Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/g8zpYls66XIuYe9x2RkKGeYoXvE.roa
File: g8zpYls66XIuYe9x2RkKGeYoXvE.roa (raw, json)
Hash identifier: MAPSvi2/ImuKR4/GM+SL5cWEGzFWb0a9Mo40Zo+qDuc=
Subject key identifier: 83:CC:E9:62:5B:3A:E9:72:2E:61:EF:71:D9:19:0A:19:E6:28:5E:F1
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 019372D260B96944BEE4C1DCB595FD65697E
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/g8zpYls66XIuYe9x2RkKGeYoXvE.roa
Signing time: Thu 28 Nov 2024 12:50:10 +0000
ROA not before: Thu 28 Nov 2024 12:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28682
IP address blocks: 185.49.0.0/22 maxlen: 22
193.243.140.0/23 maxlen: 23
2a01:9ce0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:d2:60:b9:69:44:be:e4:c1:dc:b5:95:fd:65:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Nov 28 12:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83cce9625b3ae9722e61ef71d9190a19e6285ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:48:f2:5d:4a:00:fd:8f:f8:dd:2f:76:8a:
e2:ef:8d:21:a3:a8:51:c9:5a:83:a1:85:0a:e0:3a:
17:ff:84:d6:06:de:00:96:77:5e:ca:6b:18:9e:99:
d3:2a:5c:a5:44:a3:c7:be:61:80:dd:16:ca:98:4d:
15:29:ca:a3:03:61:65:b8:f3:47:65:d7:42:e8:de:
c9:86:97:52:f2:aa:83:1d:31:c5:52:00:0c:1b:9b:
18:55:36:cc:5a:98:8e:50:45:ea:1e:cf:6d:c6:24:
a7:a5:2d:97:98:5e:eb:ea:92:ee:1f:f7:d9:e5:e0:
b9:99:05:17:81:db:90:34:66:ba:37:3f:8b:c5:22:
f0:9c:dd:70:14:79:a7:2d:d0:d9:3d:11:ea:b1:84:
07:0c:f5:e2:42:03:7e:a0:36:82:58:6e:f6:86:83:
4e:a9:c3:8f:5f:96:87:c2:fe:2d:74:30:0f:94:84:
ca:36:5c:fe:cc:20:7d:ad:3d:68:c5:b0:7e:fc:a9:
81:01:75:e1:c2:8d:95:f1:33:b0:d3:3f:51:4d:22:
70:85:63:62:f0:d6:eb:3a:5d:04:08:c1:31:f0:88:
65:28:c5:0c:db:e0:26:15:bb:96:29:a6:39:a7:75:
af:ab:2a:cc:88:ed:29:6c:f3:f2:72:c0:1f:02:8e:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CC:E9:62:5B:3A:E9:72:2E:61:EF:71:D9:19:0A:19:E6:28:5E:F1
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/g8zpYls66XIuYe9x2RkKGeYoXvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.0.0/22
193.243.140.0/23
IPv6:
2a01:9ce0::/32
Signature Algorithm: sha256WithRSAEncryption
42:7e:23:7f:91:06:ca:6c:9a:fb:94:06:e8:49:1f:b9:3a:b8:
3d:b1:b9:08:8f:b4:42:5e:d4:0f:8c:7e:fc:92:7d:f3:63:03:
02:a2:c5:b2:bb:d5:e8:76:77:97:a3:36:52:52:3e:99:6b:c5:
bb:84:a1:4e:35:a2:74:8a:fc:7e:e4:98:5b:27:cf:29:f2:af:
39:4b:23:19:50:93:cd:ef:86:31:50:e9:55:cd:f1:12:ba:9f:
d4:e8:e4:a6:01:66:d9:6d:8d:c0:32:8d:f6:9c:a0:6f:6e:c1:
32:d5:a5:d4:00:26:c1:23:9b:68:59:ec:1a:52:03:3f:c1:67:
d2:16:b7:01:c9:7e:d8:08:e8:2f:07:5e:58:91:9b:59:d7:3c:
7f:10:d4:e6:61:ab:21:dd:a2:57:87:da:72:ea:aa:d3:6a:ef:
0c:cc:d2:82:48:39:aa:7a:7b:53:a6:44:55:6a:ad:30:48:0f:
88:38:84:ba:09:da:c6:7c:12:6a:b1:85:9c:11:d0:90:e7:21:
07:fd:1b:8e:07:1a:47:ce:3d:d8:af:5e:d3:0b:02:bf:8a:f6:
73:91:9b:5f:26:bd:45:42:29:f7:96:7a:1f:2f:72:a1:cb:c7:
64:38:df:7c:de:78:bf:fe:8c:79:c0:1e:a5:35:32:a3:c2:e0:
2b:5f:f7:0e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZNy0mC5aUS+5MHctZX9ZWl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTZhZTM4YWVkYWNiYmVlZWUxZTA5Mzk1NmRiMzI4N2Fl
N2I1M2QwHhcNMjQxMTI4MTI1MDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2NjZTk2MjViM2FlOTcyMmU2MWVmNzFkOTE5MGExOWU2Mjg1ZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1BI8l1KAP2P+N0vdori740ho6hR
yVqDoYUK4DoX/4TWBt4AlndeymsYnpnTKlylRKPHvmGA3RbKmE0VKcqjA2FluPNH
ZddC6N7JhpdS8qqDHTHFUgAMG5sYVTbMWpiOUEXqHs9txiSnpS2XmF7r6pLuH/fZ
5eC5mQUXgduQNGa6Nz+LxSLwnN1wFHmnLdDZPRHqsYQHDPXiQgN+oDaCWG72hoNO
qcOPX5aHwv4tdDAPlITKNlz+zCB9rT1oxbB+/KmBAXXhwo2V8TOw0z9RTSJwhWNi
8NbrOl0ECMEx8IhlKMUM2+AmFbuWKaY5p3WvqyrMiO0pbPPycsAfAo7ImQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIPM6WJbOulyLmHvcdkZChnmKF7xMB8GA1UdIwQY
MBaAFGSWrjiu2su+7uHgk5Vtsyh657U9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzIt
NzY2NGU4YTIxZmM3LzEvZzh6cFlsczY2WEl1WWU5eDJSa0tHZVlvWHZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzItNzY2NGU4YTIxZmM3
LzEvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuTEAAwQB
wfOMMA0EAgACMAcDBQAqAZzgMA0GCSqGSIb3DQEBCwUAA4IBAQBCfiN/kQbKbJr7
lAboSR+5Org9sbkIj7RCXtQPjH78kn3zYwMCosWyu9XodneXozZSUj6Za8W7hKFO
NaJ0ivx+5JhbJ88p8q85SyMZUJPN74YxUOlVzfESup/U6OSmAWbZbY3AMo32nKBv
bsEy1aXUACbBI5toWewaUgM/wWfSFrcByX7YCOgvB15YkZtZ1zx/ENTmYash3aJX
h9py6qrTau8MzNKCSDmqentTpkRVaq0wSA+IOIS6CdrGfBJqsYWcEdCQ5yEH/RuO
BxpHzj3Yr17TCwK/ivZzkZtfJr1FQin3lnofL3Khy8dkON983ni//ox5wB6lNTKj
wuArX/cO
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:54 2024 by rpki-client on console.sobornost.net