Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/_TdLXse_Guu2bwRXtLhgepo9aqM.roa
File: _TdLXse_Guu2bwRXtLhgepo9aqM.roa (raw, json)
Hash identifier: gribRwYjJW3ItUJw7E9vDrbQqEOTzbUTumJ9bqXKcW0=
Subject key identifier: FD:37:4B:5E:C7:BF:1A:EB:B6:6F:04:57:B4:B8:60:7A:9A:3D:6A:A3
Certificate issuer: /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial: 01931ADDE50292706DB8E39E6EB8DC15BA6F
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/_TdLXse_Guu2bwRXtLhgepo9aqM.roa
Signing time: Mon 11 Nov 2024 10:56:09 +0000
ROA not before: Mon 11 Nov 2024 10:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 194.147.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:dd:e5:02:92:70:6d:b8:e3:9e:6e:b8:dc:15:ba:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Validity
Not Before: Nov 11 10:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd374b5ec7bf1aebb66f0457b4b8607a9a3d6aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:c4:00:1e:cc:ea:47:82:31:79:dc:87:64:
a3:ee:e8:cf:19:fd:50:1e:30:78:27:d0:0b:45:27:
b9:3a:2e:86:10:3a:1e:a6:66:ea:4e:77:45:44:09:
29:d3:f8:60:07:7b:b2:2f:24:5c:1f:13:b0:aa:ba:
a4:4e:43:6e:b3:f6:ba:b9:1d:3b:0f:29:f3:c4:54:
4b:cb:08:d1:30:4e:29:dd:61:fc:72:ef:55:94:92:
a8:ed:1c:6a:ad:ea:92:22:f7:6b:fb:b3:86:b2:2e:
3c:13:94:1f:8b:bb:22:3d:19:b9:59:68:22:52:a4:
49:c6:3c:97:1b:14:6f:d0:3a:46:23:56:09:39:ac:
6a:e0:e4:0c:23:31:ec:58:71:98:d4:d8:e8:ad:7a:
d7:9a:5a:e9:b7:97:03:eb:75:de:8f:8e:f3:bb:b4:
72:90:a6:a7:87:2d:cd:a4:4d:90:05:8d:8c:d2:57:
fa:72:81:55:38:27:65:40:61:ee:d1:94:e5:35:61:
69:b6:c0:4a:2c:81:9a:45:0c:96:a8:ab:a6:fa:cb:
c7:03:0e:c1:2e:cc:b5:4a:07:a8:c7:8d:5d:66:83:
90:71:c2:42:76:bc:1e:48:a5:da:b5:cd:5d:e9:00:
48:4c:ef:1a:87:94:48:c1:1d:ab:c9:be:67:9e:be:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:4B:5E:C7:BF:1A:EB:B6:6F:04:57:B4:B8:60:7A:9A:3D:6A:A3
X509v3 Authority Key Identifier:
keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/_TdLXse_Guu2bwRXtLhgepo9aqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.171.0/24
Signature Algorithm: sha256WithRSAEncryption
45:05:25:8b:98:68:2b:9c:b5:e4:30:e4:f2:f4:a3:81:1f:42:
36:b5:05:96:7e:0c:35:7d:4a:e6:05:b7:4c:cb:64:59:86:86:
e5:c6:c0:a9:f7:04:46:96:bf:36:54:f1:43:8a:de:0e:48:2f:
00:29:ed:89:d2:c3:66:ab:15:ea:0c:cf:37:97:73:7b:56:f5:
71:68:d5:60:b4:d3:d6:c6:e7:60:75:35:36:8f:45:c0:5a:9d:
6c:41:50:20:b0:17:6d:ab:94:05:07:5e:b3:cb:0f:22:a3:1f:
79:e9:a0:dd:ed:f2:5a:fc:4e:ca:ba:c8:ca:ce:fe:90:79:d7:
9d:02:fd:12:23:0b:f8:1b:f8:c9:c4:d6:f7:0c:81:a7:a9:b5:
75:26:74:32:0b:e7:4c:99:9c:78:13:c3:20:94:32:e7:e2:f3:
98:57:91:cc:39:18:18:96:75:41:6a:a1:4c:13:de:e8:2d:6f:
53:e2:f5:ca:85:b1:f1:75:c1:3c:94:36:ea:bd:ce:db:94:cd:
e6:97:3b:d0:53:9c:45:01:ba:7a:dc:90:67:f3:ea:da:7b:8b:
91:7f:d1:0e:fb:5c:a3:2d:38:c8:4d:04:7f:ca:e3:f2:74:ac:
9d:63:90:41:74:f2:36:22:19:1f:8d:0d:55:11:5d:a6:d1:77:
b0:c9:84:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMa3eUCknBtuOOebrjcFbpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjgzODVkMDg1NzA4MGNmYzAxM2FhNTIxYmRlNmEzYTkz
ZTQ4MTIwHhcNMjQxMTExMTA1NjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDM3NGI1ZWM3YmYxYWViYjY2ZjA0NTdiNGI4NjA3YTlhM2Q2YWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28XEAB7M6keCMXnch2Sj7ujPGf1Q
HjB4J9ALRSe5Oi6GEDoepmbqTndFRAkp0/hgB3uyLyRcHxOwqrqkTkNus/a6uR07
DynzxFRLywjRME4p3WH8cu9VlJKo7RxqreqSIvdr+7OGsi48E5Qfi7siPRm5WWgi
UqRJxjyXGxRv0DpGI1YJOaxq4OQMIzHsWHGY1NjorXrXmlrpt5cD63Xej47zu7Ry
kKanhy3NpE2QBY2M0lf6coFVOCdlQGHu0ZTlNWFptsBKLIGaRQyWqKum+svHAw7B
Lsy1Sgeox41dZoOQccJCdrweSKXatc1d6QBITO8ah5RIwR2ryb5nnr5UQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP03S17Hvxrrtm8EV7S4YHqaPWqjMB8GA1UdIwQY
MBaAFKy4OF0IVwgM/AE6pSG95qOpPkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxnNFhRaFhDQXo4QVRxbEliM21vNmstU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYWE0NGQtM2JmMy00MjBiLWFlM2Ut
ZThhNmExNDQxOWQ5LzEvX1RkTFhzZV9HdXUyYndSWHRMaGdlcG85YXFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYWE0NGQtM2JmMy00MjBiLWFlM2UtZThhNmExNDQxOWQ5
LzEvckxnNFhRaFhDQXo4QVRxbEliM21vNmstU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpOrMA0G
CSqGSIb3DQEBCwUAA4IBAQBFBSWLmGgrnLXkMOTy9KOBH0I2tQWWfgw1fUrmBbdM
y2RZhoblxsCp9wRGlr82VPFDit4OSC8AKe2J0sNmqxXqDM83l3N7VvVxaNVgtNPW
xudgdTU2j0XAWp1sQVAgsBdtq5QFB16zyw8iox956aDd7fJa/E7KusjKzv6Qeded
Av0SIwv4G/jJxNb3DIGnqbV1JnQyC+dMmZx4E8MglDLn4vOYV5HMORgYlnVBaqFM
E97oLW9T4vXKhbHxdcE8lDbqvc7blM3mlzvQU5xFAbp63JBn8+rae4uRf9EO+1yj
LTjITQR/yuPydKydY5BBdPI2IhkfjQ1VEV2m0XewyYTb
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:38 2024 by rpki-client on console.sobornost.net