Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/uFzTmmfCWlDZ4sh_44NWINqNA4M.roa
File: uFzTmmfCWlDZ4sh_44NWINqNA4M.roa (raw, json)
Hash identifier: j0RNxwD2vdFhpJGEktuK9/GPLh467gkGVWHrVfUzMrA=
Subject key identifier: B8:5C:D3:9A:67:C2:5A:50:D9:E2:C8:7F:E3:83:56:20:DA:8D:03:83
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 0192714B6E751429B6E95ADA8D36736A0BB4
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/uFzTmmfCWlDZ4sh_44NWINqNA4M.roa
Signing time: Wed 09 Oct 2024 12:40:21 +0000
ROA not before: Wed 09 Oct 2024 12:40:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25081
IP address blocks: 195.234.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:4b:6e:75:14:29:b6:e9:5a:da:8d:36:73:6a:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Oct 9 12:40:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b85cd39a67c25a50d9e2c87fe3835620da8d0383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:1d:2e:b7:a0:6a:f3:93:50:c2:de:ef:d5:
37:fb:f9:d5:e1:17:ef:93:81:21:37:79:f2:05:25:
8d:64:33:11:12:dd:a6:55:57:39:62:3c:f4:05:47:
65:8d:f6:01:4b:f2:f5:38:25:06:c8:dd:27:47:f9:
f0:db:13:02:a4:cb:62:d8:f1:ca:19:be:60:4b:9a:
21:a0:c4:8e:1c:7b:a2:0e:1e:ad:a0:0c:ea:65:6e:
0e:bb:a4:1e:61:dd:26:de:bd:22:d5:70:8d:72:06:
d9:75:86:8c:b0:cb:42:e6:f8:09:c8:48:94:09:f6:
44:09:65:c2:a7:15:e5:54:00:77:5c:c0:eb:e3:9f:
a2:36:99:81:05:03:53:03:77:40:39:7c:ab:9d:9f:
41:a5:b2:2e:79:6d:5b:23:33:e9:7c:03:4f:a6:e0:
7a:8d:74:6f:e8:50:30:0d:3c:24:d9:8a:ae:93:9e:
59:c2:2f:5a:7b:af:77:39:6b:e8:12:bf:bc:43:2f:
84:14:1e:ed:17:40:c4:a1:13:23:8a:21:d0:31:d0:
26:77:4b:17:23:5d:8c:10:07:99:53:7a:97:8b:13:
38:48:03:ac:6d:41:42:f1:5c:c0:f7:4c:24:78:3c:
9b:e0:25:81:ad:39:74:14:35:57:10:01:2c:1b:57:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5C:D3:9A:67:C2:5A:50:D9:E2:C8:7F:E3:83:56:20:DA:8D:03:83
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/uFzTmmfCWlDZ4sh_44NWINqNA4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.216.0/22
Signature Algorithm: sha256WithRSAEncryption
10:0c:58:a4:6f:22:62:59:b7:1c:36:4b:87:6b:ef:4b:ec:16:
01:fb:19:7e:ba:61:ba:49:64:19:dc:4c:3e:1b:bd:e8:ff:76:
e3:bb:b4:cc:43:cd:f3:69:c9:7f:e4:2c:6f:c5:7d:e5:56:81:
ce:57:da:93:32:10:ad:06:67:fc:07:c2:c6:32:cb:57:8a:c6:
1d:3e:8b:76:50:bb:6a:51:a2:25:76:c4:90:72:e9:69:8e:49:
c1:cf:a5:af:67:25:25:f9:e0:57:e3:11:14:8f:90:22:86:13:
8e:db:f8:20:aa:ea:03:dd:97:15:e4:1e:39:be:07:28:c6:72:
6c:5b:cb:14:f9:d1:f5:04:aa:43:98:9d:7d:89:eb:e6:09:d6:
91:99:d1:bf:36:7d:45:80:78:b1:3b:f3:38:3b:2d:e3:fb:8c:
c1:7e:cb:8b:fa:02:7e:8a:68:33:40:8a:fa:95:d4:30:d0:ee:
7a:73:ed:f0:e0:aa:b0:97:d7:b5:53:61:ab:bd:de:40:1a:43:
60:bb:22:9e:95:d1:60:2e:42:e4:65:c2:6b:1a:35:49:de:a1:
89:56:9a:01:e0:f7:2c:fd:37:53:f2:65:07:72:8c:3c:ab:eb:
f9:83:6d:27:66:d0:b7:e1:50:ee:3b:1e:9d:30:88:6a:9d:1c:
7f:79:34:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJxS251FCm26VrajTZzagu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDAxODY0OGM3YWZhMTQ0NDY0ZDQ3YmIxZTJjYjJiYTc4
NmViYjEwHhcNMjQxMDA5MTI0MDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODVjZDM5YTY3YzI1YTUwZDllMmM4N2ZlMzgzNTYyMGRhOGQwMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQMdLregavOTUMLe79U3+/nV4Rfv
k4EhN3nyBSWNZDMREt2mVVc5Yjz0BUdljfYBS/L1OCUGyN0nR/nw2xMCpMti2PHK
Gb5gS5ohoMSOHHuiDh6toAzqZW4Ou6QeYd0m3r0i1XCNcgbZdYaMsMtC5vgJyEiU
CfZECWXCpxXlVAB3XMDr45+iNpmBBQNTA3dAOXyrnZ9BpbIueW1bIzPpfANPpuB6
jXRv6FAwDTwk2Yquk55Zwi9ae693OWvoEr+8Qy+EFB7tF0DEoRMjiiHQMdAmd0sX
I12MEAeZU3qXixM4SAOsbUFC8VzA90wkeDyb4CWBrTl0FDVXEAEsG1cZ5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhc05pnwlpQ2eLIf+ODViDajQODMB8GA1UdIwQY
MBaAFKIAGGSMevoURGTUe7HiyyunhuuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQt
YzRkNDJiN2Y2MjcwLzEvdUZ6VG1tZkNXbERaNHNoXzQ0TldJTnFOQTRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQtYzRkNDJiN2Y2Mjcw
LzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw+rYMA0G
CSqGSIb3DQEBCwUAA4IBAQAQDFikbyJiWbccNkuHa+9L7BYB+xl+umG6SWQZ3Ew+
G73o/3bju7TMQ83zacl/5CxvxX3lVoHOV9qTMhCtBmf8B8LGMstXisYdPot2ULtq
UaIldsSQculpjknBz6WvZyUl+eBX4xEUj5AihhOO2/ggquoD3ZcV5B45vgcoxnJs
W8sU+dH1BKpDmJ19ievmCdaRmdG/Nn1FgHixO/M4Oy3j+4zBfsuL+gJ+imgzQIr6
ldQw0O56c+3w4Kqwl9e1U2Grvd5AGkNguyKeldFgLkLkZcJrGjVJ3qGJVpoB4Pcs
/TdT8mUHcow8q+v5g20nZtC34VDuOx6dMIhqnRx/eTSl
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:04 2024 by rpki-client on console.sobornost.net