Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/6NaJFTSfbaG1lZGe7QXcKDhTm78.roa
File: 6NaJFTSfbaG1lZGe7QXcKDhTm78.roa (raw, json)
Hash identifier: CWgNgmaOwsBzhKNWUHe4AmJj9PLfov5qegV4j403pYI=
Subject key identifier: E8:D6:89:15:34:9F:6D:A1:B5:95:91:9E:ED:05:DC:28:38:53:9B:BF
Certificate issuer: /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial: 0193F6E15DD4E9F4BC664DDA707A5CD4B97D
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/6NaJFTSfbaG1lZGe7QXcKDhTm78.roa
Signing time: Tue 24 Dec 2024 04:16:24 +0000
ROA not before: Tue 24 Dec 2024 04:16:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212800
IP address blocks: 195.69.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f6:e1:5d:d4:e9:f4:bc:66:4d:da:70:7a:5c:d4:b9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Validity
Not Before: Dec 24 04:16:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8d68915349f6da1b595919eed05dc2838539bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:31:4f:c6:6e:5e:92:a1:b8:47:0e:18:8b:
e3:3d:53:cc:12:f0:ca:4b:ca:8d:cf:b9:42:8e:d3:
d6:63:47:5e:27:85:a6:71:c4:15:61:a0:28:90:08:
b0:00:5c:01:6b:63:e7:7c:72:59:82:e5:69:09:e8:
6d:d2:aa:2c:59:f5:30:2c:1d:e0:1b:23:fb:85:ea:
72:26:54:a1:d7:c3:d9:03:86:0b:8c:11:b0:3d:80:
56:3d:95:dd:c0:a5:a6:33:b8:53:09:b3:8e:5b:31:
6e:5a:75:b1:f9:25:04:13:f8:b8:12:1b:ed:22:1e:
db:08:7c:b0:a2:68:aa:9f:03:76:4d:a3:15:1d:14:
b2:ce:a4:e9:36:84:64:bd:77:27:5a:0b:9d:19:c7:
60:85:7b:0e:de:65:2f:83:f5:7c:c6:f1:54:d4:9e:
43:3c:00:79:f7:e5:72:c9:76:a6:b7:8b:93:aa:6d:
27:48:6d:c9:b2:f7:38:a5:e0:20:34:61:e2:46:42:
14:94:09:ee:dd:bc:5f:69:8d:65:33:38:88:20:5e:
5b:d4:d5:e9:eb:bb:59:8b:5a:ce:f8:76:c7:0d:72:
51:49:17:8c:42:2e:c5:2b:e9:1b:bb:51:46:57:86:
f7:2a:79:d9:c5:e3:17:21:47:cb:9b:19:93:97:d3:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D6:89:15:34:9F:6D:A1:B5:95:91:9E:ED:05:DC:28:38:53:9B:BF
X509v3 Authority Key Identifier:
keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/6NaJFTSfbaG1lZGe7QXcKDhTm78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.158.0/24
Signature Algorithm: sha256WithRSAEncryption
25:eb:d1:a0:77:57:85:3e:3f:99:21:e0:6f:dd:6b:dc:ec:3b:
df:76:d0:6a:41:5c:58:9b:a1:65:ca:6a:2a:48:40:f0:e5:57:
ca:2e:a1:0c:6d:5c:47:e0:cf:a6:b7:b4:03:5f:42:10:5d:9c:
c4:4d:81:a4:4d:af:32:b0:af:0b:7d:e9:d0:c4:83:3d:77:af:
36:0e:b8:d1:4f:68:3b:6a:15:23:03:4d:cd:d5:97:af:8b:cd:
cd:34:0e:34:8a:1f:3a:24:51:3a:7d:43:68:89:6d:48:dd:64:
f9:5d:1b:95:66:5a:cf:ed:07:14:1b:b5:45:50:a1:b0:86:f3:
62:e1:02:79:ea:72:62:c4:5e:56:8d:e8:35:e4:98:68:b0:c6:
a8:c9:1a:f9:99:62:72:f2:b7:ae:35:51:5c:e8:de:46:dc:28:
fe:a8:49:f6:c7:e9:cf:b2:60:74:a1:82:bd:34:8a:0b:96:61:
33:52:44:45:bc:37:33:93:05:eb:d8:19:76:15:32:57:9c:02:
f4:d6:91:22:ad:aa:7c:00:17:ad:d5:c9:d7:cf:c6:9f:2c:98:
ca:29:b1:6f:f5:53:e7:c8:82:15:1e:2e:28:61:8b:ad:67:11:
b1:74:52:53:d9:58:82:75:cf:27:e1:3f:d5:52:e4:39:25:bc:
53:5c:83:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZP24V3U6fS8Zk3acHpc1Ll9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTdiMWUxM2QzMmVkM2E2NGE3YzM1MjI3NTE2MjNlZWZh
YmU1ZjMwHhcNMjQxMjI0MDQxNjI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQ2ODkxNTM0OWY2ZGExYjU5NTkxOWVlZDA1ZGMyODM4NTM5YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL8xT8ZuXpKhuEcOGIvjPVPMEvDK
S8qNz7lCjtPWY0deJ4WmccQVYaAokAiwAFwBa2PnfHJZguVpCeht0qosWfUwLB3g
GyP7hepyJlSh18PZA4YLjBGwPYBWPZXdwKWmM7hTCbOOWzFuWnWx+SUEE/i4Ehvt
Ih7bCHywomiqnwN2TaMVHRSyzqTpNoRkvXcnWgudGcdghXsO3mUvg/V8xvFU1J5D
PAB59+VyyXamt4uTqm0nSG3Jsvc4peAgNGHiRkIUlAnu3bxfaY1lMziIIF5b1NXp
67tZi1rO+HbHDXJRSReMQi7FK+kbu1FGV4b3KnnZxeMXIUfLmxmTl9PeLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOjWiRU0n22htZWRnu0F3Cg4U5u/MB8GA1UdIwQY
MBaAFGQXseE9Mu06ZKfDUidRYj7vq+XzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80NDUyMjgtYjQ0Mi00ZTE2LWFkNjkt
OGZmZGRiNWUzYzI2LzEvNk5hSkZUU2ZiYUcxbFpHZTdRWGNLRGhUbTc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80NDUyMjgtYjQ0Mi00ZTE2LWFkNjktOGZmZGRiNWUzYzI2
LzEvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0WeMA0G
CSqGSIb3DQEBCwUAA4IBAQAl69Ggd1eFPj+ZIeBv3Wvc7DvfdtBqQVxYm6Flymoq
SEDw5VfKLqEMbVxH4M+mt7QDX0IQXZzETYGkTa8ysK8LfenQxIM9d682DrjRT2g7
ahUjA03N1Zevi83NNA40ih86JFE6fUNoiW1I3WT5XRuVZlrP7QcUG7VFUKGwhvNi
4QJ56nJixF5Wjeg15JhosMaoyRr5mWJy8reuNVFc6N5G3Cj+qEn2x+nPsmB0oYK9
NIoLlmEzUkRFvDczkwXr2Bl2FTJXnAL01pEirap8ABet1cnXz8afLJjKKbFv9VPn
yIIVHi4oYYutZxGxdFJT2ViCdc8n4T/VUuQ5JbxTXIN3
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:03 2024 by rpki-client on console.sobornost.net