Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/5712JI-IKNH_bKSJehONalIoplo.roa
File: 5712JI-IKNH_bKSJehONalIoplo.roa (raw, json)
Hash identifier: 03C4YvDna835+PZKzuZ8h1DOzHVqEWMoShr7jnAgZXw=
Subject key identifier: E7:BD:76:24:8F:88:28:D1:FF:6C:A4:89:7A:13:8D:6A:52:28:A6:5A
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01907CA4E197654596BBFF087F415D587C1E
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/5712JI-IKNH_bKSJehONalIoplo.roa
Signing time: Thu 04 Jul 2024 07:28:18 +0000
ROA not before: Thu 04 Jul 2024 07:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214922
IP address blocks: 89.47.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:a4:e1:97:65:45:96:bb:ff:08:7f:41:5d:58:7c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jul 4 07:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7bd76248f8828d1ff6ca4897a138d6a5228a65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:10:5e:25:d5:36:99:d2:84:01:04:de:24:
33:dc:11:fd:50:db:8e:43:1c:8a:11:8f:1a:a1:fd:
44:d6:85:f6:f5:63:47:d3:f1:8e:48:ad:d1:3f:da:
29:a8:b2:26:22:2c:57:51:9e:56:9f:85:0d:a6:4b:
49:5a:9d:5f:b6:08:b9:24:67:29:92:2a:b3:65:f6:
cf:12:44:5d:72:88:01:56:80:f1:13:cf:5a:49:30:
05:50:26:9c:b4:cc:c2:d6:77:d0:90:f7:ea:01:ef:
1f:ca:9e:7a:35:27:0d:95:13:f7:5c:99:d1:93:a0:
29:04:8e:c7:f0:a2:73:9c:9b:c9:1c:20:c4:35:02:
bf:f2:31:89:b4:dd:75:fa:6d:9e:cb:ac:8b:6b:9a:
95:e1:24:53:30:e4:5d:59:9c:50:09:ff:93:48:ac:
07:67:7c:b4:13:41:08:21:a1:ca:96:c2:35:59:a2:
00:9e:8f:be:d4:8c:84:0a:29:19:a2:f1:9e:e4:73:
7f:f4:37:f1:8b:70:20:33:f5:13:ba:94:60:c0:90:
dc:20:29:60:27:f0:6f:a5:f1:0c:4e:c1:c6:6e:08:
70:06:71:05:48:b2:d6:20:ea:dd:65:b5:c5:b6:63:
8f:42:0a:e4:08:65:ab:1f:e2:93:ff:86:8a:7a:c3:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:76:24:8F:88:28:D1:FF:6C:A4:89:7A:13:8D:6A:52:28:A6:5A
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/5712JI-IKNH_bKSJehONalIoplo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:4a:db:75:b6:f1:68:8c:b9:df:af:77:9b:8d:57:99:fb:65:
f0:8d:a1:2b:0f:59:69:64:91:a8:65:3b:03:29:54:9d:a5:21:
4b:90:aa:75:8e:97:58:d8:bc:ec:c9:89:a6:32:77:a7:67:18:
94:c3:1e:eb:3e:21:23:bb:5f:fa:1f:a0:24:40:c7:ea:4a:08:
3c:68:57:8d:0a:78:75:3c:ae:53:cd:f0:fa:f3:62:81:35:d3:
46:2a:81:07:cf:d8:12:77:74:aa:7e:9a:6f:47:d2:09:0d:3c:
b0:b9:fb:7d:40:a4:59:23:cd:98:94:f7:5e:83:fc:d6:4e:1c:
ec:12:60:32:79:72:ce:b1:8d:74:15:c5:15:e3:a4:09:39:88:
b0:ff:6a:d2:9f:f5:22:a8:ba:a0:fe:b3:f6:e5:7f:03:99:30:
4f:6c:ca:42:25:09:3f:99:a2:69:ad:38:14:ae:97:6e:58:29:
02:e1:f0:2b:5b:cc:30:e7:24:56:5a:26:be:a1:e3:50:e7:d6:
2d:96:31:9b:84:a6:c6:36:62:b8:0d:eb:48:08:4f:f1:76:6e:
77:83:64:5c:0e:41:ec:c9:bb:3d:60:a7:2d:c6:b2:ad:58:0e:
df:eb:81:11:81:3b:03:f1:61:45:de:51:3a:67:8a:be:cd:3c:
52:e2:85:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZB8pOGXZUWWu/8If0FdWHweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjQwNzA0MDcyODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2JkNzYyNDhmODgyOGQxZmY2Y2E0ODk3YTEzOGQ2YTUyMjhhNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixoQXiXVNpnShAEE3iQz3BH9UNuO
QxyKEY8aof1E1oX29WNH0/GOSK3RP9opqLImIixXUZ5Wn4UNpktJWp1ftgi5JGcp
kiqzZfbPEkRdcogBVoDxE89aSTAFUCactMzC1nfQkPfqAe8fyp56NScNlRP3XJnR
k6ApBI7H8KJznJvJHCDENQK/8jGJtN11+m2ey6yLa5qV4SRTMORdWZxQCf+TSKwH
Z3y0E0EIIaHKlsI1WaIAno++1IyECikZovGe5HN/9Dfxi3AgM/UTupRgwJDcIClg
J/BvpfEMTsHGbghwBnEFSLLWIOrdZbXFtmOPQgrkCGWrH+KT/4aKesPEEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOe9diSPiCjR/2ykiXoTjWpSKKZaMB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEvNTcxMkpJLUlLTkhfYktTSmVoT05hbElvcGxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS/GMA0G
CSqGSIb3DQEBCwUAA4IBAQDDStt1tvFojLnfr3ebjVeZ+2XwjaErD1lpZJGoZTsD
KVSdpSFLkKp1jpdY2LzsyYmmMnenZxiUwx7rPiEju1/6H6AkQMfqSgg8aFeNCnh1
PK5TzfD682KBNdNGKoEHz9gSd3SqfppvR9IJDTywuft9QKRZI82YlPdeg/zWThzs
EmAyeXLOsY10FcUV46QJOYiw/2rSn/UiqLqg/rP25X8DmTBPbMpCJQk/maJprTgU
rpduWCkC4fArW8ww5yRWWia+oeNQ59YtljGbhKbGNmK4DetICE/xdm53g2RcDkHs
ybs9YKctxrKtWA7f64ERgTsD8WFF3lE6Z4q+zTxS4oU+
-----END CERTIFICATE-----
Generated at Sat Jul 27 04:49:32 2024 by rpki-client on console.sobornost.net