Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/umzG76T6EUtiw-rlYKFmliUtt8w.roa
File: umzG76T6EUtiw-rlYKFmliUtt8w.roa (raw, json)
Hash identifier: 72ie7EwbtH52R35l4gCfIl3LUijn7dlAeyvy/p2h60s=
Subject key identifier: BA:6C:C6:EF:A4:FA:11:4B:62:C3:EA:E5:60:A1:66:96:25:2D:B7:CC
Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial: 0193746AB39AFD338AC338EC6D776A4C8D3C
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/umzG76T6EUtiw-rlYKFmliUtt8w.roa
Signing time: Thu 28 Nov 2024 20:16:10 +0000
ROA not before: Thu 28 Nov 2024 20:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8368
IP address blocks: 92.118.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:6a:b3:9a:fd:33:8a:c3:38:ec:6d:77:6a:4c:8d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
Validity
Not Before: Nov 28 20:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba6cc6efa4fa114b62c3eae560a16696252db7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:df:e1:c2:c5:a3:74:84:dc:31:de:2e:60:
7a:cd:83:63:2a:ee:f9:67:bc:50:1b:71:ba:8c:e3:
fa:e1:73:61:83:64:75:bf:d3:40:60:54:ec:ed:a9:
64:c0:cb:d7:49:c4:db:36:17:e3:eb:5b:85:42:a7:
35:85:9e:b0:62:f3:7e:01:52:c6:5d:79:98:be:1c:
e7:91:52:d9:c8:a5:3a:88:4d:19:c3:ba:92:bb:79:
58:8c:8c:dd:e2:16:02:0e:fb:87:e0:13:67:4e:67:
04:6b:74:a9:18:eb:7b:f1:0e:ea:78:ba:39:57:a7:
b5:02:5c:9a:2f:f1:8f:5c:93:30:76:f7:55:25:01:
36:25:3c:ee:bc:a0:c3:be:2c:46:92:04:4c:75:28:
45:70:d3:09:5e:97:f6:e0:76:89:9b:cd:7c:1c:39:
f5:4a:b8:49:54:85:80:f2:2b:0b:0f:75:61:97:01:
e7:ad:58:ab:e4:62:fe:46:96:8f:93:bb:b7:fd:2c:
8c:1a:20:74:16:a2:97:62:2f:b2:04:31:b0:ea:a0:
f2:36:a0:6f:3d:bb:98:8b:56:89:ab:cd:65:39:00:
bc:2d:fe:19:74:f7:8d:b4:24:3c:22:48:1d:74:70:
c9:f9:fd:94:5e:38:c6:93:43:75:ce:df:ed:bf:ba:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6C:C6:EF:A4:FA:11:4B:62:C3:EA:E5:60:A1:66:96:25:2D:B7:CC
X509v3 Authority Key Identifier:
keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/umzG76T6EUtiw-rlYKFmliUtt8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.212.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:92:cb:c8:59:a7:b2:62:97:4d:2c:44:58:d0:00:7d:63:f9:
7e:8a:2c:1b:1c:73:35:cd:6d:85:f5:46:f9:1c:e2:e3:ba:30:
53:d4:12:a0:ab:50:81:8c:53:4a:91:16:90:01:d4:98:55:47:
50:93:5a:f7:be:a6:52:ba:16:38:2b:02:ee:63:d4:6c:f3:f8:
77:85:87:85:c9:09:ef:31:2f:fb:f4:1c:ae:e0:2e:34:7b:a0:
5c:e9:26:33:eb:78:bb:11:9a:f5:fc:de:22:ec:41:97:32:0f:
36:00:db:ca:ba:d2:83:e5:3e:10:72:ee:17:b7:dd:41:66:64:
bc:19:2c:2f:5e:fc:46:45:ad:29:eb:f5:f5:bd:12:84:5e:40:
d2:ac:01:9d:4e:a6:e8:59:f9:23:c0:ad:9a:a7:b1:de:cd:a9:
f6:73:5e:5e:91:69:c5:1e:ad:e4:af:fd:45:d6:ca:ec:59:68:
9d:41:dd:dd:6f:92:a3:f6:88:d9:73:ec:12:90:dd:3d:cf:36:
87:db:08:33:04:9c:76:8c:05:b3:d1:40:96:61:fa:e8:c4:67:
dd:e0:12:29:16:20:f9:8d:41:3f:96:c1:c1:c4:d2:35:d5:bf:
a2:17:3e:52:05:f5:f4:15:eb:06:75:60:c4:fb:f4:39:f5:c4:
f0:13:15:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN0arOa/TOKwzjsbXdqTI08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODQ3OWI4MjJiMzUzMmMxOWI5ZWUwMTAyZjk5YTg5ODUw
ZGYxMjQwHhcNMjQxMTI4MjAxNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTZjYzZlZmE0ZmExMTRiNjJjM2VhZTU2MGExNjY5NjI1MmRiN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGTf4cLFo3SE3DHeLmB6zYNjKu75
Z7xQG3G6jOP64XNhg2R1v9NAYFTs7alkwMvXScTbNhfj61uFQqc1hZ6wYvN+AVLG
XXmYvhznkVLZyKU6iE0Zw7qSu3lYjIzd4hYCDvuH4BNnTmcEa3SpGOt78Q7qeLo5
V6e1AlyaL/GPXJMwdvdVJQE2JTzuvKDDvixGkgRMdShFcNMJXpf24HaJm818HDn1
SrhJVIWA8isLD3VhlwHnrVir5GL+RpaPk7u3/SyMGiB0FqKXYi+yBDGw6qDyNqBv
PbuYi1aJq81lOQC8Lf4ZdPeNtCQ8IkgddHDJ+f2UXjjGk0N1zt/tv7p7owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLpsxu+k+hFLYsPq5WChZpYlLbfMMB8GA1UdIwQY
MBaAFFWEebgis1MsGbnuAQL5momFDfEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAt
MGI1OTFmM2ExYmYwLzEvdW16Rzc2VDZFVXRpdy1ybFlLRm1saVV0dDh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAtMGI1OTFmM2ExYmYw
LzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXHbUMA0G
CSqGSIb3DQEBCwUAA4IBAQCfksvIWaeyYpdNLERY0AB9Y/l+iiwbHHM1zW2F9Ub5
HOLjujBT1BKgq1CBjFNKkRaQAdSYVUdQk1r3vqZSuhY4KwLuY9Rs8/h3hYeFyQnv
MS/79Byu4C40e6Bc6SYz63i7EZr1/N4i7EGXMg82ANvKutKD5T4Qcu4Xt91BZmS8
GSwvXvxGRa0p6/X1vRKEXkDSrAGdTqboWfkjwK2ap7Hezan2c15ekWnFHq3kr/1F
1srsWWidQd3db5Kj9ojZc+wSkN09zzaH2wgzBJx2jAWz0UCWYfroxGfd4BIpFiD5
jUE/lsHBxNI11b+iFz5SBfX0FesGdWDE+/Q59cTwExUo
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:22 2024 by rpki-client on console.sobornost.net