Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/69412REl5FduPqALtKUFUF6lYU8.roa
File: 69412REl5FduPqALtKUFUF6lYU8.roa (raw, json)
Hash identifier: 6/ycL5l+XslrkGA93eDACiryFXTOUmthx1xi1UeZCAQ=
Subject key identifier: EB:DE:35:D9:11:25:E4:57:6E:3E:A0:0B:B4:A5:05:50:5E:A5:61:4F
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0193CE8FAC1A5257299F42816CF1E3916CCC
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/69412REl5FduPqALtKUFUF6lYU8.roa
Signing time: Mon 16 Dec 2024 08:22:22 +0000
ROA not before: Mon 16 Dec 2024 08:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 194.143.203.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
213.220.3.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
213.220.59.0/24 maxlen: 24
213.220.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:8f:ac:1a:52:57:29:9f:42:81:6c:f1:e3:91:6c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Dec 16 08:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebde35d91125e4576e3ea00bb4a505505ea5614f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:c1:12:de:80:70:9f:b9:5f:e7:8d:e9:19:
2f:cf:c5:a2:47:e9:33:d2:70:c2:b4:e8:cc:fd:72:
8e:c9:57:1b:35:e0:ba:8b:ec:d6:05:69:f9:f7:6c:
18:64:a8:21:e6:96:f8:4f:6f:ad:ef:34:1f:91:fd:
cd:8b:28:bf:96:47:50:ef:c9:8f:e8:77:f0:64:b3:
a5:6c:80:d6:67:d5:3b:02:78:2e:a2:ca:04:b3:4c:
63:54:94:7e:97:4b:3b:9d:40:9a:8f:64:3d:07:49:
ad:af:9c:b5:1e:08:01:14:43:23:3a:dd:af:1a:d6:
cd:2c:e8:8c:6e:23:cf:7a:9a:40:10:16:3f:c2:11:
14:8a:df:1b:0f:93:a8:a7:be:89:7d:13:bd:1c:83:
a7:95:de:6f:77:93:e3:a6:4e:63:cb:ff:af:f9:2b:
74:8c:8b:24:a6:97:18:83:e7:e3:6b:80:f9:5c:db:
b9:7e:17:13:35:79:42:a7:d9:98:09:a9:30:e5:0b:
12:6a:75:e9:f6:69:85:32:e2:33:1f:bc:76:32:bf:
ed:ad:cb:ed:7a:f7:d5:88:b3:51:18:c0:f5:88:f4:
7e:93:99:b0:3a:ff:8b:cf:75:27:ad:9f:b1:aa:a1:
1b:ff:53:9d:a6:ca:72:33:a1:92:00:1e:96:f9:18:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:35:D9:11:25:E4:57:6E:3E:A0:0B:B4:A5:05:50:5E:A5:61:4F
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/69412REl5FduPqALtKUFUF6lYU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.203.0/24
194.143.209.0/24
194.143.221.0/24
195.114.192.0/24
195.114.198.0/24
213.220.3.0/24
213.220.19.0/24
213.220.59.0-213.220.60.255
Signature Algorithm: sha256WithRSAEncryption
11:0a:ef:36:b9:10:98:ab:c9:0a:f7:7c:5c:7a:c3:8b:de:d6:
d3:30:47:48:f6:ff:6a:a2:57:fe:19:0d:87:39:68:d1:02:60:
8c:6a:9e:87:72:5b:b0:ec:90:ae:fa:6e:a7:47:3e:66:ad:90:
0f:b3:ab:9a:a5:5c:a7:a2:2f:ee:2c:f5:62:bb:19:81:d6:9b:
39:8b:52:37:6c:16:ef:b7:2f:03:14:e9:61:3f:b2:37:4f:ae:
f7:e9:a2:15:d7:15:bf:e0:db:5e:fc:15:27:5d:48:f2:7d:97:
02:3b:17:59:03:da:f1:d8:a1:1d:c6:f8:3c:1a:83:ee:49:0d:
ec:cd:d2:a6:e1:ce:cd:9e:50:2e:3e:2d:31:3e:2e:18:b7:07:
6e:c9:d0:91:a5:f4:41:80:16:64:78:34:d7:7d:85:81:8f:23:
ef:22:9d:05:75:8a:22:6a:28:06:9c:d0:8a:69:23:1a:45:23:
1c:69:3d:02:cd:6d:01:d9:84:68:8a:80:51:01:1b:92:b8:58:
cc:c5:de:ac:6d:36:65:6f:9c:f2:46:84:24:28:b8:76:94:cc:
74:54:d9:ce:03:fd:77:2c:27:af:53:82:e0:9d:19:1e:d7:9d:
c2:53:41:3a:2b:1d:78:19:dc:ab:a1:8f:4d:7b:f6:65:98:ce:
35:59:82:95
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZPOj6waUlcpn0KBbPHjkWzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjQxMjE2MDgyMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmRlMzVkOTExMjVlNDU3NmUzZWEwMGJiNGE1MDU1MDVlYTU2MTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqArBEt6AcJ+5X+eN6Rkvz8WiR+kz
0nDCtOjM/XKOyVcbNeC6i+zWBWn592wYZKgh5pb4T2+t7zQfkf3Niyi/lkdQ78mP
6HfwZLOlbIDWZ9U7AnguosoEs0xjVJR+l0s7nUCaj2Q9B0mtr5y1HggBFEMjOt2v
GtbNLOiMbiPPeppAEBY/whEUit8bD5Oop76JfRO9HIOnld5vd5Pjpk5jy/+v+St0
jIskppcYg+fja4D5XNu5fhcTNXlCp9mYCakw5QsSanXp9mmFMuIzH7x2Mr/trcvt
evfViLNRGMD1iPR+k5mwOv+Lz3UnrZ+xqqEb/1OdpspyM6GSAB6W+RhbiQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFOveNdkRJeRXbj6gC7SlBVBepWFPMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvNjk0MTJSRWw1RmR1UHFBTHRLVUZVRjZsWVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAwo/LAwQA
wo/RAwQAwo/dAwQAw3LAAwQAw3LGAwQA1dwDAwQA1dwTMAwDBADV3DsDBADV3Dww
DQYJKoZIhvcNAQELBQADggEBABEK7za5EJiryQr3fFx6w4ve1tMwR0j2/2qiV/4Z
DYc5aNECYIxqnodyW7DskK76bqdHPmatkA+zq5qlXKeiL+4s9WK7GYHWmzmLUjds
Fu+3LwMU6WE/sjdPrvfpohXXFb/g2178FSddSPJ9lwI7F1kD2vHYoR3G+Dwag+5J
DezN0qbhzs2eUC4+LTE+Lhi3B27J0JGl9EGAFmR4NNd9hYGPI+8inQV1iiJqKAac
0IppIxpFIxxpPQLNbQHZhGiKgFEBG5K4WMzF3qxtNmVvnPJGhCQouHaUzHRU2c4D
/XcsJ69TguCdGR7XncJTQTorHXgZ3Kuhj0179mWYzjVZgpU=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:21 2024 by rpki-client on console.sobornost.net