Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/vY0myy6gJTDSUTGF_CZRGNN8MrI.roa
File: vY0myy6gJTDSUTGF_CZRGNN8MrI.roa (raw, json)
Hash identifier: QzQXq/j9eoo9iTKFnDSDXuaVMJlOZNo6NM0/xavyANI=
Subject key identifier: BD:8D:26:CB:2E:A0:25:30:D2:51:31:85:FC:26:51:18:D3:7C:32:B2
Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial: 01928ECED25BD7332AF82CC494D93BB845C4
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/vY0myy6gJTDSUTGF_CZRGNN8MrI.roa
Signing time: Tue 15 Oct 2024 06:12:51 +0000
ROA not before: Tue 15 Oct 2024 06:12:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210949
IP address blocks: 193.42.101.0/24 maxlen: 24
193.42.102.0/24 maxlen: 24
193.42.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8e:ce:d2:5b:d7:33:2a:f8:2c:c4:94:d9:3b:b8:45:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Validity
Not Before: Oct 15 06:12:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd8d26cb2ea02530d2513185fc265118d37c32b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:8d:75:74:7b:6c:ed:97:32:a0:cb:86:73:
d6:ef:15:97:9d:9c:71:29:f2:3c:2b:ce:9e:43:4d:
49:f6:99:aa:75:b6:a2:86:08:73:aa:f2:56:c0:2d:
4b:9d:8e:19:a9:51:94:58:43:d0:97:63:95:0c:7a:
59:02:44:bc:01:01:db:8e:e8:b3:e9:21:9d:dd:43:
8e:cd:77:33:86:99:b6:33:8a:14:2c:52:cd:11:77:
9c:3f:17:dd:64:9f:cf:80:4b:66:d2:6b:ce:20:ac:
d9:23:87:e6:d1:f5:d8:b0:3a:39:ff:69:4e:24:6a:
8f:fd:c2:bd:eb:a7:50:5c:fd:f3:a3:e1:45:91:25:
f5:46:9a:b6:cd:75:dd:83:40:8c:b6:9c:1a:40:b4:
4d:c9:2c:1f:15:38:af:ba:4a:57:46:2a:82:fa:74:
7b:01:06:80:9e:dd:b4:41:3e:7a:ae:8c:a2:16:c8:
4d:c8:19:4c:b4:aa:ad:79:e3:ea:fe:83:70:c0:2d:
57:5d:81:a8:75:cb:d0:61:8f:61:f9:11:34:f8:63:
ef:c6:fb:2b:58:35:68:78:81:88:e5:36:81:d9:5a:
1a:cd:3b:37:ed:56:cd:be:53:69:07:7c:bf:8b:ac:
68:14:2a:df:c4:ec:28:bd:3e:77:d5:0a:dd:a4:d0:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8D:26:CB:2E:A0:25:30:D2:51:31:85:FC:26:51:18:D3:7C:32:B2
X509v3 Authority Key Identifier:
keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/vY0myy6gJTDSUTGF_CZRGNN8MrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.101.0-193.42.103.255
Signature Algorithm: sha256WithRSAEncryption
4d:10:f7:8a:2c:45:94:ef:f4:e9:14:10:a7:27:a6:96:31:5d:
d9:db:4e:6f:86:36:dc:1b:39:fd:a8:4b:0a:10:61:cd:4c:db:
2c:6f:41:ba:21:b0:7f:42:b0:a0:0b:76:29:15:8e:43:fe:1c:
00:26:de:0f:cf:f9:46:ba:9e:3b:78:32:6c:ae:05:64:79:b6:
87:32:86:13:5a:08:29:c1:39:01:71:d3:23:74:13:1e:97:57:
1c:a4:e9:76:68:93:17:ff:eb:21:d7:4c:75:b7:0a:0e:71:1a:
03:78:23:07:3f:d2:44:25:04:cb:50:e7:ee:ad:4a:d1:fd:77:
73:42:e6:00:c2:95:1f:42:ec:e9:85:9d:27:34:cc:ab:8a:a5:
b5:8e:79:74:fe:2b:85:bc:35:c4:20:5f:a2:9f:d8:4c:d0:6c:
a2:ba:a8:0f:9e:60:9f:50:01:27:b7:82:27:b1:90:56:2c:ce:
94:05:04:8c:10:bc:23:39:91:48:6f:e7:1f:70:01:b3:0e:8f:
3c:70:9b:d5:20:7d:d9:86:dd:a5:4b:75:23:e9:46:b9:52:db:
7d:cc:4e:2e:3c:5e:ff:c8:2d:ae:51:e3:24:99:ad:08:9c:c6:
32:b0:76:15:2b:eb:10:d3:f8:2d:c2:f4:be:e9:df:08:a1:59:
0a:46:fd:5f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZKOztJb1zMq+CzElNk7uEXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjZlODQ5OWZmZTMxZTFmNmQ2NzgwZDAzMDE3ZTgzNDcz
ZjJkM2MwHhcNMjQxMDE1MDYxMjUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDhkMjZjYjJlYTAyNTMwZDI1MTMxODVmYzI2NTExOGQzN2MzMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJqNdXR7bO2XMqDLhnPW7xWXnZxx
KfI8K86eQ01J9pmqdbaihghzqvJWwC1LnY4ZqVGUWEPQl2OVDHpZAkS8AQHbjuiz
6SGd3UOOzXczhpm2M4oULFLNEXecPxfdZJ/PgEtm0mvOIKzZI4fm0fXYsDo5/2lO
JGqP/cK966dQXP3zo+FFkSX1Rpq2zXXdg0CMtpwaQLRNySwfFTivukpXRiqC+nR7
AQaAnt20QT56royiFshNyBlMtKqteePq/oNwwC1XXYGodcvQYY9h+RE0+GPvxvsr
WDVoeIGI5TaB2VoazTs37VbNvlNpB3y/i6xoFCrfxOwovT531QrdpNBnMQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFL2NJssuoCUw0lExhfwmURjTfDKyMB8GA1UdIwQY
MBaAFOi26Emf/jHh9tZ4DQMBfoNHPy08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxib1NaXy1NZUgyMW5nTkF3Ri1nMGNfTFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lNWI1MjAtOGQ0Yy00Y2Q4LWE1NGMt
NjgxYzRhNWQ1Yjc0LzEvdlkwbXl5NmdKVERTVVRHRl9DWlJHTk44TXJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lNWI1MjAtOGQ0Yy00Y2Q4LWE1NGMtNjgxYzRhNWQ1Yjc0
LzEvNkxib1NaXy1NZUgyMW5nTkF3Ri1nMGNfTFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBKmUD
BAPBKmAwDQYJKoZIhvcNAQELBQADggEBAE0Q94osRZTv9OkUEKcnppYxXdnbTm+G
NtwbOf2oSwoQYc1M2yxvQbohsH9CsKALdikVjkP+HAAm3g/P+Ua6njt4MmyuBWR5
tocyhhNaCCnBOQFx0yN0Ex6XVxyk6XZokxf/6yHXTHW3Cg5xGgN4Iwc/0kQlBMtQ
5+6tStH9d3NC5gDClR9C7OmFnSc0zKuKpbWOeXT+K4W8NcQgX6Kf2EzQbKK6qA+e
YJ9QASe3giexkFYszpQFBIwQvCM5kUhv5x9wAbMOjzxwm9UgfdmG3aVLdSPpRrlS
233MTi48Xv/ILa5R4ySZrQicxjKwdhUr6xDT+C3C9L7p3wihWQpG/V8=
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:09 2024 by rpki-client on console.sobornost.net