Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/XDAEjJ9jXT7KE7Hr4Iv0lSBwxmw.roa
File: XDAEjJ9jXT7KE7Hr4Iv0lSBwxmw.roa (raw, json)
Hash identifier: Lfyy9kXKiLldLIZ1kTlnEge+eDkptKrx0ogLNd+4fmc=
Subject key identifier: 5C:30:04:8C:9F:63:5D:3E:CA:13:B1:EB:E0:8B:F4:95:20:70:C6:6C
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01939716BDEEC313136B8C3DC2D93CBAA44A
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/XDAEjJ9jXT7KE7Hr4Iv0lSBwxmw.roa
Signing time: Thu 05 Dec 2024 13:51:10 +0000
ROA not before: Thu 05 Dec 2024 13:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.246.230.0/24 maxlen: 24
80.246.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:16:bd:ee:c3:13:13:6b:8c:3d:c2:d9:3c:ba:a4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Dec 5 13:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c30048c9f635d3eca13b1ebe08bf4952070c66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:ee:c0:a4:f0:cf:11:d5:89:a8:46:da:d5:
2e:0f:f4:14:b7:d2:fc:09:85:5d:39:03:51:7f:7f:
53:b3:df:e2:cf:65:c9:b0:9e:6a:ac:c0:ce:27:44:
4b:4b:db:80:82:21:61:81:6d:da:f5:0c:47:23:30:
c6:5e:8b:67:43:80:66:a9:cb:3a:29:e3:57:21:96:
34:c6:00:f0:35:e7:f6:fb:4b:4f:3c:a3:7b:a3:90:
a1:1b:2e:f7:49:74:77:af:21:6e:60:90:f1:4a:13:
46:ad:7c:5b:40:a6:11:18:14:d2:17:d1:d4:15:a0:
a2:9d:a3:4f:14:e5:a5:2f:f4:86:71:5a:fa:22:8c:
b6:30:86:1f:7c:8d:1a:52:ae:d0:a6:f4:be:bc:f1:
92:8d:b1:2e:47:95:42:c8:cf:02:4d:9c:e3:ac:e6:
f5:1b:2b:05:97:56:67:59:e8:cc:bd:22:f8:8c:80:
86:e6:57:a0:0d:b0:55:39:03:17:74:5f:9a:d4:cc:
30:ef:c5:97:bc:55:16:3b:06:ae:3e:4c:3c:92:eb:
74:ec:04:de:cb:c4:e9:4b:cf:4d:9b:45:a3:17:4c:
d3:f3:bf:d8:db:95:d3:cd:8d:70:68:a9:06:22:84:
bb:0c:93:1b:ad:bc:e5:6f:ba:03:a1:1f:45:a7:46:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:30:04:8C:9F:63:5D:3E:CA:13:B1:EB:E0:8B:F4:95:20:70:C6:6C
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/XDAEjJ9jXT7KE7Hr4Iv0lSBwxmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:8e:94:bf:b7:7f:c4:02:6c:51:29:32:06:94:77:c3:81:30:
99:75:1d:25:29:cb:a4:2f:93:60:8a:26:34:0b:48:b3:88:53:
d3:47:a6:3c:77:b7:fc:b9:91:5a:2b:ce:0f:20:27:77:48:0b:
0a:48:69:54:aa:02:72:58:4a:b7:27:74:a9:77:0e:63:d2:fa:
35:82:e7:5a:82:31:a5:cf:a7:3c:6a:96:46:a5:ac:25:ce:f1:
06:c2:5c:6b:04:ef:12:23:ed:f0:b6:f3:3c:1c:c6:36:c2:b8:
68:f0:bb:33:48:5e:29:a2:56:ce:52:a7:fe:6b:85:8f:17:bd:
d0:bb:35:41:5d:3e:d8:23:74:f8:43:04:a7:71:c7:fb:b0:96:
40:19:11:e6:f3:b7:fa:1d:ca:7a:1c:60:b5:a3:41:ed:d1:23:
1a:03:93:57:3f:a6:1e:4f:38:79:ab:40:4e:c5:9f:1a:b0:3e:
b8:6a:c3:02:f5:f9:8e:67:d5:0d:bf:ed:44:f7:45:2a:36:88:
23:67:96:4f:51:bb:d2:24:be:85:74:1b:40:2c:d8:0c:57:fa:
6a:50:cb:12:9e:5c:62:cc:c1:40:24:7a:7e:b2:b3:62:ee:71:
6a:fe:42:f9:84:46:77:72:6e:b9:4f:34:0d:1d:eb:02:93:0e:
30:1c:37:b0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOXFr3uwxMTa4w9wtk8uqRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjQxMjA1MTM1MTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzMwMDQ4YzlmNjM1ZDNlY2ExM2IxZWJlMDhiZjQ5NTIwNzBjNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmzuwKTwzxHViahG2tUuD/QUt9L8
CYVdOQNRf39Ts9/iz2XJsJ5qrMDOJ0RLS9uAgiFhgW3a9QxHIzDGXotnQ4Bmqcs6
KeNXIZY0xgDwNef2+0tPPKN7o5ChGy73SXR3ryFuYJDxShNGrXxbQKYRGBTSF9HU
FaCinaNPFOWlL/SGcVr6Ioy2MIYffI0aUq7QpvS+vPGSjbEuR5VCyM8CTZzjrOb1
GysFl1ZnWejMvSL4jICG5legDbBVOQMXdF+a1Mww78WXvFUWOwauPkw8kut07ATe
y8TpS89Nm0WjF0zT87/Y25XTzY1waKkGIoS7DJMbrbzlb7oDoR9Fp0byCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFwwBIyfY10+yhOx6+CL9JUgcMZsMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvWERBRWpKOWpYVDdLRTdIcjRJdjBsU0J3eG13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPbmAwQD
UPboMA0GCSqGSIb3DQEBCwUAA4IBAQAdjpS/t3/EAmxRKTIGlHfDgTCZdR0lKcuk
L5NgiiY0C0iziFPTR6Y8d7f8uZFaK84PICd3SAsKSGlUqgJyWEq3J3Spdw5j0vo1
gudagjGlz6c8apZGpawlzvEGwlxrBO8SI+3wtvM8HMY2wrho8LszSF4polbOUqf+
a4WPF73QuzVBXT7YI3T4QwSnccf7sJZAGRHm87f6Hcp6HGC1o0Ht0SMaA5NXP6Ye
Tzh5q0BOxZ8asD64asMC9fmOZ9UNv+1E90UqNogjZ5ZPUbvSJL6FdBtALNgMV/pq
UMsSnlxizMFAJHp+srNi7nFq/kL5hEZ3cm65TzQNHesCkw4wHDew
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:25 2024 by rpki-client on console.sobornost.net