Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/M0jPGazvff9Ux3NIuCmO24EtQXA.roa
File: M0jPGazvff9Ux3NIuCmO24EtQXA.roa (raw, json)
Hash identifier: td5TKaMyv4i6JkPKN5xIyTcHESx+WHZpKCjwvcocQj0=
Subject key identifier: 33:48:CF:19:AC:EF:7D:FF:54:C7:73:48:B8:29:8E:DB:81:2D:41:70
Certificate issuer: /CN=29e52842a6e2c50c0e2c0f5db891dd2d9656fafd
Certificate serial: 018E84CB626E05E95D3B1381B47EC81804A9
Authority key identifier: 29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/M0jPGazvff9Ux3NIuCmO24EtQXA.roa
Signing time: Thu 28 Mar 2024 11:21:45 +0000
ROA not before: Thu 28 Mar 2024 11:21:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61162
IP address blocks: 193.104.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:cb:62:6e:05:e9:5d:3b:13:81:b4:7e:c8:18:04:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e52842a6e2c50c0e2c0f5db891dd2d9656fafd
Validity
Not Before: Mar 28 11:21:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3348cf19acef7dff54c77348b8298edb812d4170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:6d:53:c1:36:12:9e:d6:6b:55:fc:2a:dc:
a3:57:00:c1:c1:5a:b1:00:9a:16:5f:a6:6b:f9:db:
3b:38:6f:f4:94:4b:63:81:bc:2c:9c:d3:6c:5b:a5:
bf:12:95:31:68:c9:bc:cc:65:d0:9d:1c:35:4b:a4:
01:bf:78:eb:82:66:11:cd:6e:42:9b:cd:10:5b:56:
cc:a2:b6:72:23:42:7b:6d:37:95:72:01:cb:2a:3b:
1c:84:fa:27:85:3e:70:58:a0:3d:d1:43:0d:d6:4f:
77:df:41:59:1b:cd:c4:56:68:39:a0:d9:e0:bb:4e:
71:ee:f2:fd:55:b1:1d:1b:55:af:99:d8:30:2c:e8:
5e:c2:98:67:e4:50:7d:b8:fe:50:6c:00:c4:78:06:
5a:d7:e6:e4:26:a5:ef:a5:fd:34:06:fe:09:b2:e2:
28:1c:53:de:c9:88:86:e8:c9:dc:8a:40:b8:8b:66:
04:12:c8:74:00:87:db:78:e5:c3:b5:41:6c:e6:d6:
88:85:41:c2:c0:76:92:fc:fc:5f:ea:e6:82:7e:6d:
8b:f3:41:b0:32:8b:f1:a8:51:b5:6f:4f:cb:d6:b3:
94:0f:5b:93:67:1e:ae:ea:df:1a:40:96:f2:78:ba:
e6:78:b7:c3:2f:66:5c:96:a4:25:df:7b:d4:ee:d5:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:48:CF:19:AC:EF:7D:FF:54:C7:73:48:B8:29:8E:DB:81:2D:41:70
X509v3 Authority Key Identifier:
keyid:29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/M0jPGazvff9Ux3NIuCmO24EtQXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f1:30:9c:4a:7a:68:05:03:eb:1a:89:24:2f:f8:49:a4:1d:
9a:8d:d0:f6:b9:2d:3e:4b:9f:9b:d4:5b:07:10:61:62:46:50:
cc:8d:16:71:32:7d:93:6f:5c:94:ce:df:76:01:c1:d8:00:71:
92:4b:72:78:0c:a7:f2:99:ce:aa:04:69:99:13:cb:7a:1c:b3:
8a:f6:03:7e:b1:b4:6c:85:92:f3:79:cc:34:40:f7:d7:4d:03:
8c:63:1c:60:ac:58:09:10:02:b4:c5:b0:bf:de:1d:18:89:69:
1c:18:3e:eb:52:dd:0d:ae:a5:a6:d0:15:dc:11:bd:ad:fc:5b:
a2:d3:3e:7c:15:e6:e6:97:06:0d:b7:05:6a:4d:45:54:65:d1:
c7:94:1c:55:98:50:31:ca:79:3e:c1:cc:d0:7d:94:b2:8c:eb:
39:cd:b3:9a:6e:4f:8c:20:98:4a:7b:5b:97:67:99:fa:0c:ce:
68:e7:4e:6a:19:61:81:2b:61:24:8c:ee:e6:a9:2a:ea:6a:9b:
b7:c7:23:bb:d9:e0:26:4b:80:ac:b6:63:c2:d7:2f:d0:29:da:
30:50:dd:0e:f4:3a:20:8d:37:db:76:40:fe:1a:85:5b:3b:42:
7b:9e:5d:8e:57:31:85:45:14:1b:47:0d:d4:ec:15:80:e8:66:
ef:82:e0:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6Ey2JuBeldOxOBtH7IGASpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZTUyODQyYTZlMmM1MGMwZTJjMGY1ZGI4OTFkZDJkOTY1
NmZhZmQwHhcNMjQwMzI4MTEyMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzQ4Y2YxOWFjZWY3ZGZmNTRjNzczNDhiODI5OGVkYjgxMmQ0MTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9NtU8E2Ep7Wa1X8KtyjVwDBwVqx
AJoWX6Zr+ds7OG/0lEtjgbwsnNNsW6W/EpUxaMm8zGXQnRw1S6QBv3jrgmYRzW5C
m80QW1bMorZyI0J7bTeVcgHLKjschPonhT5wWKA90UMN1k9330FZG83EVmg5oNng
u05x7vL9VbEdG1WvmdgwLOhewphn5FB9uP5QbADEeAZa1+bkJqXvpf00Bv4JsuIo
HFPeyYiG6MncikC4i2YEEsh0AIfbeOXDtUFs5taIhUHCwHaS/Pxf6uaCfm2L80Gw
MovxqFG1b0/L1rOUD1uTZx6u6t8aQJbyeLrmeLfDL2ZclqQl33vU7tWu/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDNIzxms733/VMdzSLgpjtuBLUFwMB8GA1UdIwQY
MBaAFCnlKEKm4sUMDiwPXbiR3S2WVvr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VVb1FxYml4UXdPTEE5ZHVKSGRMWlpXLXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yNThkZjItYjhmZi00YmRhLWEyMDAt
ZmJiMmUxNGNiYjc1LzEvTTBqUEdhenZmZjlVeDNOSXVDbU8yNEV0UVhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yNThkZjItYjhmZi00YmRhLWEyMDAtZmJiMmUxNGNiYjc1
LzEvS2VVb1FxYml4UXdPTEE5ZHVKSGRMWlpXLXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWggMA0G
CSqGSIb3DQEBCwUAA4IBAQAs8TCcSnpoBQPrGokkL/hJpB2ajdD2uS0+S5+b1FsH
EGFiRlDMjRZxMn2Tb1yUzt92AcHYAHGSS3J4DKfymc6qBGmZE8t6HLOK9gN+sbRs
hZLzecw0QPfXTQOMYxxgrFgJEAK0xbC/3h0YiWkcGD7rUt0NrqWm0BXcEb2t/Fui
0z58FebmlwYNtwVqTUVUZdHHlBxVmFAxynk+wczQfZSyjOs5zbOabk+MIJhKe1uX
Z5n6DM5o505qGWGBK2EkjO7mqSrqapu3xyO72eAmS4CstmPC1y/QKdowUN0O9Dog
jTfbdkD+GoVbO0J7nl2OVzGFRRQbRw3U7BWA6GbvguBW
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:21:40 2024 by rpki-client on console.sobornost.net