Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/RmCMpkqBzKU5uwE67dWXECYDSLM.roa
File: RmCMpkqBzKU5uwE67dWXECYDSLM.roa (raw, json)
Hash identifier: zJlDKrTh1cp4KFmyuXvGXO2yUQg/mOVDOGARDE3Iulg=
Subject key identifier: 46:60:8C:A6:4A:81:CC:A5:39:BB:01:3A:ED:D5:97:10:26:03:48:B3
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 0194221F89570503290C45B834B932439725
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/RmCMpkqBzKU5uwE67dWXECYDSLM.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60144
IP address blocks: 45.138.36.0/22 maxlen: 24
45.150.76.0/22 maxlen: 24
91.215.156.0/22 maxlen: 24
146.19.105.0/24 maxlen: 24
185.27.236.0/24 maxlen: 32
185.27.237.0/24 maxlen: 32
185.27.238.0/24 maxlen: 32
185.27.239.0/24 maxlen: 32
185.53.8.0/22 maxlen: 24
185.56.28.0/22 maxlen: 24
185.234.218.0/24 maxlen: 32
192.162.136.0/22 maxlen: 24
2a02:5060::/32 maxlen: 48
2a07:f9c0::/29 maxlen: 48
2a12:1680::/29 maxlen: 29
2a12:8f00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:89:57:05:03:29:0c:45:b8:34:b9:32:43:97:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46608ca64a81cca539bb013aedd59710260348b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:17:8b:59:07:44:12:64:e6:87:f4:85:f4:
c0:04:79:ed:b1:6a:99:68:e8:da:a0:3e:72:da:24:
67:31:ce:44:10:ad:a0:6b:68:6a:38:7e:15:77:0c:
0f:5c:38:c4:0d:aa:d8:36:3a:3d:31:94:28:40:9e:
0e:31:c1:ae:67:54:f1:00:f8:3e:7a:62:b1:66:65:
de:61:9d:50:f8:c0:87:41:c6:1b:80:04:18:42:7a:
e0:5d:fa:78:03:47:78:b8:67:29:fe:dc:41:18:16:
ec:ec:b9:73:e2:ff:6a:4d:44:3e:be:ec:7c:ae:1b:
b4:cf:69:ea:17:3e:e9:03:18:3a:3e:c3:d4:66:31:
41:f3:26:dc:2f:68:07:b3:4a:e8:13:1c:82:e4:80:
5f:65:d1:99:c2:a0:12:cf:ef:a9:47:f7:28:74:78:
ad:df:a8:06:02:fb:2f:75:09:19:e5:3e:74:e0:1d:
d1:cf:cf:78:3c:11:ef:92:bb:42:e8:f4:98:d3:d4:
41:a5:c6:fa:25:8d:9e:1b:8e:9f:76:9b:12:f9:f4:
6f:1a:f7:df:04:48:55:e0:27:d7:f2:5e:ef:16:e2:
4d:d6:88:13:f8:4a:22:8e:c6:5b:b4:87:c0:0e:ee:
6c:51:9b:26:0c:10:cf:f5:c0:ea:2d:bf:06:af:6e:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:8C:A6:4A:81:CC:A5:39:BB:01:3A:ED:D5:97:10:26:03:48:B3
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/RmCMpkqBzKU5uwE67dWXECYDSLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.36.0/22
45.150.76.0/22
91.215.156.0/22
146.19.105.0/24
185.27.236.0/22
185.53.8.0/22
185.56.28.0/22
185.234.218.0/24
192.162.136.0/22
IPv6:
2a02:5060::/32
2a07:f9c0::/29
2a12:1680::/29
2a12:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
a6:0f:12:c9:4d:43:1d:76:61:40:fd:81:8e:a9:bc:6d:68:21:
85:60:2d:51:5b:88:37:0c:f8:19:be:d6:f5:51:0e:f7:cb:b5:
6e:96:b0:f4:3b:ad:bc:c0:a5:d3:f2:ca:45:3e:dd:aa:b8:5c:
3a:f9:03:e4:3a:0a:55:d8:85:a2:03:1f:6e:b4:e5:cc:1d:98:
20:5b:77:93:a6:93:6c:1d:c6:4d:39:61:0f:cb:27:d3:8b:f3:
82:53:6e:ec:2e:4c:f4:d1:cf:2f:14:4b:96:3d:c9:47:e0:77:
05:92:ed:42:b6:d5:85:b3:4a:85:21:d2:5f:ce:59:bc:7b:e6:
ee:d6:92:c2:e0:fd:a3:d4:2b:5e:fb:be:8b:80:79:7e:70:f1:
25:dd:e7:bd:fb:f0:0b:eb:6e:a2:51:3d:95:2c:f1:67:6a:fd:
62:7e:46:80:ac:11:ba:63:12:35:e6:f2:e0:bb:4f:65:d6:51:
72:26:8b:d3:ee:f2:c7:25:6f:bd:f9:21:71:ad:44:64:de:6d:
66:37:84:a5:e6:6c:9e:bb:f4:ab:04:08:2e:42:2d:c5:8d:90:
b2:63:3f:f2:a1:f5:42:95:fa:c6:b3:86:f2:d2:4d:bc:48:cb:
ff:4b:c8:41:a1:26:b3:bf:24:e6:a0:4e:8d:29:9e:7c:f2:32:
97:99:07:17
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZQiH4lXBQMpDEW4NLkyQ5clMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzYzZjAxMGM1NDBiY2Q0NTU0MzQ0YmZiOWE1OWEyZWRi
YWJjMjkwHhcNMjUwMTAxMTM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjYwOGNhNjRhODFjY2E1MzliYjAxM2FlZGQ1OTcxMDI2MDM0OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDMXi1kHRBJk5of0hfTABHntsWqZ
aOjaoD5y2iRnMc5EEK2ga2hqOH4VdwwPXDjEDarYNjo9MZQoQJ4OMcGuZ1TxAPg+
emKxZmXeYZ1Q+MCHQcYbgAQYQnrgXfp4A0d4uGcp/txBGBbs7Llz4v9qTUQ+vux8
rhu0z2nqFz7pAxg6PsPUZjFB8ybcL2gHs0roExyC5IBfZdGZwqASz++pR/codHit
36gGAvsvdQkZ5T504B3Rz894PBHvkrtC6PSY09RBpcb6JY2eG46fdpsS+fRvGvff
BEhV4CfX8l7vFuJN1ogT+EoijsZbtIfADu5sUZsmDBDP9cDqLb8Gr25Z7wIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFEZgjKZKgcylObsBOu3VlxAmA0izMB8GA1UdIwQY
MBaAFLzGPwEMVAvNRVQ0S/uaWaLturwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYt
Y2M0MWM0YTMxOThkLzEvUm1DTXBrcUJ6S1U1dXdFNjdkV1hFQ1lEU0xNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYtY2M0MWM0YTMxOThk
LzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjA8BAIAATA2AwQCLYokAwQC
LZZMAwQCW9ecAwQAkhNpAwQCuRvsAwQCuTUIAwQCuTgcAwQAueraAwQCwKKIMCIE
AgACMBwDBQAqAlBgAwUDKgf5wAMFAyoSFoADBQMqEo8AMA0GCSqGSIb3DQEBCwUA
A4IBAQCmDxLJTUMddmFA/YGOqbxtaCGFYC1RW4g3DPgZvtb1UQ73y7VulrD0O628
wKXT8spFPt2quFw6+QPkOgpV2IWiAx9utOXMHZggW3eTppNsHcZNOWEPyyfTi/OC
U27sLkz00c8vFEuWPclH4HcFku1CttWFs0qFIdJfzlm8e+bu1pLC4P2j1Cte+76L
gHl+cPEl3ee9+/AL626iUT2VLPFnav1ifkaArBG6YxI15vLgu09l1lFyJovT7vLH
JW+9+SFxrURk3m1mN4Sl5myeu/SrBAguQi3FjZCyYz/yofVClfrGs4by0k28SMv/
S8hBoSazvyTmoE6NKZ588jKXmQcX
-----END CERTIFICATE-----
Generated at Thu Jan 23 15:54:11 2025 by rpki-client on console.sobornost.net