Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/8sH_bJhueC7rN3Zb6NZjIiqSW-Q.roa
File: 8sH_bJhueC7rN3Zb6NZjIiqSW-Q.roa (raw, json)
Hash identifier: xKYmPTzBTc3R1n8EDH9JZp0bGyvS/5ybUfLwPsVchys=
Subject key identifier: F2:C1:FF:6C:98:6E:78:2E:EB:37:76:5B:E8:D6:63:22:2A:92:5B:E4
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 018CC56EEEF2483B5A046842AFA1AEDFE1AF
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/8sH_bJhueC7rN3Zb6NZjIiqSW-Q.roa
Signing time: Mon 01 Jan 2024 14:30:30 +0000
ROA not before: Mon 01 Jan 2024 14:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61090
IP address blocks: 185.152.15.0/24 maxlen: 24
185.152.12.0/24 maxlen: 24
185.152.13.0/24 maxlen: 24
185.152.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ee:f2:48:3b:5a:04:68:42:af:a1:ae:df:e1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Jan 1 14:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c1ff6c986e782eeb37765be8d663222a925be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:b7:86:1f:59:2f:8b:7c:2c:74:ff:c4:cc:
15:6c:23:86:7b:80:ec:cd:ef:6b:f4:d5:2d:cd:13:
4d:ec:a8:f2:5e:be:61:90:d1:31:61:40:3e:1d:9b:
73:ac:2c:a1:82:20:27:0e:40:56:7d:a8:30:f3:93:
eb:75:16:88:26:ce:5b:37:f8:9d:24:cb:e3:88:1f:
f5:94:0a:ae:ac:49:f2:fc:33:b4:1d:ba:e5:ca:6b:
73:b1:19:e4:17:6f:74:b5:ac:eb:bd:55:8d:c0:a6:
32:f5:c5:8c:8a:83:25:98:4e:69:4d:68:19:e3:2e:
a6:6f:0f:29:bb:78:27:6a:92:65:bf:7c:9e:e6:59:
d4:fa:3a:89:0d:d3:ad:00:eb:e9:4f:e0:69:2a:77:
77:5c:95:00:21:24:d1:60:ce:4e:bd:c9:a4:40:04:
c7:f2:4b:4c:1b:8e:25:d8:ee:0b:c1:90:23:cf:9c:
37:6e:d2:1e:4f:3c:7f:c3:3e:e2:20:ff:f4:52:2b:
01:35:4f:c4:e2:5f:9e:93:3e:42:d5:a7:ee:73:ec:
ce:2d:d8:95:97:0f:fd:ec:5f:e0:09:41:c6:84:74:
8f:0b:9f:f5:79:bb:2c:b7:7b:ee:cc:3a:90:50:bb:
58:86:57:c5:1e:6c:b5:c5:af:66:79:f1:8b:3b:d7:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C1:FF:6C:98:6E:78:2E:EB:37:76:5B:E8:D6:63:22:2A:92:5B:E4
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/8sH_bJhueC7rN3Zb6NZjIiqSW-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:2c:bb:1f:b0:9d:83:25:f3:79:86:d7:72:aa:b3:f6:20:c3:
27:b8:7a:7e:fe:de:36:15:d5:e0:af:05:4e:ee:c3:e1:7d:71:
24:9b:17:45:07:db:27:a7:55:ab:ca:25:f7:71:96:79:8d:62:
c5:08:ad:c8:75:a8:6b:94:d0:56:1d:e1:ad:c9:3e:76:e7:1f:
79:da:86:5e:57:26:01:0f:de:d0:90:58:a4:54:29:25:df:ad:
f2:e3:cd:83:11:a5:b2:41:e4:16:67:f6:03:54:a7:ac:1d:5d:
a5:f0:54:29:16:1e:13:f6:be:3a:dc:56:00:df:92:7a:7e:66:
d3:fb:4b:13:8c:56:7d:69:64:3a:76:3c:93:9e:dd:39:00:b3:
03:21:02:16:80:15:e6:dc:d3:e3:ce:56:2f:b9:10:17:18:09:
1a:79:6c:f6:f6:8c:dd:f7:70:36:ac:7c:75:17:a0:98:6b:eb:
c9:3f:b1:70:73:80:f4:5d:a8:4c:4e:84:7b:96:29:3f:b4:59:
b2:c5:90:b3:ad:dd:41:b1:47:83:c4:6c:00:43:c4:82:bd:06:
c7:3c:ac:77:93:f2:57:f1:06:51:ca:c6:b3:07:ac:31:d3:44:
2f:4a:44:78:83:a8:2c:87:13:3f:bb:db:65:ae:ab:40:0f:b9:
9b:c7:3a:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbu7ySDtaBGhCr6Gu3+GvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjI3ZmFlMTUzMGVhNzE2NzA3MGNmMTJjNDg2ODExZDhl
MGJhYzUwHhcNMjQwMTAxMTQzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmMxZmY2Yzk4NmU3ODJlZWIzNzc2NWJlOGQ2NjMyMjJhOTI1YmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJW3hh9ZL4t8LHT/xMwVbCOGe4Ds
ze9r9NUtzRNN7KjyXr5hkNExYUA+HZtzrCyhgiAnDkBWfagw85PrdRaIJs5bN/id
JMvjiB/1lAqurEny/DO0HbrlymtzsRnkF290tazrvVWNwKYy9cWMioMlmE5pTWgZ
4y6mbw8pu3gnapJlv3ye5lnU+jqJDdOtAOvpT+BpKnd3XJUAISTRYM5OvcmkQATH
8ktMG44l2O4LwZAjz5w3btIeTzx/wz7iIP/0UisBNU/E4l+ekz5C1afuc+zOLdiV
lw/97F/gCUHGhHSPC5/1ebsst3vuzDqQULtYhlfFHmy1xa9mefGLO9c2gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPLB/2yYbngu6zd2W+jWYyIqklvkMB8GA1UdIwQY
MBaAFJ7yf64VMOpxZwcM8SxIaBHY4LrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjIt
ZGY4MjNlNGRiMWVhLzEvOHNIX2JKaHVlQzdyTjNaYjZOWmpJaXFTVy1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjItZGY4MjNlNGRiMWVh
LzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZgMMA0G
CSqGSIb3DQEBCwUAA4IBAQCnLLsfsJ2DJfN5htdyqrP2IMMnuHp+/t42FdXgrwVO
7sPhfXEkmxdFB9snp1WryiX3cZZ5jWLFCK3IdahrlNBWHeGtyT525x952oZeVyYB
D97QkFikVCkl363y482DEaWyQeQWZ/YDVKesHV2l8FQpFh4T9r463FYA35J6fmbT
+0sTjFZ9aWQ6djyTnt05ALMDIQIWgBXm3NPjzlYvuRAXGAkaeWz29ozd93A2rHx1
F6CYa+vJP7Fwc4D0XahMToR7lik/tFmyxZCzrd1BsUeDxGwAQ8SCvQbHPKx3k/JX
8QZRysazB6wx00QvSkR4g6gshxM/u9tlrqtAD7mbxzru
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:40 2024 by rpki-client on console.sobornost.net