Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/FY6HSPYXRlhqsFeANmN8cKOqvO0.roa
File: FY6HSPYXRlhqsFeANmN8cKOqvO0.roa (raw, json)
Hash identifier: zsnCrqi4j9D0cibmI8k/lzgNRjpD/qiA0UG01d8l+Xo=
Subject key identifier: 15:8E:87:48:F6:17:46:58:6A:B0:57:80:36:63:7C:70:A3:AA:BC:ED
Certificate issuer: /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial: 0193BB178B407B93912B65E7541201BD4F30
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/FY6HSPYXRlhqsFeANmN8cKOqvO0.roa
Signing time: Thu 12 Dec 2024 13:38:22 +0000
ROA not before: Thu 12 Dec 2024 13:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39217
IP address blocks: 185.53.148.0/22 maxlen: 22
185.53.148.0/24 maxlen: 24
185.132.168.0/22 maxlen: 22
185.173.244.0/22 maxlen: 22
194.79.56.0/22 maxlen: 22
2a00:4760::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:17:8b:40:7b:93:91:2b:65:e7:54:12:01:bd:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Validity
Not Before: Dec 12 13:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=158e8748f61746586ab0578036637c70a3aabced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:08:f3:e6:d8:72:f5:1c:e9:8b:c7:5c:a1:
dc:c7:99:9f:60:dd:4a:e5:16:02:ff:92:4d:e5:98:
82:fe:4c:23:cd:14:9e:9d:a0:2a:1e:fb:c8:65:69:
ad:91:88:da:d5:e3:2b:13:d6:9e:65:19:32:bd:22:
62:e2:45:10:dd:b8:ef:78:15:75:c6:cf:ae:ef:cf:
ed:a7:00:48:4f:d1:1e:f7:6f:d7:b6:24:06:5a:f4:
e3:cc:2c:bd:40:85:bc:38:23:7d:62:cc:2f:00:8c:
60:d4:fe:83:62:49:69:9e:ab:ff:33:30:40:d8:a2:
26:7f:b0:9f:f3:d0:55:8e:88:60:d9:8c:5f:58:bb:
c1:bf:68:2a:73:25:64:5b:7e:fe:d9:fe:ee:f1:3b:
52:73:95:e4:62:53:b3:92:b8:c4:74:b6:b1:af:b3:
fa:c2:1b:3f:a1:d9:b3:c7:7d:30:1c:28:3e:b5:90:
70:14:78:9b:2d:1c:3c:65:02:10:03:d8:87:5e:93:
08:b4:14:bd:79:6a:7e:2f:15:0b:80:87:0e:c9:f4:
0f:32:c5:54:32:49:e1:a4:01:31:cd:6b:94:5a:20:
05:31:44:fd:12:dc:79:a2:af:d1:21:9e:22:8b:97:
07:dd:79:3d:d9:fb:01:b5:ac:b4:fa:0b:94:13:c8:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:87:48:F6:17:46:58:6A:B0:57:80:36:63:7C:70:A3:AA:BC:ED
X509v3 Authority Key Identifier:
keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/FY6HSPYXRlhqsFeANmN8cKOqvO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.148.0/22
185.132.168.0/22
185.173.244.0/22
194.79.56.0/22
IPv6:
2a00:4760::/32
Signature Algorithm: sha256WithRSAEncryption
05:73:f4:55:3f:52:13:bf:51:bc:c5:47:bd:da:a5:bd:db:60:
e7:26:48:c7:f7:1c:06:26:ec:4d:37:21:64:57:0a:cb:09:cf:
96:99:4b:3b:58:55:d2:f0:3d:57:f0:ad:6d:aa:4b:34:d7:59:
8e:1c:18:64:ce:a9:84:7c:04:84:82:54:06:53:80:4e:25:27:
7c:6c:67:ae:fb:a3:73:29:e1:09:61:5b:86:3d:0e:17:c6:50:
ce:14:43:58:36:34:41:bf:d5:ee:8e:f6:6e:2e:1a:7c:a4:d0:
f8:94:ea:3f:65:79:9d:9f:e8:e3:57:87:d2:f1:37:64:8c:7c:
bd:05:3d:38:05:46:2f:9d:7e:74:6e:47:a0:c5:4a:2d:4a:c9:
64:e9:6e:3b:e3:47:67:9f:bd:66:bd:4d:2e:3c:33:71:f6:40:
1b:6e:bd:17:df:a8:84:12:b6:33:34:69:88:61:85:f7:a4:2e:
d2:a0:f8:18:c7:70:73:64:d9:02:aa:6b:6d:71:91:64:ca:05:
c8:5b:5f:cd:e6:da:bb:b5:2f:4a:33:7a:25:0c:61:d4:c8:16:
90:06:22:39:ef:cd:43:9d:0a:7e:f4:61:e0:70:6b:fa:b7:1a:
df:ca:9d:f3:d6:63:0a:ec:3c:3c:8a:72:b1:0e:03:14:4d:6f:
41:3d:6a:0c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZO7F4tAe5ORK2XnVBIBvU8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDlmNWJlYjY5MzM0ODQ1NDFjZTU2MjgyYzk4OWVkNmU4
YmRiYTMwHhcNMjQxMjEyMTMzODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNThlODc0OGY2MTc0NjU4NmFiMDU3ODAzNjYzN2M3MGEzYWFiY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2YI8+bYcvUc6YvHXKHcx5mfYN1K
5RYC/5JN5ZiC/kwjzRSenaAqHvvIZWmtkYja1eMrE9aeZRkyvSJi4kUQ3bjveBV1
xs+u78/tpwBIT9Ee92/XtiQGWvTjzCy9QIW8OCN9YswvAIxg1P6DYklpnqv/MzBA
2KImf7Cf89BVjohg2YxfWLvBv2gqcyVkW37+2f7u8TtSc5XkYlOzkrjEdLaxr7P6
whs/odmzx30wHCg+tZBwFHibLRw8ZQIQA9iHXpMItBS9eWp+LxULgIcOyfQPMsVU
MknhpAExzWuUWiAFMUT9Etx5oq/RIZ4ii5cH3Xk92fsBtay0+guUE8iG+QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFBWOh0j2F0ZYarBXgDZjfHCjqrztMB8GA1UdIwQY
MBaAFFrZ9b62kzSEVBzlYoLJie1ui9ujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kYWM3MGYtZjE3Mi00NGNlLTliZTUt
NWFmODllNmNkMDU1LzEvRlk2SFNQWVhSbGhxc0ZlQU5tTjhjS09xdk8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kYWM3MGYtZjE3Mi00NGNlLTliZTUtNWFmODllNmNkMDU1
LzEvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuTWUAwQC
uYSoAwQCua30AwQCwk84MA0EAgACMAcDBQAqAEdgMA0GCSqGSIb3DQEBCwUAA4IB
AQAFc/RVP1ITv1G8xUe92qW922DnJkjH9xwGJuxNNyFkVwrLCc+WmUs7WFXS8D1X
8K1tqks011mOHBhkzqmEfASEglQGU4BOJSd8bGeu+6NzKeEJYVuGPQ4XxlDOFENY
NjRBv9XujvZuLhp8pND4lOo/ZXmdn+jjV4fS8TdkjHy9BT04BUYvnX50bkegxUot
Sslk6W4740dnn71mvU0uPDNx9kAbbr0X36iEErYzNGmIYYX3pC7SoPgYx3BzZNkC
qmttcZFkygXIW1/N5tq7tS9KM3olDGHUyBaQBiI5781DnQp+9GHgcGv6txrfyp3z
1mMK7Dw8inKxDgMUTW9BPWoM
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net