Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/0exmX8VPEY-o38ZZicFluzPgvn4.roa
File: 0exmX8VPEY-o38ZZicFluzPgvn4.roa (raw, json)
Hash identifier: SysyNGJQvqeNGGZ12PoiOf1GQBzWlmyYXpFX9m7E6d8=
Subject key identifier: D1:EC:66:5F:C5:4F:11:8F:A8:DF:C6:59:89:C1:65:BB:33:E0:BE:7E
Certificate issuer: /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial: 1D96B47A
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/0exmX8VPEY-o38ZZicFluzPgvn4.roa
Signing time: Wed 18 May 2022 08:02:17 +0000
ROA not before: Wed 18 May 2022 08:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41960
IP address blocks: 212.26.192.0/19 maxlen: 24
217.8.96.0/20 maxlen: 24
212.19.192.0/19 maxlen: 24
2001:6e0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496415866 (0x1d96b47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Validity
Not Before: May 18 08:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1ec665fc54f118fa8dfc65989c165bb33e0be7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:96:6b:e4:ab:88:f8:a7:ba:03:59:16:25:
04:83:d2:21:bc:4a:9d:ab:5d:53:19:87:9f:86:af:
11:d3:fe:56:57:8a:26:20:b8:13:e3:fb:69:95:a1:
04:61:02:69:88:cf:3c:fd:75:a7:ed:90:51:58:07:
56:e9:a3:44:e1:df:d7:66:96:06:b9:d2:65:f9:35:
2c:e5:af:d4:31:d9:a7:f6:9b:74:36:8b:76:15:6b:
dc:28:28:08:55:33:a5:80:5e:e1:a4:a8:08:5e:84:
34:e5:6b:65:21:4c:07:92:e7:01:38:b4:2b:dc:8a:
91:79:71:ee:20:34:aa:e6:60:85:7f:8f:bd:32:9a:
f2:2f:c2:8b:47:9f:23:0f:5d:a6:ba:8e:3f:d0:22:
85:a6:9e:05:cb:5b:79:f7:79:0a:fa:ed:bd:5f:82:
87:e4:dd:32:26:46:c4:c2:ee:89:26:0f:e2:9d:2e:
e5:4b:d6:bf:dc:b7:f9:90:e1:5b:e2:f4:01:05:f2:
c7:d6:1e:42:27:9d:7c:f5:32:2e:48:a5:d7:5d:09:
0d:09:b0:9b:53:c0:b0:63:c7:b8:b6:da:2b:f2:c4:
6b:33:51:4d:9e:03:06:ac:30:90:95:9c:38:8a:09:
b4:ec:4d:96:88:6c:3d:a7:b7:b9:6a:9d:eb:1c:e0:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EC:66:5F:C5:4F:11:8F:A8:DF:C6:59:89:C1:65:BB:33:E0:BE:7E
X509v3 Authority Key Identifier:
keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/0exmX8VPEY-o38ZZicFluzPgvn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.19.192.0/19
212.26.192.0/19
217.8.96.0/20
IPv6:
2001:6e0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:1f:bc:64:e5:92:6d:62:4a:4d:fa:a2:60:5b:9b:4c:aa:3b:
98:49:54:1e:08:9c:78:50:33:1e:6a:10:7d:d0:ba:78:73:c3:
4b:a8:bb:42:a2:04:32:6b:ee:86:db:bf:92:8b:02:1a:75:c7:
4b:0c:0d:6f:07:9f:c6:1b:28:d7:93:bb:d1:01:6e:d2:1b:5e:
22:10:68:91:31:7e:4f:b4:7c:d0:73:da:9e:87:46:cc:11:ee:
c5:5b:87:75:4a:94:82:a5:ad:0a:07:f3:43:64:84:aa:47:3e:
49:4a:84:70:e2:bf:25:dd:dd:5b:56:1d:b4:b8:54:73:bd:b1:
50:7d:98:23:85:03:3b:96:d9:a2:2e:12:78:17:a6:99:97:c5:
13:56:68:28:d6:f7:91:fc:72:cf:e9:10:0f:90:b1:b6:90:6c:
cf:a7:3c:bf:fb:00:21:23:b7:e3:3b:be:41:4c:ab:9a:29:8d:
4d:2c:42:10:12:d5:f6:ca:75:b0:03:16:bf:cd:19:73:01:bc:
1d:9b:42:f3:0d:7b:11:00:62:57:ad:5c:c6:1c:24:25:9a:99:
a6:10:af:63:31:0b:07:c0:4d:e7:8b:4b:4f:68:cc:e4:07:01:
ab:cc:46:c1:3d:44:cf:1c:de:2d:c8:94:60:a9:6b:60:22:62:
14:e5:39:06
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEHZa0ejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZTA5YzBhMDc0MTFjOTQ3MzBlMGQyZjJkYTA4YWI5Nzk2M2FkYjViMB4XDTIyMDUx
ODA4MDIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDFlYzY2NWZjNTRm
MTE4ZmE4ZGZjNjU5ODljMTY1YmIzM2UwYmU3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQTlmvkq4j4p7oDWRYlBIPSIbxKnatdUxmHn4avEdP+VleK
JiC4E+P7aZWhBGECaYjPPP11p+2QUVgHVumjROHf12aWBrnSZfk1LOWv1DHZp/ab
dDaLdhVr3CgoCFUzpYBe4aSoCF6ENOVrZSFMB5LnATi0K9yKkXlx7iA0quZghX+P
vTKa8i/Ci0efIw9dprqOP9AihaaeBctbefd5CvrtvV+Ch+TdMiZGxMLuiSYP4p0u
5UvWv9y3+ZDhW+L0AQXyx9YeQiedfPUyLkil110JDQmwm1PAsGPHuLbaK/LEazNR
TZ4DBqwwkJWcOIoJtOxNlohsPae3uWqd6xzgtS8CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBTR7GZfxU8Rj6jfxlmJwWW7M+C+fjAfBgNVHSMEGDAWgBReCcCgdBHJRzDg
0vLaCKuXljrbWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hnbkFvSFFSeVVjdzROTHkyZ2lybDVZNjIxcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvNGMwMGE1LTgxYzYtNDllNy1iNWQ4LTFhYjQ2MWY2NDMxOC8x
LzBleG1YOFZQRVktbzM4WlppY0ZsdXpQZ3ZuNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
NGMwMGE1LTgxYzYtNDllNy1iNWQ4LTFhYjQ2MWY2NDMxOC8xL1hnbkFvSFFSeVVj
dzROTHkyZ2lybDVZNjIxcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBdQTwAMEBdQawAMEBNkIYDANBAIA
AjAHAwUDIAEG4DANBgkqhkiG9w0BAQsFAAOCAQEASh+8ZOWSbWJKTfqiYFubTKo7
mElUHgiceFAzHmoQfdC6eHPDS6i7QqIEMmvuhtu/kosCGnXHSwwNbwefxhso15O7
0QFu0hteIhBokTF+T7R80HPanodGzBHuxVuHdUqUgqWtCgfzQ2SEqkc+SUqEcOK/
Jd3dW1YdtLhUc72xUH2YI4UDO5bZoi4SeBemmZfFE1ZoKNb3kfxyz+kQD5CxtpBs
z6c8v/sAISO34zu+QUyrmimNTSxCEBLV9sp1sAMWv80ZcwG8HZtC8w17EQBiV61c
xhwkJZqZphCvYzELB8BN54tLT2jM5AcBq8xGwT1EzxzeLciUYKlrYCJiFOU5Bg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net