Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Nou2v65yKwZmGWmAI2ONLFJ-kXY.roa
File: Nou2v65yKwZmGWmAI2ONLFJ-kXY.roa (raw, json)
Hash identifier: 2SF5ZuTx0XWoiUlz1Xvuzp0dqQx1rPJI5GYLE0yvi7Q=
Subject key identifier: 36:8B:B6:BF:AE:72:2B:06:66:19:69:80:23:63:8D:2C:52:7E:91:76
Certificate issuer: /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial: 018CC56E038A986CFB3E37DBD7F8DEBF1D9C
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Nou2v65yKwZmGWmAI2ONLFJ-kXY.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41419
IP address blocks: 89.250.84.0/24 maxlen: 24
89.250.85.0/24 maxlen: 24
89.250.82.0/24 maxlen: 24
89.250.83.0/24 maxlen: 24
89.250.81.0/24 maxlen: 24
89.250.80.0/20 maxlen: 24
89.250.86.0/24 maxlen: 24
89.250.87.0/24 maxlen: 24
89.250.91.0/24 maxlen: 24
89.250.89.0/24 maxlen: 24
89.250.90.0/24 maxlen: 24
89.250.88.0/24 maxlen: 24
89.250.93.0/24 maxlen: 24
89.250.94.0/24 maxlen: 24
89.250.92.0/24 maxlen: 24
89.250.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:03:8a:98:6c:fb:3e:37:db:d7:f8:de:bf:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=368bb6bfae722b066619698023638d2c527e9176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:ce:24:0f:50:fd:34:90:f5:10:bf:79:f2:
c6:ac:08:10:00:a0:77:28:2b:64:33:cd:b1:8c:b5:
91:81:42:c8:97:01:8f:48:d8:5e:c5:7f:f5:53:da:
80:b6:c8:85:64:9c:e9:09:45:ea:f4:bf:82:07:95:
52:f6:e3:17:c9:a0:bb:01:2c:64:ac:a6:aa:ac:a0:
92:d0:4b:6a:d7:34:56:91:09:ab:41:6d:76:79:0c:
ce:18:43:e0:4c:ed:7f:14:55:7f:7e:07:df:65:79:
e0:81:a9:ea:89:ca:da:91:1d:79:b8:4c:c8:de:ab:
b9:4e:0a:cf:60:f4:f8:ab:8b:34:3d:23:73:10:3a:
6e:6a:80:3b:7f:33:67:97:09:4c:0e:f7:c1:89:88:
d4:cc:0a:d9:04:7c:b2:3d:9d:f0:72:85:71:c2:b6:
77:1a:a1:9c:ce:7b:68:15:2e:ac:c0:c9:ab:d5:5b:
67:a1:95:72:ae:6b:88:0a:9a:e6:b9:60:da:08:4f:
94:a4:aa:36:46:1c:9d:ae:08:cd:45:9f:b5:b7:fb:
97:18:0a:04:26:a1:c3:c8:b1:c7:ed:95:22:12:5b:
2f:ce:45:a9:e6:0c:9b:a4:8f:9b:8f:2f:a4:fc:1f:
69:92:f3:14:40:a0:05:87:e1:46:e8:2f:62:54:e9:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:B6:BF:AE:72:2B:06:66:19:69:80:23:63:8D:2C:52:7E:91:76
X509v3 Authority Key Identifier:
keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Nou2v65yKwZmGWmAI2ONLFJ-kXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.250.80.0/20
Signature Algorithm: sha256WithRSAEncryption
69:37:da:20:36:a5:3b:e0:0c:fa:76:d0:ef:2d:6b:67:24:9a:
eb:67:7b:88:d8:54:2c:64:fd:0a:63:4f:73:5c:74:39:d9:ce:
b3:19:89:ba:a5:20:40:77:34:ab:77:be:8f:20:3e:ec:eb:27:
55:54:66:f1:68:30:81:cc:c9:6e:41:32:e1:56:1f:b3:de:1b:
a0:b7:c8:98:c7:7b:38:8c:a0:39:b3:23:2f:7c:95:e6:d5:32:
c8:d5:60:c2:de:0b:77:5b:2f:d6:82:ef:a2:02:fa:c5:36:99:
44:33:b7:8b:9a:07:ad:ff:5d:10:38:bd:db:76:1d:a2:84:71:
c7:45:59:a7:4c:29:51:75:db:16:b8:47:a6:9c:80:78:2e:4c:
7b:1b:36:c7:cf:c5:7b:41:64:49:ed:68:eb:1b:bc:0b:37:ba:
27:01:d3:aa:66:67:6d:12:88:d6:b6:bb:d8:eb:39:1b:4b:8b:
13:8a:56:87:48:f6:d7:05:13:78:5f:cd:73:ec:ed:11:45:39:
4d:a3:66:af:ea:74:35:05:7e:83:1d:3a:31:ef:7b:ff:a8:37:
27:6e:ee:ca:25:76:a6:51:3e:7e:f8:f9:44:ff:ed:87:58:d3:
88:42:2e:d0:95:eb:f6:90:78:98:3a:37:cb:c3:b3:d7:15:d7:
f6:48:80:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbgOKmGz7Pjfb1/jevx2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZmU5ZDY2NjU1YjVmZDI3YjJjMTdjYTk2ODU2NTBkNTNm
M2JiMGEwHhcNMjQwMTAxMTQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjhiYjZiZmFlNzIyYjA2NjYxOTY5ODAyMzYzOGQyYzUyN2U5MTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/XOJA9Q/TSQ9RC/efLGrAgQAKB3
KCtkM82xjLWRgULIlwGPSNhexX/1U9qAtsiFZJzpCUXq9L+CB5VS9uMXyaC7ASxk
rKaqrKCS0Etq1zRWkQmrQW12eQzOGEPgTO1/FFV/fgffZXngganqicrakR15uEzI
3qu5TgrPYPT4q4s0PSNzEDpuaoA7fzNnlwlMDvfBiYjUzArZBHyyPZ3wcoVxwrZ3
GqGczntoFS6swMmr1VtnoZVyrmuICprmuWDaCE+UpKo2RhydrgjNRZ+1t/uXGAoE
JqHDyLHH7ZUiElsvzkWp5gybpI+bjy+k/B9pkvMUQKAFh+FG6C9iVOnVowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDaLtr+ucisGZhlpgCNjjSxSfpF2MB8GA1UdIwQY
MBaAFAr+nWZlW1/SeywXypaFZQ1T87sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWIt
YmRjMjQ4YTZmNTY1LzEvTm91MnY2NXlLd1ptR1dtQUkyT05MRkota1hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWItYmRjMjQ4YTZmNTY1
LzEvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWfpQMA0G
CSqGSIb3DQEBCwUAA4IBAQBpN9ogNqU74Az6dtDvLWtnJJrrZ3uI2FQsZP0KY09z
XHQ52c6zGYm6pSBAdzSrd76PID7s6ydVVGbxaDCBzMluQTLhVh+z3hugt8iYx3s4
jKA5syMvfJXm1TLI1WDC3gt3Wy/Wgu+iAvrFNplEM7eLmget/10QOL3bdh2ihHHH
RVmnTClRddsWuEemnIB4Lkx7GzbHz8V7QWRJ7WjrG7wLN7onAdOqZmdtEojWtrvY
6zkbS4sTilaHSPbXBRN4X81z7O0RRTlNo2av6nQ1BX6DHTox73v/qDcnbu7KJXam
UT5++PlE/+2HWNOIQi7Qlev2kHiYOjfLw7PXFdf2SIAz
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:04 2024 by rpki-client on console.sobornost.net