Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/_DdydFKpFGl8T1EnJUm4JJkJEZo.roa
File: _DdydFKpFGl8T1EnJUm4JJkJEZo.roa (raw, json)
Hash identifier: 8r9z4OpBKKRpKZRUkBhf4H3IkqodOIkvvw+DtJVxn68=
Subject key identifier: FC:37:72:74:52:A9:14:69:7C:4F:51:27:25:49:B8:24:99:09:11:9A
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 0193AD014822BE2C288A2DFA893EAAA8928A
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/_DdydFKpFGl8T1EnJUm4JJkJEZo.roa
Signing time: Mon 09 Dec 2024 19:59:22 +0000
ROA not before: Mon 09 Dec 2024 19:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24936
IP address blocks: 217.150.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:01:48:22:be:2c:28:8a:2d:fa:89:3e:aa:a8:92:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Dec 9 19:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc37727452a914697c4f51272549b8249909119a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:98:d0:32:95:03:f5:6b:7c:15:1c:a5:6f:
4a:a3:b0:ef:93:e3:61:35:c2:e2:e4:cd:1a:fc:e3:
2b:13:78:27:7a:38:55:24:ed:ad:17:cc:b0:90:e6:
f6:aa:07:d6:aa:63:8c:ab:04:02:60:5e:f9:a4:8f:
28:dd:e5:cd:68:20:ba:6a:33:ee:c2:9c:a5:f5:d9:
8b:fb:a8:77:0c:71:5d:ee:e4:d5:30:ee:5d:de:23:
fe:b6:70:c6:65:bc:15:f5:9b:fd:c7:93:9d:ce:ca:
e8:b8:3f:68:06:ec:24:1e:d9:55:c9:42:77:e9:82:
76:e1:12:5d:b6:27:0f:5f:bb:95:85:e4:bc:ad:30:
4f:9a:da:23:90:d6:8f:db:9c:e5:88:dc:01:da:10:
a5:7e:11:ab:7c:b8:b2:40:45:7e:78:c8:76:ec:1a:
87:1d:30:c0:4e:c5:2a:b1:52:8e:2e:37:a1:23:76:
01:1e:d5:f2:96:4d:e6:8e:ac:9a:cb:46:84:b7:8e:
54:fc:74:7e:5c:8d:f4:ea:db:51:e3:43:4c:8d:95:
1e:f1:70:ec:69:ab:73:18:21:ae:32:9a:68:ac:f0:
62:d4:be:12:b6:f6:6a:33:41:76:78:57:4b:6d:eb:
18:30:df:a3:52:a0:47:65:ca:33:4a:72:e1:8e:04:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:37:72:74:52:A9:14:69:7C:4F:51:27:25:49:B8:24:99:09:11:9A
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/_DdydFKpFGl8T1EnJUm4JJkJEZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:da:4c:94:56:a5:2e:b1:21:01:62:83:85:ed:d0:ed:6f:ba:
9d:d5:20:69:de:29:cb:c1:cb:4a:02:4d:11:2b:82:24:25:17:
16:81:77:58:c5:ac:47:aa:2a:3a:0c:f1:2b:a9:9d:c7:5d:cd:
d7:0d:f7:fa:cd:03:bc:f0:ca:06:1f:9b:f2:d7:97:5d:34:5a:
7b:e9:0d:bc:41:6a:f1:f2:4b:83:5e:36:f0:23:fa:28:55:e2:
a8:4e:df:51:92:ec:bc:1a:c8:18:79:01:fb:17:a5:a3:a0:c7:
32:e7:aa:05:e2:95:6a:5b:d1:69:d2:3e:ae:aa:c6:90:c2:e9:
a0:cd:34:ce:81:94:b0:79:60:5a:ba:54:68:55:4d:ec:e4:38:
81:10:6d:61:bd:d8:73:57:69:62:0b:66:d0:b0:b7:5b:d8:76:
3f:81:60:60:08:94:60:c4:39:ec:01:f0:5e:1a:d2:6e:f0:f6:
e4:01:28:a1:69:21:2c:ce:f7:3c:a2:98:17:25:bf:2a:f8:58:
08:4e:d9:b7:90:47:9d:fc:24:ae:07:f0:99:3f:ec:50:f2:5b:
70:17:77:ab:69:e4:66:3c:19:98:f6:52:61:41:52:30:81:87:
ae:06:4e:ae:30:81:fa:28:04:99:26:7d:1c:49:4f:56:49:d2:
8e:89:11:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOtAUgiviwoii36iT6qqJKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NWI0OTBkNzY2ZjRiMWMyMTFkN2RhZGQ2ZWZhNzcwZjZl
YjllMjUwHhcNMjQxMjA5MTk1OTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzM3NzI3NDUyYTkxNDY5N2M0ZjUxMjcyNTQ5YjgyNDk5MDkxMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAuY0DKVA/VrfBUcpW9Ko7Dvk+Nh
NcLi5M0a/OMrE3gnejhVJO2tF8ywkOb2qgfWqmOMqwQCYF75pI8o3eXNaCC6ajPu
wpyl9dmL+6h3DHFd7uTVMO5d3iP+tnDGZbwV9Zv9x5OdzsrouD9oBuwkHtlVyUJ3
6YJ24RJdticPX7uVheS8rTBPmtojkNaP25zliNwB2hClfhGrfLiyQEV+eMh27BqH
HTDATsUqsVKOLjehI3YBHtXylk3mjqyay0aEt45U/HR+XI306ttR40NMjZUe8XDs
aatzGCGuMpporPBi1L4StvZqM0F2eFdLbesYMN+jUqBHZcozSnLhjgS5CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPw3cnRSqRRpfE9RJyVJuCSZCRGaMB8GA1UdIwQY
MBaAFHhbSQ12b0scIR19rdbvp3D2654lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZ0SkRYWnZTeHdoSFgydDF1LW5jUGJybmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZjM0M2QtOWI0Mi00NGI0LTkwNjct
N2NhZTA0MGU0OWU4LzEvX0RkeWRGS3BGR2w4VDFFbkpVbTRKSmtKRVpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZjM0M2QtOWI0Mi00NGI0LTkwNjctN2NhZTA0MGU0OWU4
LzEvZUZ0SkRYWnZTeHdoSFgydDF1LW5jUGJybmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZbIMA0G
CSqGSIb3DQEBCwUAA4IBAQBa2kyUVqUusSEBYoOF7dDtb7qd1SBp3inLwctKAk0R
K4IkJRcWgXdYxaxHqio6DPErqZ3HXc3XDff6zQO88MoGH5vy15ddNFp76Q28QWrx
8kuDXjbwI/ooVeKoTt9Rkuy8GsgYeQH7F6WjoMcy56oF4pVqW9Fp0j6uqsaQwumg
zTTOgZSweWBaulRoVU3s5DiBEG1hvdhzV2liC2bQsLdb2HY/gWBgCJRgxDnsAfBe
GtJu8PbkASihaSEszvc8opgXJb8q+FgITtm3kEed/CSuB/CZP+xQ8ltwF3eraeRm
PBmY9lJhQVIwgYeuBk6uMIH6KASZJn0cSU9WSdKOiRFR
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net