Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/314GpxCB-rSTIcWgYA7v7sAbt30.roa
File: 314GpxCB-rSTIcWgYA7v7sAbt30.roa (raw, json)
Hash identifier: JBpKVJ6HTxDjSKMW56/NaRT38tPOHpDQIahwIAIaKUo=
Subject key identifier: DF:5E:06:A7:10:81:FA:B4:93:21:C5:A0:60:0E:EF:EE:C0:1B:B7:7D
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0193CA2157383A7A24A343516D1BABDA9C35
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/314GpxCB-rSTIcWgYA7v7sAbt30.roa
Signing time: Sun 15 Dec 2024 11:43:22 +0000
ROA not before: Sun 15 Dec 2024 11:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59584
IP address blocks: 193.26.122.0/24 maxlen: 24
193.178.215.0/24 maxlen: 24
2a0e:e6c0:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:21:57:38:3a:7a:24:a3:43:51:6d:1b:ab:da:9c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Dec 15 11:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df5e06a71081fab49321c5a0600eefeec01bb77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:85:1a:3b:da:31:4d:ce:b3:eb:21:d3:74:
03:ce:08:eb:73:ae:f3:a7:c6:95:fb:21:4b:bf:d7:
6a:31:0f:a7:08:dd:ee:a8:e7:27:8d:f6:81:9b:e4:
4a:6f:d5:47:c4:e3:13:0b:26:91:48:4e:20:92:4e:
b3:2f:f0:96:a5:fd:68:f6:89:3d:07:3b:e7:51:c7:
55:ac:fe:8e:c2:75:22:f7:bd:44:47:27:97:e8:43:
69:00:8b:e9:14:fc:8b:be:6b:5c:7f:8d:1c:b2:5b:
d0:a1:62:3c:eb:3b:9d:6e:c1:78:04:10:9f:b8:26:
aa:f5:13:25:19:f7:ec:26:df:2a:6f:95:c9:51:01:
d2:a9:7e:44:ec:80:06:fc:70:8e:f2:16:2f:fd:98:
08:3a:71:47:af:ce:77:65:6a:f6:ec:44:a4:6c:8b:
09:c6:3a:69:c4:59:a1:77:90:1a:04:1d:45:21:79:
55:fd:df:5a:24:f8:d7:1c:61:cf:bc:b4:02:fb:a2:
0f:c5:d8:48:af:10:2e:1c:5a:05:dc:25:2a:36:bd:
e9:75:6a:6d:11:70:ed:91:4f:08:57:89:bc:d1:49:
a2:0e:0f:ae:2b:b4:d7:6a:1a:22:52:16:12:3d:83:
9f:1a:80:9c:f6:16:05:ea:bb:f8:92:bc:fd:5b:53:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:06:A7:10:81:FA:B4:93:21:C5:A0:60:0E:EF:EE:C0:1B:B7:7D
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/314GpxCB-rSTIcWgYA7v7sAbt30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.122.0/24
193.178.215.0/24
IPv6:
2a0e:e6c0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
4b:52:c8:17:26:72:31:9a:e9:a0:e8:b0:98:73:f8:ff:b5:31:
04:b5:2c:78:c5:95:38:3e:7e:dc:35:76:8b:90:b8:e5:5a:1d:
f8:8b:d9:78:aa:09:26:98:31:34:09:eb:aa:e1:12:d7:38:36:
4b:a1:32:84:df:34:dd:90:e0:76:79:ab:61:d2:df:7c:e9:ec:
32:6f:9d:9e:26:c9:63:97:2a:89:38:66:e9:de:3e:9c:50:b3:
42:fd:85:be:dc:b9:0e:37:f5:9b:66:ee:1b:74:88:7e:3e:b9:
96:33:35:d5:2c:ee:72:02:40:a1:ec:63:35:68:59:19:43:a0:
1c:a1:18:ad:bf:f5:85:a5:45:7c:96:12:9e:74:ab:d8:30:f9:
d1:93:8b:a6:25:79:91:4f:b6:35:7f:8f:79:65:b6:da:7a:d1:
58:38:69:16:0d:c4:62:59:08:e3:99:bc:77:c3:67:6e:a0:51:
df:94:2e:ee:41:2f:c3:a0:e3:00:03:ba:d7:39:4c:c7:5d:06:
e5:99:c0:63:51:e9:7c:32:9d:b9:d4:b9:47:ff:43:1a:a4:79:
c4:82:31:cf:85:33:65:15:fc:7f:8b:eb:20:d8:e5:86:10:d5:
68:a1:3f:49:05:18:8a:30:d4:81:47:33:cb:ef:23:76:fd:bb:
1d:67:30:8b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZPKIVc4Onoko0NRbRur2pw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz
YmEyZjEwHhcNMjQxMjE1MTE0MzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjVlMDZhNzEwODFmYWI0OTMyMWM1YTA2MDBlZWZlZWMwMWJiNzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3aFGjvaMU3Os+sh03QDzgjrc67z
p8aV+yFLv9dqMQ+nCN3uqOcnjfaBm+RKb9VHxOMTCyaRSE4gkk6zL/CWpf1o9ok9
BzvnUcdVrP6OwnUi971ERyeX6ENpAIvpFPyLvmtcf40cslvQoWI86zudbsF4BBCf
uCaq9RMlGffsJt8qb5XJUQHSqX5E7IAG/HCO8hYv/ZgIOnFHr853ZWr27ESkbIsJ
xjppxFmhd5AaBB1FIXlV/d9aJPjXHGHPvLQC+6IPxdhIrxAuHFoF3CUqNr3pdWpt
EXDtkU8IV4m80UmiDg+uK7TXahoiUhYSPYOfGoCc9hYF6rv4krz9W1NRDwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFN9eBqcQgfq0kyHFoGAO7+7AG7d9MB8GA1UdIwQY
MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt
NTA0ZjI3NjY3NjBmLzEvMzE0R3B4Q0ItclNUSWNXZ1lBN3Y3c0FidDMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm
LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAwRp6AwQA
wbLXMA4EAgACMAgDBgQqDubAQDANBgkqhkiG9w0BAQsFAAOCAQEAS1LIFyZyMZrp
oOiwmHP4/7UxBLUseMWVOD5+3DV2i5C45Vod+IvZeKoJJpgxNAnrquES1zg2S6Ey
hN803ZDgdnmrYdLffOnsMm+dnibJY5cqiThm6d4+nFCzQv2Fvty5Djf1m2buG3SI
fj65ljM11SzucgJAoexjNWhZGUOgHKEYrb/1haVFfJYSnnSr2DD50ZOLpiV5kU+2
NX+PeWW22nrRWDhpFg3EYlkI45m8d8NnbqBR35Qu7kEvw6DjAAO61zlMx10G5ZnA
Y1HpfDKdudS5R/9DGqR5xIIxz4UzZRX8f4vrINjlhhDVaKE/SQUYijDUgUczy+8j
dv27HWcwiw==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:45 2024 by rpki-client on console.sobornost.net