Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/l-jXSxt2A8VTzpaHMHnj-g4Hnck.roa
File: l-jXSxt2A8VTzpaHMHnj-g4Hnck.roa (raw, json)
Hash identifier: ySX9TwWEX869IiZCO9ZbyM37vaYF3EJUloQuGQeWiMY=
Subject key identifier: 97:E8:D7:4B:1B:76:03:C5:53:CE:96:87:30:79:E3:FA:0E:07:9D:C9
Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579
Certificate serial: 0191367C58BD6F9C12B7F926BA524EFB1648
Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/l-jXSxt2A8VTzpaHMHnj-g4Hnck.roa
Signing time: Fri 09 Aug 2024 09:33:24 +0000
ROA not before: Fri 09 Aug 2024 09:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56932
IP address blocks: 91.225.48.0/22 maxlen: 22
193.176.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:7c:58:bd:6f:9c:12:b7:f9:26:ba:52:4e:fb:16:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419b379a246412810e8a8052a62a39688ca34579
Validity
Not Before: Aug 9 09:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97e8d74b1b7603c553ce96873079e3fa0e079dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:7a:d0:4b:b8:97:1d:84:c9:54:f4:be:5c:
78:00:58:1e:23:8d:61:12:f9:6f:0a:dd:a5:b6:d2:
df:a6:ca:85:cd:69:09:88:87:9a:74:0d:ce:71:06:
e3:f1:54:c6:86:ad:d0:94:02:e5:75:6b:ed:73:93:
e7:22:69:e8:42:f1:4f:3e:ff:d0:17:7e:fb:64:ce:
3b:09:b5:9c:7a:41:e2:79:9d:5b:34:00:ab:0b:97:
94:bf:4b:7a:d8:66:bd:8f:48:3a:8d:51:3b:11:b5:
2b:d0:74:47:fd:bf:f8:bc:20:f2:2b:f5:9d:a8:58:
1b:f5:1e:b2:08:ca:76:78:1a:07:b0:9a:01:70:b6:
58:f3:88:55:9f:16:fe:d0:93:40:ba:87:8b:7f:4c:
a1:04:57:c8:e7:8e:88:e1:25:cb:31:7d:74:76:b0:
8a:a3:01:7b:b6:85:9d:cc:bd:4c:f4:33:8b:3a:0d:
1e:cd:82:33:d9:53:97:df:d9:a4:95:2f:7c:bb:23:
15:06:c3:69:6f:9c:38:6e:fc:98:7e:67:f0:66:9c:
5d:b2:77:ac:46:10:e0:df:cc:8e:b3:28:87:70:f7:
82:79:87:24:06:e2:2c:07:d6:9d:e3:22:ce:74:1c:
79:42:c5:8e:6f:5f:c6:8b:e0:4e:9b:d1:92:a2:6a:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E8:D7:4B:1B:76:03:C5:53:CE:96:87:30:79:E3:FA:0E:07:9D:C9
X509v3 Authority Key Identifier:
keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/l-jXSxt2A8VTzpaHMHnj-g4Hnck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.48.0/22
193.176.248.0/22
Signature Algorithm: sha256WithRSAEncryption
50:d6:64:bc:23:b7:7f:18:f1:0b:42:5e:c5:9f:ad:ea:f5:a5:
d0:8c:4b:81:f9:5d:88:9e:95:2b:59:83:3e:95:7a:f9:d9:98:
3e:ee:ae:c0:26:fa:84:e5:64:d6:d8:77:c1:6a:5b:13:94:b5:
c1:ee:e8:01:b7:ea:22:b4:f2:83:77:c3:4d:ee:df:cf:15:23:
a3:8a:5b:b7:e9:16:84:5c:f4:9f:b9:b1:4e:37:7a:46:f7:ee:
45:e7:74:12:7d:6a:04:da:3c:9d:7a:1f:03:89:e1:42:c0:56:
3b:92:4c:2b:e8:51:61:7b:ce:fc:cd:a6:10:01:96:c4:21:6a:
91:71:f8:2e:bd:5e:71:8d:cc:d7:63:2e:bb:b8:cd:b5:77:d5:
98:36:13:17:1a:94:c1:fa:17:e5:97:16:20:7d:2b:8d:5e:34:
c2:1f:22:3c:ff:a5:1d:40:2a:d7:07:3d:a2:5e:e4:5b:ff:ef:
2b:6d:6d:e4:1d:14:90:aa:93:32:39:aa:e4:b2:4a:e1:e3:20:
b0:4d:c3:56:5e:69:50:38:a9:82:33:fc:be:e9:f7:a2:74:5b:
3c:b7:a0:91:c0:3a:be:f7:8b:bc:69:d9:24:58:12:f6:f6:2c:
35:40:7c:9d:f0:8a:a9:8e:35:53:49:b6:a8:d9:e9:8b:29:c6:
e3:c3:74:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZE2fFi9b5wSt/kmulJO+xZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOWIzNzlhMjQ2NDEyODEwZThhODA1MmE2MmEzOTY4OGNh
MzQ1NzkwHhcNMjQwODA5MDkzMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2U4ZDc0YjFiNzYwM2M1NTNjZTk2ODczMDc5ZTNmYTBlMDc5ZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Z60Eu4lx2EyVT0vlx4AFgeI41h
EvlvCt2lttLfpsqFzWkJiIeadA3OcQbj8VTGhq3QlALldWvtc5PnImnoQvFPPv/Q
F377ZM47CbWcekHieZ1bNACrC5eUv0t62Ga9j0g6jVE7EbUr0HRH/b/4vCDyK/Wd
qFgb9R6yCMp2eBoHsJoBcLZY84hVnxb+0JNAuoeLf0yhBFfI546I4SXLMX10drCK
owF7toWdzL1M9DOLOg0ezYIz2VOX39mklS98uyMVBsNpb5w4bvyYfmfwZpxdsnes
RhDg38yOsyiHcPeCeYckBuIsB9ad4yLOdBx5QsWOb1/Gi+BOm9GSomoJQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJfo10sbdgPFU86WhzB54/oOB53JMB8GA1UdIwQY
MBaAFEGbN5okZBKBDoqAUqYqOWiMo0V5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4Nzgt
ZmNjODllY2U1OTA2LzEvbC1qWFN4dDJBOFZUenBhSE1IbmotZzRIbmNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4NzgtZmNjODllY2U1OTA2
LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+EwAwQC
wbD4MA0GCSqGSIb3DQEBCwUAA4IBAQBQ1mS8I7d/GPELQl7Fn63q9aXQjEuB+V2I
npUrWYM+lXr52Zg+7q7AJvqE5WTW2HfBalsTlLXB7ugBt+oitPKDd8NN7t/PFSOj
ilu36RaEXPSfubFON3pG9+5F53QSfWoE2jydeh8DieFCwFY7kkwr6FFhe878zaYQ
AZbEIWqRcfguvV5xjczXYy67uM21d9WYNhMXGpTB+hfllxYgfSuNXjTCHyI8/6Ud
QCrXBz2iXuRb/+8rbW3kHRSQqpMyOarkskrh4yCwTcNWXmlQOKmCM/y+6feidFs8
t6CRwDq+94u8adkkWBL29iw1QHyd8IqpjjVTSbao2emLKcbjw3Qb
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net