Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/y9_8hdtk8JHk3E4gtb9hnJH5oW4.roa
File: y9_8hdtk8JHk3E4gtb9hnJH5oW4.roa (raw, json)
Hash identifier: m7OSodYzds8xaBryG8nh2+DjudIPxy2MbBf1cCRtVNY=
Subject key identifier: CB:DF:FC:85:DB:64:F0:91:E4:DC:4E:20:B5:BF:61:9C:91:F9:A1:6E
Certificate issuer: /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Certificate serial: 019362B242CD3032B28E6EB32AE9AB49E72F
Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/y9_8hdtk8JHk3E4gtb9hnJH5oW4.roa
Signing time: Mon 25 Nov 2024 09:41:09 +0000
ROA not before: Mon 25 Nov 2024 09:41:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57721
IP address blocks: 185.87.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:b2:42:cd:30:32:b2:8e:6e:b3:2a:e9:ab:49:e7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Validity
Not Before: Nov 25 09:41:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbdffc85db64f091e4dc4e20b5bf619c91f9a16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:13:fe:65:0d:63:dd:f5:6a:bd:d1:c8:f8:
a3:c6:83:eb:e0:b7:e6:a3:1c:a1:1a:e9:a2:47:9b:
37:c8:45:95:7c:3f:42:f4:83:cb:92:57:0f:b4:80:
1c:22:9c:40:12:21:76:94:bb:7a:73:a3:cd:0f:0b:
36:9a:c6:be:be:f3:47:6d:6e:4d:91:14:d3:51:e9:
73:e1:9d:6a:ff:44:56:37:38:69:d3:08:ef:eb:61:
bd:b8:f2:cc:49:37:1a:34:54:2b:d9:c0:28:52:40:
5d:f7:35:d6:53:36:6f:25:c8:30:aa:e7:45:aa:5d:
78:9a:c4:91:17:c2:64:d2:82:9e:a5:fc:1d:6f:c9:
c9:b1:8f:72:27:a3:52:68:c8:b8:79:76:20:30:ea:
78:ac:bc:a1:a5:13:02:c6:1f:2d:94:1b:98:45:d3:
a3:6b:a0:36:8f:23:fd:94:f0:55:62:8d:cc:f0:a0:
ee:b9:0b:28:22:5d:92:7d:b8:b4:2e:a4:07:e4:7d:
ff:84:7e:63:b6:da:2f:a6:61:d0:c0:24:58:9c:67:
50:e4:40:7c:cf:22:c5:e6:52:4a:e1:6b:e5:4b:2c:
08:a7:af:52:b3:df:76:ff:45:2e:39:35:82:88:f1:
66:02:0e:bd:34:14:db:68:e2:25:0d:a9:fd:8f:82:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DF:FC:85:DB:64:F0:91:E4:DC:4E:20:B5:BF:61:9C:91:F9:A1:6E
X509v3 Authority Key Identifier:
keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/y9_8hdtk8JHk3E4gtb9hnJH5oW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.160.0/22
Signature Algorithm: sha256WithRSAEncryption
55:d6:02:ae:9d:38:b2:1f:14:65:3b:24:14:15:95:fb:06:fe:
c6:54:23:c3:70:f9:61:dc:15:f6:99:23:6e:45:da:d4:71:4f:
49:4b:38:68:5c:c3:d1:61:67:49:38:1e:09:8c:52:2d:28:6c:
3a:5a:57:08:cd:af:d5:07:b6:04:d9:76:f9:c8:bf:ae:33:f2:
50:30:2e:c0:ff:e8:9d:ab:c3:6f:b3:13:21:ac:0d:b4:6b:5f:
5e:68:77:53:e3:ed:16:ed:35:be:5b:77:c2:ae:8c:d0:34:f6:
77:b4:27:53:ec:d4:1b:ec:ce:a1:72:6d:e8:84:e7:cd:63:22:
85:b1:f5:c2:38:ec:ba:62:0d:c0:98:eb:88:0b:93:21:b0:29:
15:a6:c8:3d:fa:5d:43:6e:a6:3d:65:e1:25:05:2b:f8:1b:b6:
9a:16:51:ab:4e:03:88:dd:6a:0e:44:07:05:d4:c5:c1:01:52:
ca:c4:c5:78:2b:e5:62:f8:d4:a0:0a:85:f0:0e:55:86:56:58:
c4:bf:22:8f:46:2e:a4:d9:f2:ca:2d:8b:47:4d:98:6c:0b:59:
6e:e4:6e:01:58:c8:0a:00:28:2e:d5:ad:80:e7:7d:02:4a:df:
d7:7e:b3:89:58:f3:e3:8c:d3:39:41:1a:45:01:cc:3b:63:0b:
e4:ed:b8:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNiskLNMDKyjm6zKumrSecvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkM2Y0NDM5YzlkZDBiNjAwM2UwOTRkMzFhNDNlNTMwOWY0
ZmZlZjUwHhcNMjQxMTI1MDk0MTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmRmZmM4NWRiNjRmMDkxZTRkYzRlMjBiNWJmNjE5YzkxZjlhMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttwT/mUNY931ar3RyPijxoPr4Lfm
oxyhGumiR5s3yEWVfD9C9IPLklcPtIAcIpxAEiF2lLt6c6PNDws2msa+vvNHbW5N
kRTTUelz4Z1q/0RWNzhp0wjv62G9uPLMSTcaNFQr2cAoUkBd9zXWUzZvJcgwqudF
ql14msSRF8Jk0oKepfwdb8nJsY9yJ6NSaMi4eXYgMOp4rLyhpRMCxh8tlBuYRdOj
a6A2jyP9lPBVYo3M8KDuuQsoIl2Sfbi0LqQH5H3/hH5jttovpmHQwCRYnGdQ5EB8
zyLF5lJK4WvlSywIp69Ss992/0UuOTWCiPFmAg69NBTbaOIlDan9j4L+SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvf/IXbZPCR5NxOILW/YZyR+aFuMB8GA1UdIwQY
MBaAFG0/RDnJ3QtgA+CU0xpD5TCfT/71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNDdlNDEtNzFiOC00ZDAwLWE1YTct
NWQ5MWIzN2JkODJlLzEveTlfOGhkdGs4SkhrM0U0Z3RiOWhuSkg1b1c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNDdlNDEtNzFiOC00ZDAwLWE1YTctNWQ5MWIzN2JkODJl
LzEvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVegMA0G
CSqGSIb3DQEBCwUAA4IBAQBV1gKunTiyHxRlOyQUFZX7Bv7GVCPDcPlh3BX2mSNu
RdrUcU9JSzhoXMPRYWdJOB4JjFItKGw6WlcIza/VB7YE2Xb5yL+uM/JQMC7A/+id
q8NvsxMhrA20a19eaHdT4+0W7TW+W3fCrozQNPZ3tCdT7NQb7M6hcm3ohOfNYyKF
sfXCOOy6Yg3AmOuIC5MhsCkVpsg9+l1DbqY9ZeElBSv4G7aaFlGrTgOI3WoORAcF
1MXBAVLKxMV4K+Vi+NSgCoXwDlWGVljEvyKPRi6k2fLKLYtHTZhsC1lu5G4BWMgK
ACgu1a2A530CSt/XfrOJWPPjjNM5QRpFAcw7Ywvk7bhw
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:22 2024 by rpki-client on console.sobornost.net