Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vjum5_azs82ChOuYx5efNtb72dw.roa
File: Vjum5_azs82ChOuYx5efNtb72dw.roa (raw, json)
Hash identifier: HkcU+vq9vFHTa22cupcqPL1+HS+aMoV0S7JdvkzQ54c=
Subject key identifier: 56:3B:A6:E7:F6:B3:B3:CD:82:84:EB:98:C7:97:9F:36:D6:FB:D9:DC
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192D900BCF4E72F999EBC185B151DDE893A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vjum5_azs82ChOuYx5efNtb72dw.roa
Signing time: Tue 29 Oct 2024 15:59:17 +0000
ROA not before: Tue 29 Oct 2024 15:59:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 77.111.107.0/24 maxlen: 24
85.208.9.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:00:bc:f4:e7:2f:99:9e:bc:18:5b:15:1d:de:89:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 29 15:59:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=563ba6e7f6b3b3cd8284eb98c7979f36d6fbd9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:c7:1b:e2:86:e8:50:92:c4:fb:f5:44:23:
96:81:de:cf:f4:99:fb:fa:12:e1:71:25:19:95:ed:
43:60:8e:ec:de:b4:78:9c:13:4f:20:7e:7a:78:fc:
6b:cf:a0:df:07:17:ee:7d:dd:e8:e3:f4:6d:50:69:
f3:fd:bd:2e:29:9e:83:d0:87:d7:55:c2:59:de:98:
f9:0b:54:88:5a:df:db:6c:d7:fa:f6:f2:f6:bd:ae:
8f:fe:33:66:9b:76:05:15:da:86:50:af:32:87:27:
a9:6e:e0:53:a8:f1:c7:0d:c7:48:c4:24:29:50:2c:
47:b1:86:25:a3:68:d7:5a:e5:f0:25:70:c2:94:c1:
7d:1a:a2:85:c4:c5:fe:99:6d:43:4a:3f:98:48:f6:
68:06:9f:08:82:44:99:72:1e:cb:ff:cc:c6:9b:3a:
23:e2:56:62:23:b6:e6:82:09:bd:88:8a:52:ee:72:
05:7c:8b:80:7c:a3:a2:4b:fd:82:d4:80:21:00:56:
c5:e1:ce:51:29:b0:1d:13:38:ed:62:75:06:b3:42:
98:db:b8:0b:1b:31:e0:8e:bc:b1:d4:9d:19:69:91:
6e:e3:f3:f0:b0:1d:af:36:0f:ae:2b:e7:21:d7:da:
2f:fc:5c:7c:7d:60:79:d4:40:28:20:8f:e1:61:d2:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3B:A6:E7:F6:B3:B3:CD:82:84:EB:98:C7:97:9F:36:D6:FB:D9:DC
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vjum5_azs82ChOuYx5efNtb72dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.107.0/24
85.208.9.0/24
94.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c8:5c:b7:d0:f8:15:8d:a8:a3:48:f2:a8:7c:fa:f7:a1:be:
ce:c6:61:6d:34:09:ed:40:88:c0:18:2f:95:77:6a:57:96:80:
05:04:70:5d:4d:4d:9a:d0:fc:46:1b:16:9f:7f:13:50:a6:26:
12:41:6b:67:1b:c3:44:a8:38:9b:34:5a:f3:06:82:aa:e1:b3:
d3:a1:3b:29:7c:4e:74:84:e8:68:5b:e2:92:4e:30:05:ce:85:
a7:f4:00:10:87:51:3f:a3:7c:10:4c:b8:b3:82:0a:a7:7f:7a:
24:10:a2:fa:31:59:41:f8:8e:06:2c:e8:c1:5f:77:96:9c:e9:
bb:10:2a:b2:7d:9f:1b:cc:a4:d2:4e:38:f5:94:bb:b4:ef:44:
b3:fb:a9:8b:00:0b:0a:c9:fb:b5:67:00:97:25:03:e1:21:4f:
33:a6:03:b9:16:81:a8:2f:fe:1c:12:6d:33:9b:d2:5d:76:07:
62:6f:1c:b7:57:a0:91:3d:5f:c4:f2:9c:02:ff:34:93:d9:46:
48:ae:50:57:70:f4:13:b6:3a:6b:a5:77:2e:32:92:91:72:f5:
b8:35:a7:f5:37:a8:cf:f1:dc:66:b7:a6:93:a7:e2:2f:0a:d6:
12:bf:0c:2e:c9:0f:39:32:0a:da:a1:f1:78:38:c3:66:d1:a9:
e2:a9:af:cb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZLZALz05y+ZnrwYWxUd3ok6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQxMDI5MTU1OTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjNiYTZlN2Y2YjNiM2NkODI4NGViOThjNzk3OWYzNmQ2ZmJkOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzETHG+KG6FCSxPv1RCOWgd7P9Jn7
+hLhcSUZle1DYI7s3rR4nBNPIH56ePxrz6DfBxfufd3o4/RtUGnz/b0uKZ6D0IfX
VcJZ3pj5C1SIWt/bbNf69vL2va6P/jNmm3YFFdqGUK8yhyepbuBTqPHHDcdIxCQp
UCxHsYYlo2jXWuXwJXDClMF9GqKFxMX+mW1DSj+YSPZoBp8IgkSZch7L/8zGmzoj
4lZiI7bmggm9iIpS7nIFfIuAfKOiS/2C1IAhAFbF4c5RKbAdEzjtYnUGs0KY27gL
GzHgjryx1J0ZaZFu4/PwsB2vNg+uK+ch19ov/Fx8fWB51EAoII/hYdJeNwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFY7puf2s7PNgoTrmMeXnzbW+9ncMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvVmp1bTVfYXpzODJDaE91WXg1ZWZOdGI3MmR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATW9rAwQA
VdAJAwQAXuXfMA0GCSqGSIb3DQEBCwUAA4IBAQBCyFy30PgVjaijSPKofPr3ob7O
xmFtNAntQIjAGC+Vd2pXloAFBHBdTU2a0PxGGxaffxNQpiYSQWtnG8NEqDibNFrz
BoKq4bPToTspfE50hOhoW+KSTjAFzoWn9AAQh1E/o3wQTLizggqnf3okEKL6MVlB
+I4GLOjBX3eWnOm7ECqyfZ8bzKTSTjj1lLu070Sz+6mLAAsKyfu1ZwCXJQPhIU8z
pgO5FoGoL/4cEm0zm9Jddgdibxy3V6CRPV/E8pwC/zST2UZIrlBXcPQTtjprpXcu
MpKRcvW4Naf1N6jP8dxmt6aTp+IvCtYSvwwuyQ85MgraofF4OMNm0aniqa/L
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:21:55 2024 by rpki-client on console.sobornost.net