Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6JOeFTU8vG2RVk7C0PTK1jHe75U.roa
File: 6JOeFTU8vG2RVk7C0PTK1jHe75U.roa (raw, json)
Hash identifier: me2hMgG7xW/uz47PFHJNnYr6dBSMXNhPqaglcTJ0ah0=
Subject key identifier: E8:93:9E:15:35:3C:BC:6D:91:56:4E:C2:D0:F4:CA:D6:31:DE:EF:95
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019221E379A011A9909E61FFC126172FDCDF
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6JOeFTU8vG2RVk7C0PTK1jHe75U.roa
Signing time: Tue 24 Sep 2024 02:36:48 +0000
ROA not before: Tue 24 Sep 2024 02:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24810
IP address blocks: 81.22.200.0/21 maxlen: 21
81.22.200.0/24 maxlen: 24
81.22.201.0/24 maxlen: 24
81.22.202.0/24 maxlen: 24
81.22.203.0/24 maxlen: 24
81.22.204.0/24 maxlen: 24
81.22.205.0/24 maxlen: 24
81.22.206.0/24 maxlen: 24
81.22.207.0/24 maxlen: 24
81.22.208.0/24 maxlen: 24
81.22.209.0/24 maxlen: 24
81.22.210.0/24 maxlen: 24
81.22.211.0/24 maxlen: 24
81.22.212.0/24 maxlen: 24
81.22.213.0/24 maxlen: 24
81.22.214.0/24 maxlen: 24
81.22.215.0/24 maxlen: 24
81.23.144.0/24 maxlen: 24
81.23.145.0/24 maxlen: 24
81.23.147.0/24 maxlen: 24
81.23.148.0/24 maxlen: 24
81.23.149.0/24 maxlen: 24
81.23.156.0/24 maxlen: 24
81.23.158.0/24 maxlen: 24
81.23.159.0/24 maxlen: 24
87.117.160.0/24 maxlen: 24
87.117.161.0/24 maxlen: 24
87.117.162.0/24 maxlen: 24
87.117.164.0/24 maxlen: 24
87.117.165.0/24 maxlen: 24
87.117.166.0/24 maxlen: 24
87.117.167.0/24 maxlen: 24
87.117.168.0/24 maxlen: 24
87.117.170.0/24 maxlen: 24
87.117.171.0/24 maxlen: 24
87.117.177.0/24 maxlen: 24
87.117.183.0/24 maxlen: 24
87.117.184.0/24 maxlen: 24
87.117.188.0/24 maxlen: 24
87.117.190.0/24 maxlen: 24
89.248.112.0/24 maxlen: 24
89.248.122.0/24 maxlen: 24
89.248.123.0/24 maxlen: 24
89.248.124.0/24 maxlen: 24
178.20.128.0/21 maxlen: 21
178.20.128.0/24 maxlen: 24
178.20.129.0/24 maxlen: 24
178.20.131.0/24 maxlen: 24
178.20.134.0/24 maxlen: 24
178.20.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:21:e3:79:a0:11:a9:90:9e:61:ff:c1:26:17:2f:dc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Sep 24 02:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8939e15353cbc6d91564ec2d0f4cad631deef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:b7:1c:22:86:99:21:38:64:82:b2:2b:ad:b6:
34:c9:aa:4e:42:b9:fb:f6:46:34:56:14:5a:17:6e:
80:1e:2b:0e:78:86:2f:05:da:23:05:11:ed:cc:e4:
79:31:d7:48:fc:84:dc:a1:b0:7e:71:da:80:1f:0b:
72:69:c9:f8:91:cf:bb:9d:b4:e3:cb:61:d5:88:76:
05:1e:20:8a:a2:f0:c7:00:e6:78:f6:b4:2b:a3:9c:
1f:41:0c:01:25:7e:1a:72:5c:84:ee:c5:6d:f2:f7:
11:5b:56:25:c7:18:22:9b:bf:47:e9:3e:6e:cd:7c:
58:6c:e3:4c:84:87:fd:5f:13:0b:dd:f7:38:f8:c6:
be:e3:d8:60:e6:e8:8a:28:59:6b:a8:a6:d9:06:50:
a4:01:26:9c:b5:68:19:b0:fc:87:18:3b:a1:e6:55:
db:3a:0b:26:2b:8a:c7:d5:84:8f:3b:7d:25:92:96:
51:07:02:af:28:9d:18:77:56:be:62:9c:a4:b8:56:
01:79:68:85:c3:35:2e:f7:1c:6b:3c:3e:58:c2:76:
ea:31:17:1c:1c:9e:1b:f0:79:3f:64:a4:07:99:d9:
03:c2:9f:9b:39:cf:74:bb:83:57:a4:54:c1:cd:97:
ab:97:b3:78:ea:9a:64:19:5f:8f:9b:eb:73:11:ae:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:93:9E:15:35:3C:BC:6D:91:56:4E:C2:D0:F4:CA:D6:31:DE:EF:95
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6JOeFTU8vG2RVk7C0PTK1jHe75U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.200.0-81.22.215.255
81.23.144.0/23
81.23.147.0-81.23.149.255
81.23.156.0/24
81.23.158.0/23
87.117.160.0-87.117.162.255
87.117.164.0-87.117.168.255
87.117.170.0/23
87.117.177.0/24
87.117.183.0-87.117.184.255
87.117.188.0/24
87.117.190.0/24
89.248.112.0/24
89.248.122.0-89.248.124.255
178.20.128.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:fd:ec:26:f3:b2:d3:3e:c2:ee:53:b9:28:7d:80:d5:1f:75:
ce:a0:97:ea:87:72:d2:ba:ee:ec:52:43:0d:0d:95:73:d7:86:
f5:9e:dc:88:f1:d1:eb:5c:d5:af:7f:cb:46:ad:8b:e7:09:ae:
e6:54:f2:3d:6a:ff:83:d9:96:8f:e4:90:9d:ee:49:23:99:37:
fc:42:dc:17:96:d0:a5:d7:d6:80:e8:0a:39:13:19:8f:e1:97:
53:56:a9:29:a3:7b:d9:3e:27:eb:a1:87:bf:c8:f0:d6:fe:56:
84:3b:94:0f:02:1b:3c:7b:56:77:4a:33:64:e0:76:44:1d:20:
a7:dc:b2:02:3b:a4:a1:99:69:ef:72:22:65:1c:17:48:2f:e9:
97:de:1f:07:3e:b7:f3:25:b5:fa:05:04:b7:6f:b8:77:af:41:
64:2b:90:8d:ab:88:20:40:82:f0:b7:ec:79:3f:47:82:ea:1e:
1b:34:3f:23:91:b9:1d:82:8a:e6:10:68:d3:79:b1:d0:34:71:
17:00:b7:a6:d9:e9:82:ac:15:6a:0b:95:e5:2d:f5:3d:67:d0:
4d:fb:b7:c7:4f:bf:ed:3d:c0:4c:a6:a1:7f:54:31:cd:8f:65:
86:40:e7:a2:e1:2c:8b:d0:43:fb:a3:a4:1f:78:93:b3:af:15:
b6:2c:1b:62
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZIh43mgEamQnmH/wSYXL9zfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwOTI0MDIzNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODkzOWUxNTM1M2NiYzZkOTE1NjRlYzJkMGY0Y2FkNjMxZGVlZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bccIoaZIThkgrIrrbY0yapOQrn7
9kY0VhRaF26AHisOeIYvBdojBRHtzOR5MddI/ITcobB+cdqAHwtyacn4kc+7nbTj
y2HViHYFHiCKovDHAOZ49rQro5wfQQwBJX4aclyE7sVt8vcRW1Ylxxgim79H6T5u
zXxYbONMhIf9XxML3fc4+Ma+49hg5uiKKFlrqKbZBlCkASactWgZsPyHGDuh5lXb
OgsmK4rH1YSPO30lkpZRBwKvKJ0Yd1a+YpykuFYBeWiFwzUu9xxrPD5YwnbqMRcc
HJ4b8Hk/ZKQHmdkDwp+bOc90u4NXpFTBzZerl7N46ppkGV+Pm+tzEa72NQIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFOiTnhU1PLxtkVZOwtD0ytYx3u+VMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvNkpPZUZUVTh2RzJSVms3QzBQVEsxakhlNzVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYowDAME
A1EWyAMEA1EW0AMEAVEXkDAMAwQAUReTAwQBUReUAwQAURecAwQBUReeMAwDBAVX
daADBABXdaIwDAMEAld1pAMEAFd1qAMEAVd1qgMEAFd1sTAMAwQAV3W3AwQAV3W4
AwQAV3W8AwQAV3W+AwQAWfhwMAwDBAFZ+HoDBABZ+HwDBAOyFIAwDQYJKoZIhvcN
AQELBQADggEBAG797CbzstM+wu5TuSh9gNUfdc6gl+qHctK67uxSQw0NlXPXhvWe
3Ijx0etc1a9/y0ati+cJruZU8j1q/4PZlo/kkJ3uSSOZN/xC3BeW0KXX1oDoCjkT
GY/hl1NWqSmje9k+J+uhh7/I8Nb+VoQ7lA8CGzx7VndKM2TgdkQdIKfcsgI7pKGZ
ae9yImUcF0gv6ZfeHwc+t/MltfoFBLdvuHevQWQrkI2riCBAgvC37Hk/R4LqHhs0
PyORuR2CiuYQaNN5sdA0cRcAt6bZ6YKsFWoLleUt9T1n0E37t8dPv+09wEymoX9U
Mc2PZYZA56LhLIvQQ/ujpB94k7OvFbYsG2I=
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:23:06 2024 by rpki-client on console.sobornost.net