Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/mjTvPYLhTf6rf5QV_zrT2nzW2d8.roa
File: mjTvPYLhTf6rf5QV_zrT2nzW2d8.roa (raw, json)
Hash identifier: afJSgFSyI0vdRZ0VgPgOEQKxSaOkRKR4I6dEOgV40CU=
Subject key identifier: 9A:34:EF:3D:82:E1:4D:FE:AB:7F:94:15:FF:3A:D3:DA:7C:D6:D9:DF
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 018CC3B724498A5724F5E24C8D8DE8647F55
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/mjTvPYLhTf6rf5QV_zrT2nzW2d8.roa
Signing time: Mon 01 Jan 2024 06:30:08 +0000
ROA not before: Mon 01 Jan 2024 06:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50718
IP address blocks: 193.105.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:24:49:8a:57:24:f5:e2:4c:8d:8d:e8:64:7f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a34ef3d82e14dfeab7f9415ff3ad3da7cd6d9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:33:fa:32:07:a8:c3:62:5d:1d:f0:4b:23:
38:8b:6e:75:13:8e:59:ce:b4:fc:b6:61:3d:34:fc:
0f:58:a2:d4:fe:3d:4d:a3:65:b8:8d:02:21:d9:dd:
75:0d:38:00:f2:eb:ed:57:f3:93:66:82:b8:3c:c7:
8f:e3:08:c0:cc:6d:ff:6d:cf:d5:06:d3:3a:10:59:
73:bc:19:2b:2e:f3:64:44:bd:45:74:b2:6b:4e:fc:
a0:b8:9d:be:2c:bd:c4:72:6a:b0:b3:a1:7c:05:67:
09:aa:87:70:12:c3:f0:8f:66:90:9b:e3:b2:7a:da:
30:d1:2d:07:e2:fb:6b:3d:51:bc:79:03:c3:f7:c8:
5b:fb:65:a7:44:5d:3b:bd:b7:b6:4c:e8:47:cb:36:
ab:a5:35:f5:54:34:de:d5:66:06:26:86:83:73:3a:
8f:c5:43:36:31:50:43:e1:6c:30:2b:7c:88:f5:49:
b5:93:d5:33:27:3e:b5:9e:9e:01:62:f4:a8:20:bc:
5b:21:d5:b9:59:d7:38:94:80:3b:50:fc:43:c1:7e:
92:33:e8:f2:31:c7:43:f5:fd:19:50:bd:41:7f:27:
92:9e:1e:7f:a1:71:0a:fa:25:30:51:6d:8d:9d:fa:
02:9b:85:c3:7c:37:d2:38:63:90:97:bc:47:43:85:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:34:EF:3D:82:E1:4D:FE:AB:7F:94:15:FF:3A:D3:DA:7C:D6:D9:DF
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/mjTvPYLhTf6rf5QV_zrT2nzW2d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f0:2a:58:01:e6:3a:40:3e:3e:73:1f:d6:db:a5:f2:a8:bc:
9e:c6:28:15:09:92:b5:86:ae:f6:c6:7c:b4:8d:82:ae:4a:0c:
4d:36:bb:a4:03:67:c0:f4:b2:b2:4d:e7:5c:e5:e0:2b:5b:c7:
aa:e5:f5:fc:89:30:a3:af:a9:9f:3a:e9:b1:ca:ee:fd:54:d3:
0a:1a:94:4a:50:98:6e:65:ab:84:5d:7c:8a:e0:b4:b0:e6:ab:
e0:de:7a:bd:5d:2a:55:1a:9a:c0:35:e9:f3:fe:94:40:47:32:
cf:25:1a:e7:71:95:0b:43:2a:d0:b5:1a:13:6b:80:8f:03:f3:
a5:26:7e:4b:8f:d6:e1:97:f6:54:4a:1c:18:9c:82:01:d7:2d:
eb:f5:f5:b1:20:f2:7b:bb:fc:bd:8a:89:a1:26:b5:69:a6:14:
2d:6a:35:7a:8c:16:15:de:7e:ed:3e:ca:2e:e2:c8:6c:84:e0:
60:f6:ca:bf:1b:7a:55:15:7a:6d:84:b8:dc:17:0d:a9:ee:b8:
98:ba:93:3d:e9:78:1b:51:df:ef:bc:5a:84:18:a8:1c:18:ce:
7b:12:ac:d3:7e:88:15:52:3c:a9:d9:0b:b5:64:c2:47:d3:48:
37:aa:80:3d:99:78:59:09:7e:d8:65:23:fb:3e:c3:12:d7:3d:
a9:13:f1:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtyRJilck9eJMjY3oZH9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk
MzYxNzMwHhcNMjQwMTAxMDYzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTM0ZWYzZDgyZTE0ZGZlYWI3Zjk0MTVmZjNhZDNkYTdjZDZkOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6Yz+jIHqMNiXR3wSyM4i251E45Z
zrT8tmE9NPwPWKLU/j1No2W4jQIh2d11DTgA8uvtV/OTZoK4PMeP4wjAzG3/bc/V
BtM6EFlzvBkrLvNkRL1FdLJrTvyguJ2+LL3Ecmqws6F8BWcJqodwEsPwj2aQm+Oy
etow0S0H4vtrPVG8eQPD98hb+2WnRF07vbe2TOhHyzarpTX1VDTe1WYGJoaDczqP
xUM2MVBD4WwwK3yI9Um1k9UzJz61np4BYvSoILxbIdW5Wdc4lIA7UPxDwX6SM+jy
McdD9f0ZUL1BfyeSnh5/oXEK+iUwUW2NnfoCm4XDfDfSOGOQl7xHQ4V4QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJo07z2C4U3+q3+UFf8609p81tnfMB8GA1UdIwQY
MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct
ZWY5MWQ4YjViMDgxLzEvbWpUdlBZTGhUZjZyZjVRVl96clQybnpXMmQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx
LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnMMA0G
CSqGSIb3DQEBCwUAA4IBAQCM8CpYAeY6QD4+cx/W26XyqLyexigVCZK1hq72xny0
jYKuSgxNNrukA2fA9LKyTedc5eArW8eq5fX8iTCjr6mfOumxyu79VNMKGpRKUJhu
ZauEXXyK4LSw5qvg3nq9XSpVGprANenz/pRARzLPJRrncZULQyrQtRoTa4CPA/Ol
Jn5Lj9bhl/ZUShwYnIIB1y3r9fWxIPJ7u/y9iomhJrVpphQtajV6jBYV3n7tPsou
4shshOBg9sq/G3pVFXpthLjcFw2p7riYupM96XgbUd/vvFqEGKgcGM57EqzTfogV
Ujyp2Qu1ZMJH00g3qoA9mXhZCX7YZSP7PsMS1z2pE/Gw
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net