Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/qAdjcQCB24DxvkWa9wbaELMCKuU.roa
File: qAdjcQCB24DxvkWa9wbaELMCKuU.roa (raw, json)
Hash identifier: GzH5FfNGZhKRak8fWKe0LLr1FD7t2zrSBxdoaJZCyR4=
Subject key identifier: A8:07:63:71:00:81:DB:80:F1:BE:45:9A:F7:06:DA:10:B3:02:2A:E5
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 019391E0D055678B936821E834C412962305
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/qAdjcQCB24DxvkWa9wbaELMCKuU.roa
Signing time: Wed 04 Dec 2024 13:34:09 +0000
ROA not before: Wed 04 Dec 2024 13:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209956
IP address blocks: 194.48.95.0/24 maxlen: 24
217.119.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:e0:d0:55:67:8b:93:68:21:e8:34:c4:12:96:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Dec 4 13:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a80763710081db80f1be459af706da10b3022ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:27:a4:7d:8d:06:e0:11:81:99:17:f1:70:
60:00:f6:bf:e8:6f:6f:13:4a:1f:6f:ae:dc:69:5e:
36:aa:fb:db:a7:61:4b:b7:2e:66:88:e2:ed:c9:f8:
70:4b:84:7c:dd:fa:8e:ff:f7:be:ae:1f:b8:86:57:
33:d2:43:f0:c0:39:a5:da:2d:fc:1d:15:0c:29:03:
c8:6d:7b:04:95:03:b8:ce:d3:7b:4e:bc:37:92:69:
f8:80:c2:25:7a:80:8f:11:71:04:f2:ec:18:16:8a:
0d:bf:9c:39:4c:9c:d1:fc:17:a7:1d:85:a8:b6:28:
c9:ef:d5:02:f3:d2:a4:7b:f1:1f:78:9c:22:8a:b8:
2a:5c:46:0b:3b:c8:83:6f:8c:42:e1:ad:27:9e:44:
b9:ef:5a:e2:e0:61:4c:31:5f:dc:74:7e:22:0b:db:
9b:a5:0a:94:1a:de:65:a7:b0:19:91:64:cb:c1:b0:
fa:ad:2d:ab:84:d0:e9:92:9c:ea:e8:f1:77:02:37:
e2:d5:c9:91:e7:b6:7a:86:a7:77:a3:93:99:dd:00:
57:10:fd:ae:df:29:6f:46:11:a5:6f:0c:e1:5a:da:
19:bb:59:55:2f:2f:3c:8d:e5:ec:f3:cc:fc:48:37:
52:d8:f2:8c:c1:d9:88:7d:98:53:0f:2f:f4:0e:a8:
47:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:07:63:71:00:81:DB:80:F1:BE:45:9A:F7:06:DA:10:B3:02:2A:E5
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/qAdjcQCB24DxvkWa9wbaELMCKuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.95.0/24
217.119.134.0/24
Signature Algorithm: sha256WithRSAEncryption
20:54:7d:ff:67:7a:9a:36:bd:93:9c:d0:67:5b:0f:c3:e8:7e:
b5:03:26:ed:5f:c7:dc:05:7b:c3:1e:ef:b5:5f:67:b6:65:6f:
d9:f5:39:a5:60:47:6f:08:67:68:19:7a:1f:a9:99:07:5e:11:
91:c1:83:af:58:ac:5d:f1:bb:39:19:70:66:d8:c0:24:0c:42:
4e:17:db:8f:4c:37:e1:42:22:cc:e8:c1:3e:59:aa:3d:30:1e:
b8:74:b8:77:c1:b0:47:38:be:21:14:29:3f:49:df:75:1a:be:
4e:7b:33:0d:08:93:43:4c:45:7a:e0:4e:d7:ee:41:ad:a2:5a:
52:19:67:b9:1e:ef:f9:a4:96:35:1a:d1:6f:a9:71:99:b2:4c:
b0:9d:55:71:1f:01:17:dc:7f:b8:46:9d:86:62:ac:2c:eb:4c:
78:51:3d:13:12:9f:32:d8:6d:1c:1a:9a:98:cf:26:be:a1:7c:
63:33:e4:8f:36:7d:eb:6a:fd:56:c4:80:fb:dd:53:67:c8:7d:
e4:95:43:9d:1a:0c:d7:7a:96:b6:6f:c2:67:bc:c3:fb:03:db:
1d:6e:ec:45:43:97:e3:06:bc:69:03:da:ef:b3:ac:a8:4b:8c:
3f:30:ba:f4:bc:aa:f7:02:c5:fe:e8:5a:51:98:ed:9c:2a:b4:
49:a4:21:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOR4NBVZ4uTaCHoNMQSliMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGVhYjkzNTMwY2ZkNTBkYTdmYjdkYTVlYmEwYWE0NDBj
OWVmMGMwHhcNMjQxMjA0MTMzNDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODA3NjM3MTAwODFkYjgwZjFiZTQ1OWFmNzA2ZGExMGIzMDIyYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjInpH2NBuARgZkX8XBgAPa/6G9v
E0ofb67caV42qvvbp2FLty5miOLtyfhwS4R83fqO//e+rh+4hlcz0kPwwDml2i38
HRUMKQPIbXsElQO4ztN7Trw3kmn4gMIleoCPEXEE8uwYFooNv5w5TJzR/BenHYWo
tijJ79UC89Kke/EfeJwiirgqXEYLO8iDb4xC4a0nnkS571ri4GFMMV/cdH4iC9ub
pQqUGt5lp7AZkWTLwbD6rS2rhNDpkpzq6PF3Ajfi1cmR57Z6hqd3o5OZ3QBXEP2u
3ylvRhGlbwzhWtoZu1lVLy88jeXs88z8SDdS2PKMwdmIfZhTDy/0DqhHbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKgHY3EAgduA8b5FmvcG2hCzAirlMB8GA1UdIwQY
MBaAFB2Oq5NTDP1Q2n+32l66CqRAye8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEt
MzJkZDUzNjQwYjljLzEvcUFkamNRQ0IyNER4dmtXYTl3YmFFTE1DS3VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEtMzJkZDUzNjQwYjlj
LzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjBfAwQA
2XeGMA0GCSqGSIb3DQEBCwUAA4IBAQAgVH3/Z3qaNr2TnNBnWw/D6H61AybtX8fc
BXvDHu+1X2e2ZW/Z9TmlYEdvCGdoGXofqZkHXhGRwYOvWKxd8bs5GXBm2MAkDEJO
F9uPTDfhQiLM6ME+Wao9MB64dLh3wbBHOL4hFCk/Sd91Gr5OezMNCJNDTEV64E7X
7kGtolpSGWe5Hu/5pJY1GtFvqXGZskywnVVxHwEX3H+4Rp2GYqws60x4UT0TEp8y
2G0cGpqYzya+oXxjM+SPNn3rav1WxID73VNnyH3klUOdGgzXepa2b8JnvMP7A9sd
buxFQ5fjBrxpA9rvs6yoS4w/MLr0vKr3AsX+6FpRmO2cKrRJpCEx
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:09 2024 by rpki-client on console.sobornost.net