Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/AXHtPbKwzQjHJeCsvRwXm5iUBSs.roa
File: AXHtPbKwzQjHJeCsvRwXm5iUBSs.roa (raw, json)
Hash identifier: XzZfaWLH1D9H/7kSzYwGjr8YLJNWc1TUUDxzCmvdV6Q=
Subject key identifier: 01:71:ED:3D:B2:B0:CD:08:C7:25:E0:AC:BD:1C:17:9B:98:94:05:2B
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 0192426C2EA02A8DE25BA70B66133E544C59
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/AXHtPbKwzQjHJeCsvRwXm5iUBSs.roa
Signing time: Mon 30 Sep 2024 10:13:58 +0000
ROA not before: Mon 30 Sep 2024 10:13:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44863
IP address blocks: 185.93.185.0/24 maxlen: 24
185.93.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:6c:2e:a0:2a:8d:e2:5b:a7:0b:66:13:3e:54:4c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Sep 30 10:13:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0171ed3db2b0cd08c725e0acbd1c179b9894052b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:ed:65:35:b3:58:03:0b:1c:fc:a1:99:96:
8e:16:fe:cf:72:46:c7:6c:92:86:bf:21:f8:f0:96:
14:87:45:1d:e0:4f:01:03:7f:ec:5c:2b:73:7f:aa:
d4:d1:3d:7a:ea:df:36:a2:33:a3:41:d5:dc:53:8e:
50:e8:b0:a1:93:e3:2e:ab:8a:e0:05:e1:4d:b1:05:
e2:78:b7:bb:72:e8:6d:d4:8a:85:d6:dc:f6:e7:cc:
1a:5d:84:44:5e:05:80:3d:b3:dc:63:61:8c:7f:32:
88:09:a0:5f:18:ac:72:5f:bb:20:32:64:a9:93:40:
99:93:c0:b9:2e:90:55:84:5f:4b:87:60:ee:ca:97:
c4:88:0f:f0:f0:b7:36:f7:1e:3a:64:33:85:83:61:
81:76:ce:32:3c:67:75:ba:ac:af:d7:de:1e:39:f8:
5c:2d:d1:01:00:53:fa:9b:6b:58:b8:51:f1:f6:8e:
91:d1:3b:a7:85:67:b0:a5:df:49:05:c0:8d:f4:cc:
5e:b6:dc:8b:ad:df:28:06:03:ab:fd:a1:a1:7d:f5:
ed:f2:2d:b7:1c:23:a2:2b:dc:5b:f6:64:79:39:77:
c8:7b:07:6c:e7:a3:db:62:a0:5e:6e:f2:53:09:44:
5a:9a:e8:29:0d:54:99:cf:a8:c9:c2:a9:a4:1f:60:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:ED:3D:B2:B0:CD:08:C7:25:E0:AC:BD:1C:17:9B:98:94:05:2B
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/AXHtPbKwzQjHJeCsvRwXm5iUBSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.185.0/24
185.93.187.0/24
Signature Algorithm: sha256WithRSAEncryption
10:14:77:08:cb:58:b6:c4:15:72:19:a1:42:fc:5d:80:5e:32:
39:ab:de:95:8a:72:2a:f3:cc:99:d8:2f:2a:c2:63:14:19:84:
80:6b:e8:0a:6c:47:64:28:58:b2:60:48:b9:4a:0b:3d:0a:6d:
08:e5:01:a9:5f:8d:09:ba:52:9c:3a:99:dc:5a:01:ef:2e:20:
b3:40:48:13:45:09:e2:91:ee:3a:79:bd:bd:38:82:81:65:9d:
99:0d:57:c4:19:eb:60:0d:c7:91:05:13:75:1d:55:53:d4:12:
fe:ee:78:88:b8:35:25:c2:74:77:e2:1a:32:ba:5f:60:14:89:
1a:78:80:c7:99:86:4c:05:bb:8f:6d:1f:f5:37:2a:91:94:0d:
eb:4c:71:50:63:44:98:fb:a9:38:ac:3f:99:f2:ab:51:a6:90:
44:4c:4c:5a:10:82:b7:a8:ba:26:a8:d4:51:32:09:a4:9f:e2:
84:d3:9c:63:5d:6a:a3:4d:dd:ee:f1:ae:c9:93:8e:cd:0a:fd:
a3:01:d6:37:22:ff:0f:92:fb:0b:65:be:1f:d7:7e:68:fc:99:
c8:06:27:0a:81:d1:95:8d:92:0f:7a:2c:da:53:e3:13:2b:a0:
9d:5f:da:28:60:3f:3a:f1:01:a1:fa:11:9c:6f:15:12:5c:07:
b9:04:80:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJCbC6gKo3iW6cLZhM+VExZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOWFjNmZlMjAzMWFkZGUwMzY2ODI0MGUzYzVkOTFlYzY3
MTFlMWUwHhcNMjQwOTMwMTAxMzU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTcxZWQzZGIyYjBjZDA4YzcyNWUwYWNiZDFjMTc5Yjk4OTQwNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvPtZTWzWAMLHPyhmZaOFv7PckbH
bJKGvyH48JYUh0Ud4E8BA3/sXCtzf6rU0T166t82ojOjQdXcU45Q6LChk+Muq4rg
BeFNsQXieLe7cuht1IqF1tz258waXYREXgWAPbPcY2GMfzKICaBfGKxyX7sgMmSp
k0CZk8C5LpBVhF9Lh2DuypfEiA/w8Lc29x46ZDOFg2GBds4yPGd1uqyv194eOfhc
LdEBAFP6m2tYuFHx9o6R0TunhWewpd9JBcCN9MxettyLrd8oBgOr/aGhffXt8i23
HCOiK9xb9mR5OXfIewds56PbYqBebvJTCURamugpDVSZz6jJwqmkH2DN1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAFx7T2ysM0IxyXgrL0cF5uYlAUrMB8GA1UdIwQY
MBaAFE+axv4gMa3eA2aCQOPF2R7GcR4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTct
NTI4YTYzYmU0Yzg3LzEvQVhIdFBiS3d6UWpISmVDc3ZSd1htNWlVQlNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTctNTI4YTYzYmU0Yzg3
LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuV25AwQA
uV27MA0GCSqGSIb3DQEBCwUAA4IBAQAQFHcIy1i2xBVyGaFC/F2AXjI5q96VinIq
88yZ2C8qwmMUGYSAa+gKbEdkKFiyYEi5Sgs9Cm0I5QGpX40JulKcOpncWgHvLiCz
QEgTRQnike46eb29OIKBZZ2ZDVfEGetgDceRBRN1HVVT1BL+7niIuDUlwnR34hoy
ul9gFIkaeIDHmYZMBbuPbR/1NyqRlA3rTHFQY0SY+6k4rD+Z8qtRppBETExaEIK3
qLomqNRRMgmkn+KE05xjXWqjTd3u8a7Jk47NCv2jAdY3Iv8PkvsLZb4f135o/JnI
BicKgdGVjZIPeizaU+MTK6CdX9ooYD868QGh+hGcbxUSXAe5BIBc
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:43 2024 by rpki-client on console.sobornost.net