Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/GzqK4xOCMu8lNdxOzPfpJ12qfb8.roa
File: GzqK4xOCMu8lNdxOzPfpJ12qfb8.roa (raw, json)
Hash identifier: 57qmkwvJeAMe4/Wb2PZp+clv4r0LrUW7YgeCt5S6K6c=
Subject key identifier: 1B:3A:8A:E3:13:82:32:EF:25:35:DC:4E:CC:F7:E9:27:5D:AA:7D:BF
Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial: 0192BD42130922CDAE609786B1E8FE2E20D0
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/GzqK4xOCMu8lNdxOzPfpJ12qfb8.roa
Signing time: Thu 24 Oct 2024 06:41:16 +0000
ROA not before: Thu 24 Oct 2024 06:41:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196740
IP address blocks: 109.207.112.0/20 maxlen: 20
109.207.112.0/24 maxlen: 24
109.207.113.0/24 maxlen: 24
109.207.114.0/24 maxlen: 24
109.207.115.0/24 maxlen: 24
109.207.116.0/24 maxlen: 24
109.207.117.0/24 maxlen: 24
109.207.118.0/24 maxlen: 24
109.207.119.0/24 maxlen: 24
109.207.120.0/24 maxlen: 24
109.207.121.0/24 maxlen: 24
109.207.122.0/24 maxlen: 24
109.207.123.0/24 maxlen: 24
109.207.124.0/24 maxlen: 24
109.207.125.0/24 maxlen: 24
109.207.126.0/24 maxlen: 24
109.207.127.0/24 maxlen: 24
193.53.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:42:13:09:22:cd:ae:60:97:86:b1:e8:fe:2e:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Validity
Not Before: Oct 24 06:41:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b3a8ae3138232ef2535dc4eccf7e9275daa7dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:3d:0c:34:c8:4a:a0:b4:c8:70:6d:09:1f:
f1:46:cb:5a:72:ac:a3:84:10:f5:16:a5:a3:6f:ee:
f2:7d:1b:cf:b6:75:43:59:d8:36:fb:10:41:93:ff:
eb:35:be:e3:52:88:7a:17:73:da:10:1b:44:30:23:
53:b7:66:26:b0:4b:2e:7d:ad:3e:66:11:f9:61:35:
5d:c0:a3:61:1f:58:43:77:42:84:ab:c0:17:cc:35:
25:b2:27:19:01:ae:da:b0:5f:59:80:02:6c:8f:2e:
52:6d:1e:f5:c2:19:ad:dd:f3:97:98:52:b4:14:0d:
5a:a2:b7:cc:dd:d7:e9:3b:8a:21:62:d0:9c:5b:80:
c7:d1:9e:96:5a:76:58:27:d8:57:59:c9:83:0b:ff:
6c:88:ef:66:c7:2b:ee:ef:67:e1:17:76:10:df:4f:
2c:60:c7:f8:a3:b8:f8:08:d2:89:bb:1d:ec:0f:fa:
5c:ac:17:41:5f:b0:d3:42:4d:f0:60:2e:4b:16:a3:
a7:74:ea:24:33:6d:de:c2:ab:74:87:5d:1b:95:60:
c6:27:96:1a:6c:92:8c:64:fd:a3:1d:39:77:e5:c2:
8f:46:80:80:58:85:49:8c:d0:23:0e:40:f7:4a:d9:
a0:ef:bb:8d:86:1b:25:01:af:b4:ca:d0:4d:5d:7e:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:8A:E3:13:82:32:EF:25:35:DC:4E:CC:F7:E9:27:5D:AA:7D:BF
X509v3 Authority Key Identifier:
keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/GzqK4xOCMu8lNdxOzPfpJ12qfb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.112.0/20
193.53.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:28:c1:3f:39:42:9c:80:93:c2:2d:d8:29:f0:5c:81:1f:16:
56:99:a6:b5:d2:b1:dc:05:74:97:ed:2f:e3:c7:04:45:78:31:
80:19:60:8b:99:67:be:2c:64:4b:97:83:f0:9a:64:39:4e:e4:
50:26:34:12:3d:b7:d7:94:ee:0f:72:cc:7f:fc:92:5e:93:3d:
59:63:8c:e6:6d:ea:84:d4:b4:34:22:d3:79:94:14:f6:ce:ce:
46:07:59:89:7d:1a:ce:41:6f:5e:28:13:bf:50:20:0c:29:7c:
73:e2:2a:25:9a:bc:83:7c:7d:20:0f:cf:60:ac:a9:e6:8b:90:
2a:2b:02:6f:ff:9c:51:09:70:83:03:dd:55:a5:fb:44:50:62:
10:8e:35:1a:f4:bc:59:20:80:ed:f1:fa:25:6f:ad:a6:29:51:
63:a6:4c:8c:64:96:a8:69:cf:1b:fd:6b:31:56:db:31:3c:aa:
fe:39:6f:95:18:be:df:e1:f9:7f:fe:f5:25:b9:38:c7:6b:9b:
70:84:c5:f5:13:7e:a2:73:de:f2:50:10:d9:3b:88:fb:65:5d:
0b:bb:30:46:06:db:31:a0:12:47:ef:1b:79:9d:41:56:0f:03:
ac:ea:03:ad:2c:7d:bf:e9:8c:d0:d4:67:6a:4b:91:bf:17:c6:
18:d6:a3:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZK9QhMJIs2uYJeGsej+LiDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOGU3ZGZjZDIwMGM4NWViM2NhYzY2Zjg1OWI3MTEwYWI5
OWIxMGEwHhcNMjQxMDI0MDY0MTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjNhOGFlMzEzODIzMmVmMjUzNWRjNGVjY2Y3ZTkyNzVkYWE3ZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTk9DDTISqC0yHBtCR/xRstacqyj
hBD1FqWjb+7yfRvPtnVDWdg2+xBBk//rNb7jUoh6F3PaEBtEMCNTt2YmsEsufa0+
ZhH5YTVdwKNhH1hDd0KEq8AXzDUlsicZAa7asF9ZgAJsjy5SbR71whmt3fOXmFK0
FA1aorfM3dfpO4ohYtCcW4DH0Z6WWnZYJ9hXWcmDC/9siO9mxyvu72fhF3YQ308s
YMf4o7j4CNKJux3sD/pcrBdBX7DTQk3wYC5LFqOndOokM23ewqt0h10blWDGJ5Ya
bJKMZP2jHTl35cKPRoCAWIVJjNAjDkD3Stmg77uNhhslAa+0ytBNXX6SzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBs6iuMTgjLvJTXcTsz36Sddqn2/MB8GA1UdIwQY
MBaAFAqOffzSAMhes8rGb4WbcRCrmbEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQt
YTQ3ZWI5MzI5NTk3LzEvR3pxSzR4T0NNdThsTmR4T3pQZnBKMTJxZmI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQtYTQ3ZWI5MzI5NTk3
LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEbc9wAwQA
wTVTMA0GCSqGSIb3DQEBCwUAA4IBAQA+KME/OUKcgJPCLdgp8FyBHxZWmaa10rHc
BXSX7S/jxwRFeDGAGWCLmWe+LGRLl4PwmmQ5TuRQJjQSPbfXlO4Pcsx//JJekz1Z
Y4zmbeqE1LQ0ItN5lBT2zs5GB1mJfRrOQW9eKBO/UCAMKXxz4iolmryDfH0gD89g
rKnmi5AqKwJv/5xRCXCDA91VpftEUGIQjjUa9LxZIIDt8folb62mKVFjpkyMZJao
ac8b/WsxVtsxPKr+OW+VGL7f4fl//vUluTjHa5twhMX1E36ic97yUBDZO4j7ZV0L
uzBGBtsxoBJH7xt5nUFWDwOs6gOtLH2/6YzQ1GdqS5G/F8YY1qPR
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:44 2024 by rpki-client on console.sobornost.net