Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/_dU8vdU8qNMC1-U0a-jJX414aBs.roa
File: _dU8vdU8qNMC1-U0a-jJX414aBs.roa (raw, json)
Hash identifier: r1KngkpNtWSiqyOF7RhncxpcTxsehiRJsoE0S4d/mYE=
Subject key identifier: FD:D5:3C:BD:D5:3C:A8:D3:02:D7:E5:34:6B:E8:C9:5F:8D:78:68:1B
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 018CC56EE45D0BA23C253EF38480120A0C7A
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/_dU8vdU8qNMC1-U0a-jJX414aBs.roa
Signing time: Mon 01 Jan 2024 14:30:28 +0000
ROA not before: Mon 01 Jan 2024 14:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207203
IP address blocks: 185.238.32.0/22 maxlen: 22
45.156.240.0/24 maxlen: 24
45.156.240.0/22 maxlen: 22
45.153.140.0/22 maxlen: 22
185.82.120.0/22 maxlen: 22
185.39.172.0/22 maxlen: 22
193.228.80.0/24 maxlen: 24
193.228.81.0/24 maxlen: 24
193.228.82.0/23 maxlen: 23
2a04:7700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e4:5d:0b:a2:3c:25:3e:f3:84:80:12:0a:0c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Jan 1 14:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdd53cbdd53ca8d302d7e5346be8c95f8d78681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:dc:50:06:97:e4:06:01:3e:9e:65:bf:d7:
41:e2:c2:53:3f:9a:20:a0:bd:c9:40:bd:67:41:71:
45:91:8a:bf:ab:4c:c4:63:b6:15:7e:62:33:a8:61:
5d:a9:28:b4:7a:05:14:e0:ba:c6:47:8b:59:d3:5f:
8d:23:74:f4:7f:ca:f3:1d:b9:78:a4:7d:b5:49:68:
cb:be:32:7b:04:90:ee:57:22:e1:2b:4b:7b:9b:1e:
bc:1c:01:60:de:71:98:52:82:b2:48:5c:40:44:e1:
9b:ca:ad:cb:4a:ba:a5:d6:d7:e3:20:4c:7e:0e:70:
62:0e:8a:71:a5:73:d7:40:98:7b:2a:3a:a3:c3:f1:
8d:75:ea:13:92:ab:77:11:3a:c1:53:19:21:fa:20:
5d:43:97:3c:80:cd:c2:d1:f7:a0:4a:b1:7f:8f:29:
f1:bb:23:3f:d2:21:05:03:40:3c:ab:f3:9e:5e:23:
c6:5e:00:55:c7:15:f9:91:f1:67:70:02:d3:93:24:
72:55:3c:76:ee:f3:e3:bf:3a:7c:5c:e8:b3:60:d4:
4f:7b:8c:40:3a:47:ac:30:d2:83:0a:9a:8c:e8:07:
5a:6b:28:5c:b7:4a:6b:15:61:a5:03:54:f6:5f:ec:
d6:f7:f1:7e:43:46:ff:86:13:df:be:87:21:ce:c4:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D5:3C:BD:D5:3C:A8:D3:02:D7:E5:34:6B:E8:C9:5F:8D:78:68:1B
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/_dU8vdU8qNMC1-U0a-jJX414aBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.140.0/22
45.156.240.0/22
185.39.172.0/22
185.82.120.0/22
185.238.32.0/22
193.228.80.0/22
IPv6:
2a04:7700::/29
Signature Algorithm: sha256WithRSAEncryption
14:c5:ef:dc:1b:b1:88:3e:a0:99:8b:8b:e0:35:68:f1:e5:e1:
0d:92:9e:4a:6f:fd:f6:24:44:de:42:88:4b:c0:d5:ee:f6:e3:
a3:66:3a:0c:77:34:30:d2:2b:29:ca:6b:38:37:a0:fe:91:b3:
ae:92:1b:2c:7f:3a:80:eb:54:f6:e7:8e:ef:97:03:a0:17:20:
4b:1e:45:8b:8a:fe:07:2f:11:b1:a3:d3:15:f5:2c:17:ba:3f:
e6:f9:c7:72:79:cb:b9:fd:3b:df:88:d8:a2:ec:45:06:14:95:
8f:61:61:aa:fc:ec:f5:0c:30:58:9f:1a:60:3f:01:ae:d1:fc:
b9:6e:48:50:aa:2d:8b:2a:0c:18:d4:ae:3b:23:14:89:1b:48:
52:f1:32:d5:ce:47:19:3a:89:f0:53:43:5c:46:e4:d2:a7:4b:
6e:9c:97:f2:41:97:38:1c:d9:c2:e9:56:0d:83:e4:31:76:3d:
09:04:08:1b:c8:e4:55:af:1e:2d:c3:b1:22:70:8c:3a:4f:e5:
51:b7:b0:44:30:27:51:e5:2a:85:32:50:7a:4b:39:61:28:30:
48:b7:91:14:d9:ee:7f:9c:bb:4c:c1:9e:aa:d6:81:52:a7:2f:
c4:82:a5:ea:91:27:23:c0:e1:d5:fe:1f:c1:ae:5a:05:08:14:
ce:39:db:9e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYzFbuRdC6I8JT7zhIASCgx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2QwMjMzODA4NTcwZTMxZmZiMmZjZGUxYjg3NzA3MWNi
YzY2MDMwHhcNMjQwMTAxMTQzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGQ1M2NiZGQ1M2NhOGQzMDJkN2U1MzQ2YmU4Yzk1ZjhkNzg2ODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1TcUAaX5AYBPp5lv9dB4sJTP5og
oL3JQL1nQXFFkYq/q0zEY7YVfmIzqGFdqSi0egUU4LrGR4tZ01+NI3T0f8rzHbl4
pH21SWjLvjJ7BJDuVyLhK0t7mx68HAFg3nGYUoKySFxAROGbyq3LSrql1tfjIEx+
DnBiDopxpXPXQJh7Kjqjw/GNdeoTkqt3ETrBUxkh+iBdQ5c8gM3C0fegSrF/jynx
uyM/0iEFA0A8q/OeXiPGXgBVxxX5kfFncALTkyRyVTx27vPjvzp8XOizYNRPe4xA
OkesMNKDCpqM6Adaayhct0prFWGlA1T2X+zW9/F+Q0b/hhPfvochzsTpwQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFP3VPL3VPKjTAtflNGvoyV+NeGgbMB8GA1UdIwQY
MBaAFPvNAjOAhXDjH/svzeG4dwccvGYDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04MENNNENGY09NZi15X040YmgzQnh5OFpnTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3
LTYxZDczMzNmODU3MC8xL19kVTh2ZFU4cU5NQzEtVTBhLWpKWDQxNGFCcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3LTYxZDczMzNmODU3
MC8xLzEtODBDTTRDRmNPTWYteV9ONGJoM0J4eThaZ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAItmYwD
BAItnPADBAK5J6wDBAK5UngDBAK57iADBALB5FAwDQQCAAIwBwMFAyoEdwAwDQYJ
KoZIhvcNAQELBQADggEBABTF79wbsYg+oJmLi+A1aPHl4Q2Snkpv/fYkRN5CiEvA
1e7246NmOgx3NDDSKynKazg3oP6Rs66SGyx/OoDrVPbnju+XA6AXIEseRYuK/gcv
EbGj0xX1LBe6P+b5x3J5y7n9O9+I2KLsRQYUlY9hYar87PUMMFifGmA/Aa7R/Llu
SFCqLYsqDBjUrjsjFIkbSFLxMtXORxk6ifBTQ1xG5NKnS26cl/JBlzgc2cLpVg2D
5DF2PQkECBvI5FWvHi3DsSJwjDpP5VG3sEQwJ1HlKoUyUHpLOWEoMEi3kRTZ7n+c
u0zBnqrWgVKnL8SCpeqRJyPA4dX+H8GuWgUIFM45254=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:00 2024 by rpki-client on console.sobornost.net