Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/MMo9UONCcYnOEOMv59LH3KlWgSc.roa
File: MMo9UONCcYnOEOMv59LH3KlWgSc.roa (raw, json)
Hash identifier: 2l62Fiww5bnNBLpgmRWZjr0mK648sWpUPwWWj/s41AU=
Subject key identifier: 30:CA:3D:50:E3:42:71:89:CE:10:E3:2F:E7:D2:C7:DC:A9:56:81:27
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 018CC5DC5CF09B4DE8E1EBE58BE86C6473CC
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/MMo9UONCcYnOEOMv59LH3KlWgSc.roa
Signing time: Mon 01 Jan 2024 16:30:02 +0000
ROA not before: Mon 01 Jan 2024 16:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48866
IP address blocks: 195.191.40.0/24 maxlen: 24
195.191.41.0/24 maxlen: 24
193.218.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5c:f0:9b:4d:e8:e1:eb:e5:8b:e8:6c:64:73:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30ca3d50e3427189ce10e32fe7d2c7dca9568127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:78:ac:07:e7:0f:4f:60:83:4e:16:ee:40:
5a:f5:92:c3:b6:87:cd:c0:99:a9:fd:18:7f:c2:5a:
06:91:e8:5a:d2:66:7c:6e:0c:9a:c9:ef:eb:1c:c6:
a6:d7:99:e9:c6:47:13:82:65:88:da:48:85:cc:c0:
e7:96:54:a0:6e:bd:18:82:33:6c:22:72:ca:be:25:
0d:bc:aa:d1:b0:a7:d8:06:db:bb:57:8e:60:a1:30:
41:df:77:16:f9:66:a6:0a:d0:6b:41:34:01:9c:b2:
d4:9f:5b:3f:03:55:84:f7:8e:66:04:84:ed:b5:20:
7d:2c:a0:51:da:0e:1e:fb:8e:72:78:b9:47:d2:4b:
64:9e:3c:4e:e9:1b:12:aa:d2:79:c0:d9:4c:0b:0f:
e6:94:a7:33:24:d0:01:0c:eb:16:31:c2:d7:5a:b9:
f5:92:a5:c1:0e:ca:9b:5c:29:d1:5c:3e:4d:3d:7d:
78:27:a3:81:41:d6:7b:5d:41:72:15:92:42:f1:ca:
87:32:31:a6:1b:73:49:7e:35:d3:7b:43:af:9c:b1:
5c:35:6a:06:f0:10:8a:1a:73:1c:75:4b:1c:c7:65:
70:8a:ba:82:99:b7:68:d5:91:1b:9c:82:10:9c:6c:
5c:1e:4e:f0:9c:3d:28:58:6c:5b:5f:37:b2:1b:af:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CA:3D:50:E3:42:71:89:CE:10:E3:2F:E7:D2:C7:DC:A9:56:81:27
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/MMo9UONCcYnOEOMv59LH3KlWgSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.186.0/24
195.191.40.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:95:3e:0c:a9:fd:59:97:79:5e:96:25:98:42:2b:19:6d:e0:
40:de:ef:b6:a1:da:1a:4c:fc:14:33:4b:ed:6a:8d:62:f6:82:
c7:ed:cd:be:de:b2:11:2a:a1:bc:29:dc:04:36:a7:ea:10:19:
a2:05:98:da:2b:26:0e:c8:6b:57:eb:a2:43:25:1a:5a:3e:45:
82:f5:d5:0f:37:88:d9:cb:60:1b:01:ff:a2:37:54:a2:98:31:
01:99:b7:20:41:2a:b4:4e:e6:61:fb:f7:d8:40:ea:97:7a:24:
c6:3e:9a:32:76:3f:34:15:97:16:4e:0e:16:26:83:6f:cc:76:
8d:bb:99:e8:fc:eb:78:56:e3:1d:2d:73:c2:5f:d4:27:f7:f1:
b3:2f:6c:7c:3e:20:20:21:15:a3:08:55:73:78:0f:a2:e8:e4:
b7:70:5e:1c:97:b0:cf:c5:7f:31:24:07:7a:e1:15:2f:01:3e:
f1:dd:6f:a2:00:82:2c:bb:ac:37:c2:db:1c:12:8b:07:31:fd:
60:9e:25:75:2e:0c:84:ef:9c:4f:14:b8:b8:3e:ea:4e:12:15:
57:3c:9b:b7:77:88:33:e0:9a:79:31:03:7a:59:ec:a2:07:a7:
ca:65:94:a2:c7:8b:1a:16:ec:60:ff:60:8b:82:0a:1c:3b:1f:
c2:dd:18:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzF3Fzwm03o4evli+hsZHPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTg0OTZiOGQxZGQ4MjViNDg3MDM4ZmI4N2NhMTk5YjEz
YjkzZGYwHhcNMjQwMTAxMTYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGNhM2Q1MGUzNDI3MTg5Y2UxMGUzMmZlN2QyYzdkY2E5NTY4MTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn94rAfnD09gg04W7kBa9ZLDtofN
wJmp/Rh/wloGkeha0mZ8bgyaye/rHMam15npxkcTgmWI2kiFzMDnllSgbr0YgjNs
InLKviUNvKrRsKfYBtu7V45goTBB33cW+WamCtBrQTQBnLLUn1s/A1WE945mBITt
tSB9LKBR2g4e+45yeLlH0ktknjxO6RsSqtJ5wNlMCw/mlKczJNABDOsWMcLXWrn1
kqXBDsqbXCnRXD5NPX14J6OBQdZ7XUFyFZJC8cqHMjGmG3NJfjXTe0OvnLFcNWoG
8BCKGnMcdUscx2VwirqCmbdo1ZEbnIIQnGxcHk7wnD0oWGxbXzeyG6/Y6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDDKPVDjQnGJzhDjL+fSx9ypVoEnMB8GA1UdIwQY
MBaAFKiYSWuNHdgltIcDj7h8oZmxO5PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUt
MzY4NzhmNjU3ZTEyLzEvTU1vOVVPTkNjWW5PRU9NdjU5TEgzS2xXZ1NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUtMzY4NzhmNjU3ZTEy
LzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwdq6AwQB
w78oMA0GCSqGSIb3DQEBCwUAA4IBAQBslT4Mqf1Zl3leliWYQisZbeBA3u+2odoa
TPwUM0vtao1i9oLH7c2+3rIRKqG8KdwENqfqEBmiBZjaKyYOyGtX66JDJRpaPkWC
9dUPN4jZy2AbAf+iN1SimDEBmbcgQSq0TuZh+/fYQOqXeiTGPpoydj80FZcWTg4W
JoNvzHaNu5no/Ot4VuMdLXPCX9Qn9/GzL2x8PiAgIRWjCFVzeA+i6OS3cF4cl7DP
xX8xJAd64RUvAT7x3W+iAIIsu6w3wtscEosHMf1gniV1LgyE75xPFLi4PupOEhVX
PJu3d4gz4Jp5MQN6WeyiB6fKZZSix4saFuxg/2CLggocOx/C3RjB
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:02 2024 by rpki-client on console.sobornost.net