Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/eIN7Et_Dq3Fe1OcjzpOAPsgVg-Q.roa
File: eIN7Et_Dq3Fe1OcjzpOAPsgVg-Q.roa (raw, json)
Hash identifier: PFL3BKWl+uMYr1Z5doQePJoFYyhoLMxaJiVXlMjS1CY=
Subject key identifier: 78:83:7B:12:DF:C3:AB:71:5E:D4:E7:23:CE:93:80:3E:C8:15:83:E4
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 019397FAC8FEB4023666355C47C8DD328550
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/eIN7Et_Dq3Fe1OcjzpOAPsgVg-Q.roa
Signing time: Thu 05 Dec 2024 18:00:15 +0000
ROA not before: Thu 05 Dec 2024 18:00:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211298
IP address blocks: 87.236.176.0/24 maxlen: 24
185.247.137.0/24 maxlen: 24
193.163.125.0/24 maxlen: 24
2a06:4880::/32 maxlen: 32
2a06:4881::/32 maxlen: 32
2a06:4882::/32 maxlen: 32
2a06:4883::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:fa:c8:fe:b4:02:36:66:35:5c:47:c8:dd:32:85:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Dec 5 18:00:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78837b12dfc3ab715ed4e723ce93803ec81583e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:cf:25:2d:44:e0:50:91:e3:a3:f2:21:87:
7f:9c:03:fa:ef:d2:ad:fe:be:86:84:f0:5c:a1:69:
30:57:08:be:81:ac:43:62:e4:a6:88:38:96:34:c2:
ef:c1:3f:c9:52:7d:36:40:f9:f5:66:eb:39:26:2d:
7f:bd:2b:22:83:7b:bf:4d:cf:44:7a:6e:74:13:26:
24:12:1a:42:f4:ec:52:55:53:e2:dd:ef:3e:96:dd:
5e:2f:7f:76:1b:7e:01:06:74:9b:60:4b:78:ac:23:
21:a3:d9:7e:61:8a:ed:23:22:7e:ba:8b:83:bd:bd:
0b:67:9e:50:d8:93:60:9e:57:b8:6b:1b:c2:30:6e:
b6:3d:e9:83:62:07:40:1a:fa:27:42:d0:fe:bf:53:
0c:b4:fc:30:71:23:7f:c2:25:5a:f7:24:d8:60:7f:
72:23:e8:75:1d:94:3c:00:80:2f:ed:24:5d:6c:27:
2c:aa:89:18:8a:eb:e5:4e:1e:80:e6:41:3f:81:ce:
2a:3e:9c:7d:aa:b3:ea:4d:7b:a5:0e:45:d6:04:fd:
cf:ea:f3:98:b5:44:f4:52:5d:98:c2:27:d5:d5:f7:
96:99:ce:82:d0:c4:a1:85:8f:9e:15:3a:fd:d4:2e:
48:99:9c:b6:6f:4c:32:61:54:e0:6b:0d:88:da:50:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:7B:12:DF:C3:AB:71:5E:D4:E7:23:CE:93:80:3E:C8:15:83:E4
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/eIN7Et_Dq3Fe1OcjzpOAPsgVg-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.176.0/24
185.247.137.0/24
193.163.125.0/24
IPv6:
2a06:4880::/30
Signature Algorithm: sha256WithRSAEncryption
20:f5:f4:e3:aa:54:73:08:c6:1f:04:83:75:62:86:3c:08:c8:
53:46:2f:03:1c:f0:d3:bd:5d:65:8f:41:c6:ac:a3:3e:6e:9a:
27:dd:9b:1e:ae:a2:d1:5b:f6:3a:72:c7:b4:47:f9:51:6e:67:
27:de:c1:c8:7a:40:c0:95:e4:5f:40:2e:a5:da:7c:56:7c:57:
56:51:43:4e:4b:9a:bd:65:d0:26:1e:71:6a:ec:f6:16:a1:c3:
3b:16:83:d3:9e:a7:68:d6:da:f2:a7:00:43:30:16:84:aa:87:
2b:36:5f:c4:0a:40:eb:e0:d6:85:31:35:04:cd:1e:b2:04:e5:
be:8a:f8:00:ce:b7:8c:d2:f1:47:fe:dc:8a:ac:5a:cb:6f:12:
45:58:89:0d:58:5a:de:f8:ce:51:05:a3:0b:a9:34:50:64:1a:
91:35:2a:cb:9f:c0:6a:af:f5:8e:d4:56:38:67:52:1d:50:6f:
0f:7f:bf:ed:aa:e3:b8:ba:a4:a3:01:d3:df:c9:23:78:c7:e7:
cc:60:06:ba:91:a1:fa:2b:08:ac:c4:df:fc:0c:34:f6:ca:3c:
fe:42:83:0e:8b:ab:d3:54:c9:65:34:a0:47:ac:68:f3:68:94:
2b:a0:d6:e8:0c:82:2d:c1:dd:1c:1c:41:3b:d7:90:d1:39:4e:
59:c1:5f:b2
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZOX+sj+tAI2ZjVcR8jdMoVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2EwNGE5MjcwMTljM2NlMmQwYzlkYjNhMzE0OTc3YTBh
N2IzNWMwHhcNMjQxMjA1MTgwMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODgzN2IxMmRmYzNhYjcxNWVkNGU3MjNjZTkzODAzZWM4MTU4M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWHPJS1E4FCR46PyIYd/nAP679Kt
/r6GhPBcoWkwVwi+gaxDYuSmiDiWNMLvwT/JUn02QPn1Zus5Ji1/vSsig3u/Tc9E
em50EyYkEhpC9OxSVVPi3e8+lt1eL392G34BBnSbYEt4rCMho9l+YYrtIyJ+uouD
vb0LZ55Q2JNgnle4axvCMG62PemDYgdAGvonQtD+v1MMtPwwcSN/wiVa9yTYYH9y
I+h1HZQ8AIAv7SRdbCcsqokYiuvlTh6A5kE/gc4qPpx9qrPqTXulDkXWBP3P6vOY
tUT0Ul2YwifV1feWmc6C0MShhY+eFTr91C5ImZy2b0wyYVTgaw2I2lB+mQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHiDexLfw6txXtTnI86TgD7IFYPkMB8GA1UdIwQY
MBaAFBF6BKknAZw84tDJ2zoxSXegp7NcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5Yzkt
MTFjMzAwOWY0NGRmLzEvZUlON0V0X0RxM0ZlMU9janpwT0FQc2dWZy1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZGU5OGUtMTdiNC00N2ZmLWE5YzktMTFjMzAwOWY0NGRm
LzEvRVhvRXFTY0JuRHppME1uYk9qRkpkNkNuczF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAV+ywAwQA
ufeJAwQAwaN9MA0EAgACMAcDBQIqBkiAMA0GCSqGSIb3DQEBCwUAA4IBAQAg9fTj
qlRzCMYfBIN1YoY8CMhTRi8DHPDTvV1lj0HGrKM+bpon3ZserqLRW/Y6cse0R/lR
bmcn3sHIekDAleRfQC6l2nxWfFdWUUNOS5q9ZdAmHnFq7PYWocM7FoPTnqdo1try
pwBDMBaEqocrNl/ECkDr4NaFMTUEzR6yBOW+ivgAzreM0vFH/tyKrFrLbxJFWIkN
WFre+M5RBaMLqTRQZBqRNSrLn8Bqr/WO1FY4Z1IdUG8Pf7/tquO4uqSjAdPfySN4
x+fMYAa6kaH6KwisxN/8DDT2yjz+QoMOi6vTVMllNKBHrGjzaJQroNboDIItwd0c
HEE715DROU5ZwV+y
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net