Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/BAxKAju0Kmxia7OHuYR7E4PJdgg.roa
File: BAxKAju0Kmxia7OHuYR7E4PJdgg.roa (raw, json)
Hash identifier: gXqVCBlBhSlOjZRHPwdPt6VfSLPfZybWLUPyemJJ0Nw=
Subject key identifier: 04:0C:4A:02:3B:B4:2A:6C:62:6B:B3:87:B9:84:7B:13:83:C9:76:08
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 01938DAEE836BE9A21C40096FCA3823795B7
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/BAxKAju0Kmxia7OHuYR7E4PJdgg.roa
Signing time: Tue 03 Dec 2024 18:01:10 +0000
ROA not before: Tue 03 Dec 2024 18:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50675
IP address blocks: 195.200.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:ae:e8:36:be:9a:21:c4:00:96:fc:a3:82:37:95:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Dec 3 18:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=040c4a023bb42a6c626bb387b9847b1383c97608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:55:ce:a8:d9:a8:16:a2:8f:bd:bc:c6:b2:
04:e8:95:89:4b:d0:81:5b:6e:d9:30:69:26:c2:22:
27:04:1b:03:c0:6f:1a:cf:42:a9:de:b8:41:7a:d4:
03:eb:2d:f8:b1:be:15:98:1c:c5:95:13:43:77:cf:
84:27:48:ee:32:0c:70:be:e3:d1:81:5d:70:b6:b1:
6d:d3:c2:d7:dc:a8:20:3f:00:8f:3a:68:7b:5f:95:
a7:62:ea:33:3e:16:9f:fe:a6:ee:30:8a:84:e4:38:
6b:69:2b:f7:0c:a5:f1:1e:03:0d:e6:43:23:24:d0:
c2:2a:bc:28:d6:0c:c3:00:c2:65:65:a9:9b:87:dc:
2a:ce:11:c3:de:31:86:f0:fd:a8:98:ed:cd:45:1f:
f6:20:e5:52:48:c1:86:4c:33:39:bc:a3:97:a2:59:
6c:f4:d2:48:01:c3:15:0c:a3:a3:03:86:cc:2d:7a:
17:5c:06:06:37:a6:7b:34:5c:e3:fc:dc:2a:a0:24:
96:6b:4d:3b:90:f5:4f:5a:2b:11:a6:c0:04:ad:75:
bb:c1:c6:8b:b6:43:2c:27:59:1e:48:68:ca:8f:21:
1d:cd:fa:18:07:8a:c5:f8:1d:02:f5:12:51:7d:f6:
29:83:94:42:1b:a0:cb:d9:1c:58:0a:88:76:96:84:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:4A:02:3B:B4:2A:6C:62:6B:B3:87:B9:84:7B:13:83:C9:76:08
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/BAxKAju0Kmxia7OHuYR7E4PJdgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.24.0/23
Signature Algorithm: sha256WithRSAEncryption
23:e3:b0:2c:c5:29:5d:47:e6:27:8f:a6:d1:91:b0:22:80:4c:
cf:86:62:df:74:f4:f0:76:66:2d:37:e1:bf:f5:ee:24:7d:f1:
42:60:9b:26:0a:5e:7a:f7:48:d7:ac:44:4e:74:d5:d8:c4:17:
80:6b:e3:6c:45:60:08:f2:88:95:6f:c9:e5:be:11:be:c4:50:
87:9a:9c:fb:5c:2c:95:2e:cd:7f:7c:c4:e1:64:73:08:3a:07:
45:29:2a:bd:e6:93:41:69:56:71:06:1e:57:72:63:65:69:31:
ce:9d:e6:c2:22:7b:05:7d:c7:d0:a4:7e:fc:af:18:2f:bd:b9:
c3:8a:94:61:2f:6d:24:ee:6d:60:ab:bd:0b:7e:86:e4:fe:fa:
8e:c0:a3:cd:60:17:a6:a7:19:8f:b5:6f:fc:46:7f:c1:62:a8:
52:18:91:3d:f5:3b:67:90:28:71:00:92:48:7a:4f:bb:28:cf:
e2:c9:1e:df:e8:e0:a5:2c:3e:db:43:88:43:ea:23:c1:85:f7:
20:0c:d8:aa:9c:49:a9:d8:cf:50:91:4d:a7:19:bd:2e:79:a4:
66:c6:d0:7c:de:61:86:cc:ac:c9:c9:cf:7a:81:7c:c8:c0:0f:
9c:f9:ad:0a:29:ab:46:2c:0e:c6:4d:b6:f1:d6:2f:ae:da:4a:
68:7d:e7:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZONrug2vpohxACW/KOCN5W3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz
MDQ2NTQwHhcNMjQxMjAzMTgwMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDBjNGEwMjNiYjQyYTZjNjI2YmIzODdiOTg0N2IxMzgzYzk3NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurFVzqjZqBaij728xrIE6JWJS9CB
W27ZMGkmwiInBBsDwG8az0Kp3rhBetQD6y34sb4VmBzFlRNDd8+EJ0juMgxwvuPR
gV1wtrFt08LX3KggPwCPOmh7X5WnYuozPhaf/qbuMIqE5DhraSv3DKXxHgMN5kMj
JNDCKrwo1gzDAMJlZambh9wqzhHD3jGG8P2omO3NRR/2IOVSSMGGTDM5vKOXolls
9NJIAcMVDKOjA4bMLXoXXAYGN6Z7NFzj/NwqoCSWa007kPVPWisRpsAErXW7wcaL
tkMsJ1keSGjKjyEdzfoYB4rF+B0C9RJRffYpg5RCG6DL2RxYCoh2loQhewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQMSgI7tCpsYmuzh7mEexODyXYIMB8GA1UdIwQY
MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct
MGZiNDgyM2Y1Yjg3LzEvQkF4S0FqdTBLbXhpYTdPSHVZUjdFNFBKZGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3
LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw8gYMA0G
CSqGSIb3DQEBCwUAA4IBAQAj47AsxSldR+Ynj6bRkbAigEzPhmLfdPTwdmYtN+G/
9e4kffFCYJsmCl5690jXrEROdNXYxBeAa+NsRWAI8oiVb8nlvhG+xFCHmpz7XCyV
Ls1/fMThZHMIOgdFKSq95pNBaVZxBh5XcmNlaTHOnebCInsFfcfQpH78rxgvvbnD
ipRhL20k7m1gq70Lfobk/vqOwKPNYBempxmPtW/8Rn/BYqhSGJE99TtnkChxAJJI
ek+7KM/iyR7f6OClLD7bQ4hD6iPBhfcgDNiqnEmp2M9QkU2nGb0ueaRmxtB83mGG
zKzJyc96gXzIwA+c+a0KKatGLA7GTbbx1i+u2kpofedz
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:17 2024 by rpki-client on console.sobornost.net