Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/0lYJJmkFKfR5P4LF4O8tn3Meu6g.roa
File: 0lYJJmkFKfR5P4LF4O8tn3Meu6g.roa (raw, json)
Hash identifier: Clh/Lk7Pmjomp4ylvjMob05n2s2tA13QgcxOfetc5wc=
Subject key identifier: D2:56:09:26:69:05:29:F4:79:3F:82:C5:E0:EF:2D:9F:73:1E:BB:A8
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 01936852629B73D302EF79ABD90DF507C99B
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/0lYJJmkFKfR5P4LF4O8tn3Meu6g.roa
Signing time: Tue 26 Nov 2024 11:54:09 +0000
ROA not before: Tue 26 Nov 2024 11:54:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209281
IP address blocks: 86.62.20.0/24 maxlen: 24
86.62.21.0/24 maxlen: 24
86.62.22.0/23 maxlen: 23
185.74.223.0/24 maxlen: 24
2a04:7480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:52:62:9b:73:d3:02:ef:79:ab:d9:0d:f5:07:c9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Nov 26 11:54:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2560926690529f4793f82c5e0ef2d9f731ebba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:38:15:5d:0d:7b:02:d3:5d:86:a6:17:6a:ee:
03:9c:c6:f6:0a:b5:3b:21:b4:b8:c9:c8:0e:ba:15:
ab:0e:87:b4:22:ba:4a:c7:91:5c:ad:35:58:2e:87:
40:e1:c2:42:51:4c:3f:1b:f4:5b:24:20:84:6e:4c:
e7:64:ea:d8:01:3a:d3:16:6f:c9:60:82:70:8c:24:
23:a4:fb:09:71:85:eb:49:d7:d8:97:a6:62:73:db:
ed:06:4b:02:53:51:02:c9:17:e8:f5:48:fc:b8:94:
47:d6:7f:9c:31:2e:86:b1:b8:81:41:91:d7:60:24:
34:64:41:9c:03:e6:a7:1d:6f:ae:1f:28:57:63:2a:
51:6e:72:9c:58:36:73:ca:74:84:96:d7:c0:c0:e2:
e0:3c:ba:72:05:d8:ee:fb:16:dd:cc:ce:aa:35:81:
cd:f5:e9:cf:96:aa:7f:c0:2c:d2:cd:7a:6d:ea:48:
e6:6d:ac:49:ca:fb:86:5e:12:6d:98:77:ee:99:f9:
5d:44:c5:25:62:10:b8:39:94:78:d4:a5:a2:f4:d3:
6f:47:bf:8f:5c:49:21:2e:d7:ac:f6:b2:c2:ee:7a:
89:76:10:ea:6d:57:de:a6:13:cf:3d:ba:d7:7f:52:
cc:f8:2c:ce:60:e9:55:6e:6c:bb:ab:b0:03:0a:c9:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:09:26:69:05:29:F4:79:3F:82:C5:E0:EF:2D:9F:73:1E:BB:A8
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/0lYJJmkFKfR5P4LF4O8tn3Meu6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.20.0/22
185.74.223.0/24
IPv6:
2a04:7480::/29
Signature Algorithm: sha256WithRSAEncryption
38:07:6a:24:b2:43:a0:0f:f5:fa:bd:55:a6:20:68:48:25:4d:
c1:e2:60:28:da:d3:6f:52:de:98:eb:1f:b4:22:25:76:2d:5b:
d8:21:db:c3:b7:90:3d:e3:c0:b3:97:2f:cb:65:cb:bf:42:4f:
21:7b:43:33:e0:0e:b4:1b:f3:1f:b9:4e:fa:c9:09:53:8c:a3:
66:04:f1:77:84:94:5d:2f:17:61:f7:77:83:b0:e0:93:15:c6:
c6:e5:f7:7f:8b:b0:17:05:b6:fa:da:ba:b3:ea:c1:69:b7:74:
e9:a7:2a:2e:39:66:28:4b:68:dd:a8:60:7b:1c:f1:33:e2:f2:
30:4e:9e:d7:a0:cc:a5:b7:0a:4c:98:1f:62:1a:8c:f0:f0:1e:
48:41:95:a4:d4:14:2a:a8:a4:8a:74:73:2a:94:8c:0e:61:dc:
87:7f:8b:ce:e1:f9:42:2e:19:c2:0b:c9:d8:7f:d6:e2:dd:5e:
95:54:3e:f9:a6:bb:5e:e2:60:48:27:15:e1:d2:0e:29:90:d2:
fa:42:52:4c:96:41:77:b0:16:d3:88:72:22:5e:66:dc:5d:96:
ab:44:fb:77:56:d7:8c:fb:2f:64:28:33:8a:05:43:04:31:a0:
42:11:27:e6:90:37:2b:94:53:1e:ee:31:f6:c9:4e:f8:23:73:
65:f7:95:09
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZNoUmKbc9MC73mr2Q31B8mbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2U3MTY2NDlkYWNiZjZlYTk4NjAyMzUxNGRmZTQwZGYx
YTdjZjAwHhcNMjQxMTI2MTE1NDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjU2MDkyNjY5MDUyOWY0NzkzZjgyYzVlMGVmMmQ5ZjczMWViYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+zgVXQ17AtNdhqYXau4DnMb2CrU7
IbS4ycgOuhWrDoe0IrpKx5FcrTVYLodA4cJCUUw/G/RbJCCEbkznZOrYATrTFm/J
YIJwjCQjpPsJcYXrSdfYl6Zic9vtBksCU1ECyRfo9Uj8uJRH1n+cMS6GsbiBQZHX
YCQ0ZEGcA+anHW+uHyhXYypRbnKcWDZzynSEltfAwOLgPLpyBdju+xbdzM6qNYHN
9enPlqp/wCzSzXpt6kjmbaxJyvuGXhJtmHfumfldRMUlYhC4OZR41KWi9NNvR7+P
XEkhLtes9rLC7nqJdhDqbVfephPPPbrXf1LM+CzOYOlVbmy7q7ADCslwawIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNJWCSZpBSn0eT+CxeDvLZ9zHruoMB8GA1UdIwQY
MBaAFN9+cWZJ2sv26phgI1FN/kDfGnzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQt
YTY2Mjg5ODUxY2Q5LzEvMGxZSkpta0ZLZlI1UDRMRjRPOHRuM01ldTZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQtYTY2Mjg5ODUxY2Q5
LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCVj4UAwQA
uUrfMA0EAgACMAcDBQMqBHSAMA0GCSqGSIb3DQEBCwUAA4IBAQA4B2okskOgD/X6
vVWmIGhIJU3B4mAo2tNvUt6Y6x+0IiV2LVvYIdvDt5A948Czly/LZcu/Qk8he0Mz
4A60G/MfuU76yQlTjKNmBPF3hJRdLxdh93eDsOCTFcbG5fd/i7AXBbb62rqz6sFp
t3TppyouOWYoS2jdqGB7HPEz4vIwTp7XoMyltwpMmB9iGozw8B5IQZWk1BQqqKSK
dHMqlIwOYdyHf4vO4flCLhnCC8nYf9bi3V6VVD75prte4mBIJxXh0g4pkNL6QlJM
lkF3sBbTiHIiXmbcXZarRPt3VteM+y9kKDOKBUMEMaBCESfmkDcrlFMe7jH2yU74
I3Nl95UJ
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:28 2024 by rpki-client on console.sobornost.net