Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/J85JUg4kou-PBu4SJWs2_W_dTc4.roa
File: J85JUg4kou-PBu4SJWs2_W_dTc4.roa (raw, json)
Hash identifier: oXJdlbJBzDVH7M5Ds2UHJA1rUMq42Y+1MXZXWLqS1CA=
Subject key identifier: 27:CE:49:52:0E:24:A2:EF:8F:06:EE:12:25:6B:36:FD:6F:DD:4D:CE
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 0193CF1CA9976B3EC2641481DDD76F5B1BA8
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/J85JUg4kou-PBu4SJWs2_W_dTc4.roa
Signing time: Mon 16 Dec 2024 10:56:22 +0000
ROA not before: Mon 16 Dec 2024 10:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60847
IP address blocks: 185.218.216.0/24 maxlen: 24
185.218.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:1c:a9:97:6b:3e:c2:64:14:81:dd:d7:6f:5b:1b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Dec 16 10:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27ce49520e24a2ef8f06ee12256b36fd6fdd4dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:17:bf:bd:ae:9f:1a:82:5d:52:b8:2d:31:
f6:56:77:f3:50:58:3b:84:c3:f6:bd:4d:14:65:60:
06:59:d1:00:e7:f2:4d:43:a8:8e:1f:1a:23:69:78:
33:fc:da:b9:80:5e:58:44:99:b3:6e:4a:3d:f1:55:
1e:82:92:ba:23:3d:3b:60:b6:c2:3e:39:f5:fd:f4:
b0:c5:b5:c6:e6:e4:3e:2b:3f:6a:bb:b3:d7:56:78:
d9:32:a6:c0:06:7f:d7:d4:c5:4a:cc:95:02:c7:6a:
56:ad:b6:a2:81:fe:f4:26:22:ea:92:92:b7:98:55:
f7:31:28:0b:01:9b:37:7c:37:40:15:3b:4d:9a:ce:
df:f2:93:79:28:54:bc:9c:a6:09:80:41:b3:a6:e8:
5f:59:c8:ad:b8:a5:7f:dd:32:e7:34:92:24:56:ea:
64:21:96:88:33:b3:55:ec:6c:9c:9c:1d:38:12:b4:
3a:ac:26:a9:a2:6e:cb:21:9f:ce:ef:48:4f:59:56:
b3:25:ee:3d:f3:88:03:3d:c5:ca:74:90:84:87:5f:
d6:95:5c:48:7e:a1:69:ca:e4:4c:ae:ad:f8:8d:e6:
78:65:4f:45:72:e5:60:0e:e6:21:3f:6e:b6:90:be:
83:b0:07:60:54:ad:01:f2:c6:e4:2f:0f:c5:7f:41:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CE:49:52:0E:24:A2:EF:8F:06:EE:12:25:6B:36:FD:6F:DD:4D:CE
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/J85JUg4kou-PBu4SJWs2_W_dTc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.216.0/23
Signature Algorithm: sha256WithRSAEncryption
85:33:8a:68:94:31:45:d2:a2:1d:0b:42:0a:41:4b:1f:53:e6:
e3:0d:16:94:15:78:30:a2:61:aa:f7:f9:4d:b7:86:8c:16:3a:
32:a9:04:a9:a2:ee:61:cd:75:74:a1:57:51:0c:cb:6c:82:70:
ba:fc:e0:09:b7:c2:1b:c3:fd:1e:d6:90:04:48:bd:a9:c7:fa:
68:61:33:ee:ac:dd:32:84:60:f5:b1:07:e3:04:fe:cb:40:d7:
6c:05:d3:a6:5a:b4:7c:fd:2f:b5:78:8d:9b:ce:28:83:c8:eb:
34:8c:51:56:f5:22:06:0f:d3:e1:9d:8e:3b:ba:9a:a4:ab:6b:
93:95:60:12:9d:e4:e4:1e:11:70:8f:ea:0b:f8:c5:1f:42:44:
6d:9e:ff:c8:87:2e:2d:a8:f4:f6:df:b9:d7:70:83:d2:8d:77:
5a:fb:f4:23:fa:0e:5a:32:ce:ff:8c:0a:6d:d5:cb:64:eb:75:
92:52:29:41:40:4a:3b:6a:e6:82:9d:a7:b3:23:bf:01:0c:4e:
52:7d:e0:70:5a:5d:c0:6a:1c:6e:e8:0e:55:ad:c6:00:38:8c:
ab:bc:6c:7f:22:a8:1f:fd:4c:1e:7a:2d:e9:3d:b6:92:7a:e2:
f3:dd:48:0e:0b:78:19:3a:23:02:72:e6:77:e7:ca:2d:04:a6:
8a:3b:19:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPPHKmXaz7CZBSB3ddvWxuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw
ZWU0MDcwHhcNMjQxMjE2MTA1NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2NlNDk1MjBlMjRhMmVmOGYwNmVlMTIyNTZiMzZmZDZmZGQ0ZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUgXv72unxqCXVK4LTH2VnfzUFg7
hMP2vU0UZWAGWdEA5/JNQ6iOHxojaXgz/Nq5gF5YRJmzbko98VUegpK6Iz07YLbC
Pjn1/fSwxbXG5uQ+Kz9qu7PXVnjZMqbABn/X1MVKzJUCx2pWrbaigf70JiLqkpK3
mFX3MSgLAZs3fDdAFTtNms7f8pN5KFS8nKYJgEGzpuhfWcituKV/3TLnNJIkVupk
IZaIM7NV7GycnB04ErQ6rCapom7LIZ/O70hPWVazJe4984gDPcXKdJCEh1/WlVxI
fqFpyuRMrq34jeZ4ZU9FcuVgDuYhP262kL6DsAdgVK0B8sbkLw/Ff0GrUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCfOSVIOJKLvjwbuEiVrNv1v3U3OMB8GA1UdIwQY
MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt
ZDUzODY2ZTkxODZhLzEvSjg1SlVnNGtvdS1QQnU0U0pXczJfV19kVGM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh
LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudrYMA0G
CSqGSIb3DQEBCwUAA4IBAQCFM4polDFF0qIdC0IKQUsfU+bjDRaUFXgwomGq9/lN
t4aMFjoyqQSpou5hzXV0oVdRDMtsgnC6/OAJt8Ibw/0e1pAESL2px/poYTPurN0y
hGD1sQfjBP7LQNdsBdOmWrR8/S+1eI2bziiDyOs0jFFW9SIGD9PhnY47upqkq2uT
lWASneTkHhFwj+oL+MUfQkRtnv/Ihy4tqPT237nXcIPSjXda+/Qj+g5aMs7/jApt
1ctk63WSUilBQEo7auaCnaezI78BDE5SfeBwWl3Aahxu6A5VrcYAOIyrvGx/Iqgf
/Uweei3pPbaSeuLz3UgOC3gZOiMCcuZ358otBKaKOxms
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:58 2024 by rpki-client on console.sobornost.net