Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/erSvbl2vkYeeRzPCNZKqWVB0Iy4.roa
File: erSvbl2vkYeeRzPCNZKqWVB0Iy4.roa (raw, json)
Hash identifier: JYrYXSGy4WEp26Y8lp91fJ9k0FKAE6yJldSIujo82mg=
Subject key identifier: 7A:B4:AF:6E:5D:AF:91:87:9E:47:33:C2:35:92:AA:59:50:74:23:2E
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 0190F215AC2DDE7D4F0A70393690E653758C
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/erSvbl2vkYeeRzPCNZKqWVB0Iy4.roa
Signing time: Sat 27 Jul 2024 02:47:04 +0000
ROA not before: Sat 27 Jul 2024 02:47:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 43.226.0.0/23 maxlen: 23
46.17.217.0/24 maxlen: 24
63.251.117.0/24 maxlen: 24
64.95.150.0/23 maxlen: 23
64.225.244.0/23 maxlen: 23
91.198.19.0/24 maxlen: 24
104.225.253.0/24 maxlen: 24
117.18.104.0/24 maxlen: 24
123.100.227.0/24 maxlen: 24
148.222.40.0/22 maxlen: 22
167.234.38.0/24 maxlen: 24
198.49.103.0/24 maxlen: 24
202.2.60.0/22 maxlen: 22
216.183.120.0/24 maxlen: 24
216.203.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f2:15:ac:2d:de:7d:4f:0a:70:39:36:90:e6:53:75:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Jul 27 02:47:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ab4af6e5daf91879e4733c23592aa595074232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:0c:74:11:19:09:61:a3:e5:fc:96:01:9c:
24:84:9b:f7:4d:3b:db:4f:e1:fc:cf:6b:d7:6a:80:
a7:5e:11:5e:45:1c:3b:85:45:49:aa:58:96:c9:4f:
58:be:c2:98:fd:9c:42:47:de:3e:d6:b3:d9:5a:f7:
89:dd:da:a9:da:c5:51:3f:38:b9:c0:e5:34:2d:2e:
93:be:5d:3a:91:b8:30:56:ea:ed:41:dd:80:f5:6c:
3f:38:82:8d:45:c9:40:69:10:92:05:81:8f:61:aa:
f7:fc:30:4d:2c:df:52:10:36:fb:46:7f:35:4c:1e:
59:be:d2:56:88:d8:52:85:c6:22:28:a4:c2:39:86:
4c:29:bd:d9:94:da:81:7d:4e:32:ed:d7:09:8e:db:
57:87:fc:a9:09:30:ba:b7:9d:91:8f:2f:bf:24:68:
95:ad:c5:ca:d6:c4:02:64:bf:da:5e:d4:7c:97:5d:
6a:3e:e1:c2:df:33:0c:5e:8e:90:42:83:db:a1:74:
1b:62:c1:67:ba:b4:65:28:d1:39:6c:3c:60:bb:11:
9e:9d:61:06:e7:b2:08:cd:c6:87:3a:35:12:fe:0d:
e5:ad:03:4a:7d:6f:57:92:3f:b1:b9:53:e6:1a:07:
f4:06:38:fc:37:55:ff:02:ae:33:37:56:d9:77:9f:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:AF:6E:5D:AF:91:87:9E:47:33:C2:35:92:AA:59:50:74:23:2E
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/erSvbl2vkYeeRzPCNZKqWVB0Iy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.0.0/23
46.17.217.0/24
63.251.117.0/24
64.95.150.0/23
64.225.244.0/23
91.198.19.0/24
104.225.253.0/24
117.18.104.0/24
123.100.227.0/24
148.222.40.0/22
167.234.38.0/24
198.49.103.0/24
202.2.60.0/22
216.183.120.0/24
216.203.15.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0d:d8:de:f5:e8:7a:13:bd:d3:2f:65:b4:62:9e:df:f0:df:
52:4e:d8:64:36:2f:61:f5:d5:27:51:80:c0:09:f9:2c:2d:01:
d6:7d:df:ce:be:8e:f1:98:b4:f1:70:9f:20:95:10:78:63:1b:
b9:66:96:a3:7f:f1:2a:0a:86:26:8d:ff:1a:6d:4b:ee:6d:fe:
52:d3:2c:a6:8e:c3:59:e3:69:7c:93:76:66:9a:c2:e3:cc:0f:
cd:a4:9d:73:d4:df:59:2f:da:fa:c4:72:59:4b:ec:15:ab:29:
63:4a:f7:34:95:5d:4a:93:11:47:a0:cd:26:4a:63:a7:ba:77:
41:97:f0:d6:cb:7e:75:d6:09:26:c0:a4:86:d6:c4:a5:5f:42:
af:e5:c0:18:61:2f:a2:64:98:b9:fa:00:4a:23:91:6e:c8:60:
ac:ea:6e:65:87:50:de:d3:e2:9e:6d:a8:9a:3e:83:75:15:67:
c4:fd:08:09:b4:79:98:2d:4f:6f:b8:59:fc:37:68:8f:c4:a7:
bf:93:62:ce:6e:72:15:4d:da:70:f3:51:29:53:8b:92:40:be:
83:39:2e:45:a3:ee:64:01:3e:17:f2:6c:c1:eb:22:17:93:41:
4b:ad:43:d4:3e:05:d5:64:48:94:0d:03:3b:cb:6c:b1:c6:40:
dd:a9:32:bf
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZDyFawt3n1PCnA5NpDmU3WMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3
ZjM3MzIwHhcNMjQwNzI3MDI0NzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWI0YWY2ZTVkYWY5MTg3OWU0NzMzYzIzNTkyYWE1OTUwNzQyMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNUMdBEZCWGj5fyWAZwkhJv3TTvb
T+H8z2vXaoCnXhFeRRw7hUVJqliWyU9YvsKY/ZxCR94+1rPZWveJ3dqp2sVRPzi5
wOU0LS6Tvl06kbgwVurtQd2A9Ww/OIKNRclAaRCSBYGPYar3/DBNLN9SEDb7Rn81
TB5ZvtJWiNhShcYiKKTCOYZMKb3ZlNqBfU4y7dcJjttXh/ypCTC6t52Rjy+/JGiV
rcXK1sQCZL/aXtR8l11qPuHC3zMMXo6QQoPboXQbYsFnurRlKNE5bDxguxGenWEG
57IIzcaHOjUS/g3lrQNKfW9Xkj+xuVPmGgf0Bjj8N1X/Aq4zN1bZd5+JmwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFHq0r25dr5GHnkczwjWSqllQdCMuMB8GA1UdIwQY
MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt
YWI2M2Q0NWY0YjZhLzEvZXJTdmJsMnZrWWVlUnpQQ05aS3FXVkIwSXk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh
LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQBK+IAAwQA
LhHZAwQAP/t1AwQBQF+WAwQBQOH0AwQAW8YTAwQAaOH9AwQAdRJoAwQAe2TjAwQC
lN4oAwQAp+omAwQAxjFnAwQCygI8AwQA2Ld4AwQA2MsPMA0GCSqGSIb3DQEBCwUA
A4IBAQBiDdje9eh6E73TL2W0Yp7f8N9STthkNi9h9dUnUYDACfksLQHWfd/Ovo7x
mLTxcJ8glRB4Yxu5Zpajf/EqCoYmjf8abUvubf5S0yymjsNZ42l8k3ZmmsLjzA/N
pJ1z1N9ZL9r6xHJZS+wVqyljSvc0lV1KkxFHoM0mSmOnundBl/DWy3511gkmwKSG
1sSlX0Kv5cAYYS+iZJi5+gBKI5FuyGCs6m5lh1De0+KebaiaPoN1FWfE/QgJtHmY
LU9vuFn8N2iPxKe/k2LObnIVTdpw81EpU4uSQL6DOS5Fo+5kAT4X8mzB6yIXk0FL
rUPUPgXVZEiUDQM7y2yxxkDdqTK/
-----END CERTIFICATE-----
Generated at Sun Jul 28 12:34:29 2024 by rpki-client on console.sobornost.net