Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/Xa4qw66qlb4zh62ns6OtU7FAFYc.roa
File: Xa4qw66qlb4zh62ns6OtU7FAFYc.roa (raw, json)
Hash identifier: SRS6YAt8eWWXmUy8QHAZ0OPxC35LnbkVgEosNhxUgIA=
Subject key identifier: 5D:AE:2A:C3:AE:AA:95:BE:33:87:AD:A7:B3:A3:AD:53:B1:40:15:87
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0193F99828C9C99226CE700B99C8F347DAA9
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/Xa4qw66qlb4zh62ns6OtU7FAFYc.roa
Signing time: Tue 24 Dec 2024 16:55:18 +0000
ROA not before: Tue 24 Dec 2024 16:55:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 45.88.0.0/24 maxlen: 24
45.148.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:98:28:c9:c9:92:26:ce:70:0b:99:c8:f3:47:da:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Dec 24 16:55:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dae2ac3aeaa95be3387ada7b3a3ad53b1401587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:dd:ca:26:ef:c8:aa:90:8a:54:4c:e3:b9:
35:54:a5:fc:4e:d9:a7:f3:df:14:d4:00:6a:f9:03:
3e:87:6d:94:92:d1:7e:31:b3:53:27:f0:be:87:b8:
e7:dc:ad:93:c1:dd:63:87:a1:ad:25:45:e9:8a:b2:
79:95:d7:ff:b9:e8:f6:15:82:9f:55:ce:14:a3:4d:
32:48:d9:d2:80:87:55:a8:9e:93:67:01:c2:47:c4:
2e:8a:d2:2c:ca:49:bd:f1:a4:87:89:08:f3:9f:ef:
d4:73:3e:58:59:67:c9:31:70:58:05:a5:08:9f:14:
5c:07:e3:8a:22:5c:9e:07:6e:76:a1:77:a2:6b:5f:
a0:76:4b:64:0f:4a:1c:cb:6c:f6:f6:98:7f:24:5d:
eb:53:c3:80:a1:d0:c5:f9:3f:27:3e:56:5a:64:66:
0c:d8:0e:be:a2:f7:f6:7c:8e:5b:53:47:15:b4:cd:
e3:f6:f7:49:e9:fa:52:44:d2:b6:38:62:e9:5f:dc:
01:91:a5:14:fc:43:0a:79:cd:75:6b:01:70:12:a2:
01:54:6c:25:e2:a9:2a:9b:6e:c0:e9:a0:27:de:ee:
9b:b8:c4:f9:bb:19:29:95:c9:be:a0:94:4c:93:08:
5d:0d:6f:8a:5b:8f:75:a4:f1:b3:1f:5f:a5:b3:67:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AE:2A:C3:AE:AA:95:BE:33:87:AD:A7:B3:A3:AD:53:B1:40:15:87
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/Xa4qw66qlb4zh62ns6OtU7FAFYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.0.0/24
45.148.146.0/24
Signature Algorithm: sha256WithRSAEncryption
18:df:61:d3:8c:a7:a4:60:d8:4b:72:ff:4f:72:3c:3a:94:4e:
08:b9:88:7d:50:6f:b3:6c:80:da:de:b6:17:cf:f7:39:87:94:
b9:74:d0:af:13:82:f8:3a:8a:c1:5e:2e:20:02:62:06:a0:14:
21:b7:de:fe:dc:44:af:a7:ef:5a:6c:c5:2b:d9:e5:f2:a1:29:
97:c0:96:67:f3:64:55:fa:99:5a:19:f3:d6:56:50:3f:2b:d3:
22:c5:82:5b:97:ab:c7:1c:21:be:4d:c9:4f:bf:ba:89:f2:82:
5c:cf:fb:b7:b5:d9:11:fa:ef:f3:2b:b7:c5:ff:fb:46:d8:22:
db:e0:d5:63:83:c1:f0:26:b7:f5:7d:98:b4:7d:10:f2:6d:f0:
20:2d:61:c5:83:23:7e:ce:a0:10:58:4d:e3:10:b5:46:93:a9:
1b:9f:93:e3:9f:f4:22:a6:21:5c:d6:68:c3:3f:72:86:71:48:
55:25:cd:66:d0:3d:94:c8:0e:55:d8:09:9e:8b:25:48:12:7e:
1e:47:b5:3c:29:d1:5d:06:fa:7e:fd:b0:52:c4:ec:5f:13:06:
82:86:d8:1e:f5:44:1d:c3:30:03:9f:e0:af:fc:88:47:33:b8:
b5:c2:33:49:e8:98:ef:ab:cf:56:b3:85:61:27:ae:64:a6:47:
34:f6:75:ca
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZP5mCjJyZImznALmcjzR9qpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy
ODVkZTcwHhcNMjQxMjI0MTY1NTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGFlMmFjM2FlYWE5NWJlMzM4N2FkYTdiM2EzYWQ1M2IxNDAxNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4zdyibvyKqQilRM47k1VKX8Ttmn
898U1ABq+QM+h22UktF+MbNTJ/C+h7jn3K2Twd1jh6GtJUXpirJ5ldf/uej2FYKf
Vc4Uo00ySNnSgIdVqJ6TZwHCR8QuitIsykm98aSHiQjzn+/Ucz5YWWfJMXBYBaUI
nxRcB+OKIlyeB252oXeia1+gdktkD0ocy2z29ph/JF3rU8OAodDF+T8nPlZaZGYM
2A6+ovf2fI5bU0cVtM3j9vdJ6fpSRNK2OGLpX9wBkaUU/EMKec11awFwEqIBVGwl
4qkqm27A6aAn3u6buMT5uxkplcm+oJRMkwhdDW+KW491pPGzH1+ls2cTYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF2uKsOuqpW+M4etp7OjrVOxQBWHMB8GA1UdIwQY
MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt
NDc3MjMxMTkxYTM1LzEvWGE0cXc2NnFsYjR6aDYybnM2T3RVN0ZBRlljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1
LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVgAAwQA
LZSSMA0GCSqGSIb3DQEBCwUAA4IBAQAY32HTjKekYNhLcv9Pcjw6lE4IuYh9UG+z
bIDa3rYXz/c5h5S5dNCvE4L4OorBXi4gAmIGoBQht97+3ESvp+9abMUr2eXyoSmX
wJZn82RV+plaGfPWVlA/K9MixYJbl6vHHCG+TclPv7qJ8oJcz/u3tdkR+u/zK7fF
//tG2CLb4NVjg8HwJrf1fZi0fRDybfAgLWHFgyN+zqAQWE3jELVGk6kbn5Pjn/Qi
piFc1mjDP3KGcUhVJc1m0D2UyA5V2AmeiyVIEn4eR7U8KdFdBvp+/bBSxOxfEwaC
htge9UQdwzADn+Cv/IhHM7i1wjNJ6Jjvq89Ws4VhJ65kpkc09nXK
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:28 2024 by rpki-client on console.sobornost.net