Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/JddJuiwWfwb-DPvdji9cVlZ-lFQ.roa
File: JddJuiwWfwb-DPvdji9cVlZ-lFQ.roa (raw, json)
Hash identifier: AQdHUua6EM0BqhIh95YlF8MWMWrWKtN3snLbheT0JTk=
Subject key identifier: 25:D7:49:BA:2C:16:7F:06:FE:0C:FB:DD:8E:2F:5C:56:56:7E:94:54
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 07C1E1C4
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/JddJuiwWfwb-DPvdji9cVlZ-lFQ.roa
Signing time: Thu 06 Jan 2022 08:27:11 +0000
ROA not before: Thu 06 Jan 2022 08:27:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42724
IP address blocks: 194.36.84.0/24 maxlen: 24
194.36.86.0/24 maxlen: 24
194.36.87.0/24 maxlen: 24
45.155.127.0/24 maxlen: 24
45.155.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130146756 (0x7c1e1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Jan 6 08:27:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25d749ba2c167f06fe0cfbdd8e2f5c56567e9454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:6c:67:cc:63:57:06:20:08:d7:5f:64:fb:
c5:01:ce:ae:bc:10:94:55:5c:65:41:6a:52:0e:fd:
35:5d:26:c2:aa:fe:cc:b0:96:a8:ba:ef:7a:4c:39:
2a:0c:46:db:ac:87:8e:76:94:ea:97:a4:40:51:78:
db:e9:7f:75:7f:4e:b9:7b:9c:62:2a:2f:79:44:d7:
92:b1:38:a4:27:5a:20:f4:f3:35:f7:da:35:e3:cb:
65:f4:13:ca:cd:dd:4d:cf:2b:61:5b:cb:15:e8:8a:
5e:e8:1f:43:29:ff:50:cc:16:10:29:b8:2d:17:fa:
c9:a2:4a:61:ef:b1:7a:1e:d8:4c:3c:71:20:56:06:
84:e8:87:f7:93:53:cd:d8:ee:27:70:c5:9a:58:9b:
b2:89:12:0a:06:6d:7e:ac:39:ce:7d:dc:94:64:d9:
d2:78:97:df:2b:51:d3:44:90:01:c7:f7:54:82:39:
fa:5a:d5:4c:6b:1c:b8:7c:bb:b6:6b:d0:67:03:53:
5a:68:f0:61:20:a5:24:a2:7d:72:7d:85:1d:b4:c6:
5a:24:aa:36:49:f7:ae:1a:b4:59:47:1a:26:42:58:
64:7d:ad:62:39:e5:56:8c:49:49:bc:52:7d:8a:1c:
81:38:bd:be:13:54:a4:8f:49:39:07:8e:01:36:b7:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:49:BA:2C:16:7F:06:FE:0C:FB:DD:8E:2F:5C:56:56:7E:94:54
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/JddJuiwWfwb-DPvdji9cVlZ-lFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.126.0/23
194.36.84.0/24
194.36.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:fa:1c:2e:94:97:8c:70:ae:f8:f7:5b:eb:93:31:a7:92:f8:
c1:bc:87:94:d1:d3:82:35:b5:e2:8a:0a:4c:d7:7a:24:0c:79:
ca:10:98:6d:32:86:7c:47:ca:cf:b0:13:55:3b:81:28:a9:99:
62:3e:8d:df:17:0a:1f:5f:0e:7f:d4:27:85:de:8b:9f:d0:7a:
cd:5b:c2:ea:5e:ba:33:67:68:c8:d1:fa:af:96:6d:d6:44:26:
e7:44:41:07:40:17:6b:6c:56:dd:d5:aa:55:66:22:fd:0b:6a:
cf:8e:81:26:14:23:d2:5a:ac:d8:78:73:57:81:18:72:28:b4:
ec:1e:07:b6:ad:e1:83:a6:7c:d4:02:d1:87:5f:e1:41:fd:14:
fc:79:3f:22:09:5d:54:92:3f:b7:41:ee:07:ae:ad:fa:90:75:
71:31:a9:27:e0:68:3b:af:37:4e:26:39:3d:d9:e9:49:95:57:
ad:8d:42:e9:67:e1:53:68:75:02:82:75:dd:cb:5f:d4:f5:d0:
d7:11:fb:bb:fb:15:bf:ae:aa:60:e2:85:33:2d:dc:ca:07:5b:
98:a5:c1:4f:70:b1:8f:d3:2f:1c:39:b5:ef:7f:54:30:af:06:
2a:1a:45:34:56:f5:5c:94:dc:0a:a4:45:60:86:12:7d:9e:60:
26:15:9c:57
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEB8HhxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZDU1MjYwY2ViZjJhNzNjYTE0NzA5ZDk2ZDI0YTVmZjNiY2I1ZGM0MB4XDTIyMDEw
NjA4MjcxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjVkNzQ5YmEyYzE2
N2YwNmZlMGNmYmRkOGUyZjVjNTY1NjdlOTQ1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM52bGfMY1cGIAjXX2T7xQHOrrwQlFVcZUFqUg79NV0mwqr+
zLCWqLrvekw5KgxG26yHjnaU6pekQFF42+l/dX9OuXucYioveUTXkrE4pCdaIPTz
NffaNePLZfQTys3dTc8rYVvLFeiKXugfQyn/UMwWECm4LRf6yaJKYe+xeh7YTDxx
IFYGhOiH95NTzdjuJ3DFmlibsokSCgZtfqw5zn3clGTZ0niX3ytR00SQAcf3VII5
+lrVTGscuHy7tmvQZwNTWmjwYSClJKJ9cn2FHbTGWiSqNkn3rhq0WUcaJkJYZH2t
YjnlVoxJSbxSfYocgTi9vhNUpI9JOQeOATa3/UMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQl10m6LBZ/Bv4M+92OL1xWVn6UVDAfBgNVHSMEGDAWgBRdVSYM6/KnPKFH
CdltJKX/O8tdxDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hWVW1ET3Z5cHp5aFJ3blpiU1NsX3p2TFhjUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTYvNzBkYjZjLWQxNjItNGQ0OS04ODQ5LWQyYWNjZGEwOGJlZS8x
L0pkZEp1aXdXZndiLURQdmRqaTljVmxaLWxGUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYv
NzBkYjZjLWQxNjItNGQ0OS04ODQ5LWQyYWNjZGEwOGJlZS8xL1hWVW1ET3Z5cHp5
aFJ3blpiU1NsX3p2TFhjUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAS2bfgMEAMIkVAMEAcIkVjANBgkq
hkiG9w0BAQsFAAOCAQEAp/ocLpSXjHCu+Pdb65Mxp5L4wbyHlNHTgjW14ooKTNd6
JAx5yhCYbTKGfEfKz7ATVTuBKKmZYj6N3xcKH18Of9Qnhd6Ln9B6zVvC6l66M2do
yNH6r5Zt1kQm50RBB0AXa2xW3dWqVWYi/Qtqz46BJhQj0lqs2HhzV4EYcii07B4H
tq3hg6Z81ALRh1/hQf0U/Hk/IgldVJI/t0HuB66t+pB1cTGpJ+BoO683TiY5Pdnp
SZVXrY1C6WfhU2h1AoJ13ctf1PXQ1xH7u/sVv66qYOKFMy3cygdbmKXBT3Cxj9Mv
HDm1739UMK8GKhpFNFb1XJTcCqRFYIYSfZ5gJhWcVw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net