 maxlen: 24
178.19.160.0/21 maxlen: 24
178.19.168.0/22 maxlen: 24
185.75.108.0/22 maxlen: 24
185.142.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:20:69:c6:70:87:3d:54:d1:f4:71:9d:03:e6:e1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Dec 23 15:26:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5f0bf1b4b0c410b37abcd9fa77923e42ed079bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:d8:dc:fe:c7:b2:d0:17:a1:19:90:11:75:
cc:62:89:85:44:90:fb:3b:2c:5e:c3:a7:ce:d0:a5:
8e:29:1b:fe:82:a2:be:4e:44:ea:94:41:1d:a1:b2:
20:89:25:65:2e:bb:61:55:17:87:17:ba:e9:e1:8a:
61:7b:59:39:7f:34:c7:02:66:16:82:76:32:9b:e7:
3e:66:23:15:cc:37:6e:e6:a7:00:7b:28:bf:fc:9b:
27:b4:69:b9:af:fe:92:c4:11:3c:b9:d5:e4:f7:3c:
d6:27:aa:ee:13:38:62:74:2a:86:be:4c:a7:7f:bf:
e4:3c:7d:7a:1d:06:57:d5:1a:f1:6d:df:f4:be:40:
79:60:f9:8a:37:c4:9b:b4:d9:b6:6f:e6:95:38:e7:
f3:09:a8:55:b7:df:55:2f:2e:5a:54:0f:b8:ba:db:
ae:71:77:34:cc:78:ed:e9:95:cd:47:60:f7:36:7d:
12:b0:a7:40:d1:58:3d:e8:f7:c3:25:04:d9:84:6d:
86:f0:cb:a4:5a:97:49:b6:03:46:24:5d:59:07:62:
26:3b:88:8d:64:8f:77:b5:f3:97:5a:f2:2c:7f:a6:
32:af:34:a5:92:06:fc:85:f6:23:e7:5a:2a:c3:66:
fb:a0:21:e2:3d:97:16:fa:75:50:45:51:f1:6a:f7:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F0:BF:1B:4B:0C:41:0B:37:AB:CD:9F:A7:79:23:E4:2E:D0:79:BB
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/5fC_G0sMQQs3q82fp3kj5C7Qebs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.136.0/21
178.19.160.0-178.19.171.255
185.75.108.0/22
185.142.168.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ac:cd:a6:76:88:50:10:22:1a:6a:c9:cc:eb:ac:dd:4d:7d:
c3:12:7d:82:ee:68:b3:a4:6c:f7:65:73:6d:99:df:74:b5:fa:
99:94:fc:86:38:df:de:b5:09:e8:da:41:04:83:9f:bc:93:ed:
bd:ce:e0:97:4b:40:eb:eb:aa:2a:ab:17:3f:42:05:a7:4c:aa:
96:43:65:72:ac:af:61:cc:0d:3e:6d:2d:e1:d1:fb:ea:bd:5e:
ea:c1:4f:67:ce:f1:75:15:8b:e8:d0:50:ab:b9:73:e9:22:fc:
03:19:d4:cb:cb:5d:b4:73:38:07:6d:87:f8:84:d6:64:43:a6:
60:71:db:fd:5f:86:9c:80:32:64:d5:55:be:75:d3:8a:49:36:
b1:19:c4:ef:83:14:72:fa:a2:9a:10:c2:23:ba:31:79:81:9e:
ba:ac:b1:0b:19:e6:ec:e4:6f:74:8e:db:c6:5b:79:03:c6:a5:
f1:28:54:b9:20:05:e4:f8:75:ef:ad:03:50:4b:c1:29:3c:72:
fb:42:a9:ac:a8:45:44:a9:8c:32:15:81:06:84:5b:ac:e6:f1:
e1:f1:90:42:dd:6c:6d:08:d5:5e:32:ac:64:48:16:b2:e6:14:
14:85:3f:92:71:61:92:7b:62:07:a5:3a:51:80:d2:a8:12:67:
65:fd:78:16
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZP0IGnGcIc9VNH0cZ0D5uHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYzRmNzBhOTJkNDZhYzAyYzhkZmU3Zjk3NWJlNDhhYmQ2
MmU3YTQwHhcNMjQxMjIzMTUyNjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWYwYmYxYjRiMGM0MTBiMzdhYmNkOWZhNzc5MjNlNDJlZDA3OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXjY3P7HstAXoRmQEXXMYomFRJD7
Oyxew6fO0KWOKRv+gqK+TkTqlEEdobIgiSVlLrthVReHF7rp4Yphe1k5fzTHAmYW
gnYym+c+ZiMVzDdu5qcAeyi//JsntGm5r/6SxBE8udXk9zzWJ6ruEzhidCqGvkyn
f7/kPH16HQZX1Rrxbd/0vkB5YPmKN8SbtNm2b+aVOOfzCahVt99VLy5aVA+4utuu
cXc0zHjt6ZXNR2D3Nn0SsKdA0Vg96PfDJQTZhG2G8MukWpdJtgNGJF1ZB2ImO4iN
ZI93tfOXWvIsf6YyrzSlkgb8hfYj51oqw2b7oCHiPZcW+nVQRVHxave3cQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFOXwvxtLDEELN6vNn6d5I+Qu0Hm7MB8GA1UdIwQY
MBaAFA/E9wqS1GrALI3+f5db5Iq9YuekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgt
NjViODZhMDM1YTA4LzEvNWZDX0cwc01RUXMzcTgyZnAza2o1QzdRZWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgtNjViODZhMDM1YTA4
LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDbeiIMAwD
BAWyE6ADBAKyE6gDBAK5S2wDBAK5jqgwDQYJKoZIhvcNAQELBQADggEBAGmszaZ2
iFAQIhpqyczrrN1NfcMSfYLuaLOkbPdlc22Z33S1+pmU/IY43961CejaQQSDn7yT
7b3O4JdLQOvrqiqrFz9CBadMqpZDZXKsr2HMDT5tLeHR++q9XurBT2fO8XUVi+jQ
UKu5c+ki/AMZ1MvLXbRzOAdth/iE1mRDpmBx2/1fhpyAMmTVVb5104pJNrEZxO+D
FHL6opoQwiO6MXmBnrqssQsZ5uzkb3SO28ZbeQPGpfEoVLkgBeT4de+tA1BLwSk8
cvtCqayoRUSpjDIVgQaEW6zm8eHxkELdbG0I1V4yrGRIFrLmFBSFP5JxYZJ7Ygel
OlGA0qgSZ2X9eBY=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:45 2024 by rpki-client on console.sobornost.net