Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/anc83cog0VpGZyeV9wuwAJPUjk4.roa
File: anc83cog0VpGZyeV9wuwAJPUjk4.roa (raw, json)
Hash identifier: aiW7WNHYaoOLM9P0xyPjl/VY9eO7JubYLi62fjBNjaI=
Subject key identifier: 6A:77:3C:DD:CA:20:D1:5A:46:67:27:95:F7:0B:B0:00:93:D4:8E:4E
Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial: 01907768BA0B6BE28CC8CB0C8EA54C7C3840
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/anc83cog0VpGZyeV9wuwAJPUjk4.roa
Signing time: Wed 03 Jul 2024 07:04:30 +0000
ROA not before: Wed 03 Jul 2024 07:04:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24806
IP address blocks: 85.255.0.0/20 maxlen: 32
185.186.20.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:68:ba:0b:6b:e2:8c:c8:cb:0c:8e:a5:4c:7c:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
Validity
Not Before: Jul 3 07:04:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a773cddca20d15a46672795f70bb00093d48e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:e2:eb:09:5b:50:95:30:be:54:53:65:64:
d5:c4:fc:cd:76:b3:3c:51:e8:fe:6d:10:57:c2:56:
6b:29:48:b2:82:63:eb:ff:d3:f6:17:42:40:98:c9:
26:20:ca:5b:b0:f8:bf:9e:e5:a0:57:ac:49:db:17:
ea:73:c5:81:eb:fb:a7:56:c2:30:89:a3:c2:14:67:
99:e6:c8:89:e9:f0:2b:ae:dc:35:20:ad:3e:cb:e0:
c7:9f:af:21:dc:4e:3b:ee:8f:e4:1a:14:14:80:54:
dc:27:51:85:a9:3a:6a:99:80:44:8f:5d:cf:5d:44:
18:8e:2b:b2:23:37:3c:e0:a1:22:13:dc:e4:54:2e:
ad:ca:d5:65:17:02:03:39:ad:0e:15:f2:79:7a:7a:
4f:27:06:0f:1a:5b:cf:5e:cd:28:26:1a:44:c4:d6:
e3:34:9a:6b:a6:52:d8:14:d9:39:c6:ab:9d:82:75:
99:d4:9e:28:02:66:00:cf:2b:91:e9:a7:15:cf:e6:
c3:ec:30:19:b8:d0:31:89:88:46:c0:b5:93:0e:37:
a0:f9:ae:f1:d4:d0:4f:46:dc:2a:2d:93:61:33:98:
e0:56:4f:e4:cb:3e:51:30:0a:47:67:bc:68:34:93:
41:d6:ff:47:84:a0:c8:ed:02:9a:2b:46:82:d9:28:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:77:3C:DD:CA:20:D1:5A:46:67:27:95:F7:0B:B0:00:93:D4:8E:4E
X509v3 Authority Key Identifier:
keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/anc83cog0VpGZyeV9wuwAJPUjk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.0.0/20
185.186.20.0/22
Signature Algorithm: sha256WithRSAEncryption
72:76:98:f7:26:b5:b6:3c:93:e0:4c:6d:1d:52:5b:3e:49:8d:
fe:64:45:be:96:b5:7f:ed:75:54:bd:e7:61:32:6b:7b:2a:f2:
c3:36:e4:2c:d5:e3:7d:38:ea:8b:38:f7:76:5e:ce:d3:5a:fb:
e7:0b:d5:d4:ec:83:c0:0c:ca:0b:4e:46:b3:ea:4d:e9:ac:9c:
dd:fc:0c:43:ad:f2:bc:2d:8c:44:c6:aa:91:c0:f7:a7:d6:25:
6f:55:5e:0c:85:82:c1:05:f0:83:f3:e0:0a:77:d3:71:1e:cf:
b1:ae:14:bd:b8:b0:f6:4c:5f:c2:28:27:3a:b3:db:a3:4a:33:
3a:60:6f:d0:0d:52:ed:33:a4:7e:51:dc:5e:75:b6:73:cb:83:
80:ef:b8:15:2c:52:30:d5:0a:a2:ea:6a:e3:5a:d3:d0:d0:08:
c6:42:48:01:19:e1:f0:80:24:4f:80:c9:9f:e6:58:4c:9b:8f:
21:e4:1e:49:33:59:69:43:ec:b4:85:10:0b:68:a6:77:0c:3b:
b4:55:85:41:63:7f:5d:9e:12:08:d7:74:5a:ed:2b:92:53:f0:
2b:58:d4:b5:da:fa:fb:15:e4:eb:e6:ee:a2:0f:4c:31:8d:9f:
ee:36:a6:7d:71:62:cd:ee:a6:75:cb:ad:d0:a0:a7:a7:8a:d9:
b7:fa:96:6b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZB3aLoLa+KMyMsMjqVMfDhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Nzk0NmYwNDc0MmM2NjI3OWFjZDMyMjAwOWJlMTVlM2Q1
ODhhNWEwHhcNMjQwNzAzMDcwNDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTc3M2NkZGNhMjBkMTVhNDY2NzI3OTVmNzBiYjAwMDkzZDQ4ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzXi6wlbUJUwvlRTZWTVxPzNdrM8
Uej+bRBXwlZrKUiygmPr/9P2F0JAmMkmIMpbsPi/nuWgV6xJ2xfqc8WB6/unVsIw
iaPCFGeZ5siJ6fArrtw1IK0+y+DHn68h3E477o/kGhQUgFTcJ1GFqTpqmYBEj13P
XUQYjiuyIzc84KEiE9zkVC6tytVlFwIDOa0OFfJ5enpPJwYPGlvPXs0oJhpExNbj
NJprplLYFNk5xqudgnWZ1J4oAmYAzyuR6acVz+bD7DAZuNAxiYhGwLWTDjeg+a7x
1NBPRtwqLZNhM5jgVk/kyz5RMApHZ7xoNJNB1v9HhKDI7QKaK0aC2ShF2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGp3PN3KINFaRmcnlfcLsACT1I5OMB8GA1UdIwQY
MBaAFAd5RvBHQsZieazTIgCb4V49WIpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYt
YmUxNTE4MzlmMzY2LzEvYW5jODNjb2cwVnBHWnllVjl3dXdBSlBVams0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYtYmUxNTE4MzlmMzY2
LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEVf8AAwQC
uboUMA0GCSqGSIb3DQEBCwUAA4IBAQBydpj3JrW2PJPgTG0dUls+SY3+ZEW+lrV/
7XVUvedhMmt7KvLDNuQs1eN9OOqLOPd2Xs7TWvvnC9XU7IPADMoLTkaz6k3prJzd
/AxDrfK8LYxExqqRwPen1iVvVV4MhYLBBfCD8+AKd9NxHs+xrhS9uLD2TF/CKCc6
s9ujSjM6YG/QDVLtM6R+UdxedbZzy4OA77gVLFIw1Qqi6mrjWtPQ0AjGQkgBGeHw
gCRPgMmf5lhMm48h5B5JM1lpQ+y0hRALaKZ3DDu0VYVBY39dnhII13Ra7SuSU/Ar
WNS12vr7FeTr5u6iD0wxjZ/uNqZ9cWLN7qZ1y63QoKenitm3+pZr
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:23 2024 by rpki-client on console.sobornost.net