Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/kHFWplOmcPSEjlbRkWHC1lkDdAY.roa
File: kHFWplOmcPSEjlbRkWHC1lkDdAY.roa (raw, json)
Hash identifier: gjnCLYR1Hjgbp47CrkqQxoZLtjJWgJkU9mY8ZRdMSxI=
Subject key identifier: 90:71:56:A6:53:A6:70:F4:84:8E:56:D1:91:61:C2:D6:59:03:74:06
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 018CC2DAF7DAE3E3F9BB55A9257A8FD8226D
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/kHFWplOmcPSEjlbRkWHC1lkDdAY.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201739
IP address blocks: 185.22.252.0/22 maxlen: 22
185.22.252.0/24 maxlen: 24
185.22.253.0/24 maxlen: 24
185.22.255.0/24 maxlen: 24
185.22.254.0/24 maxlen: 24
45.152.2.0/24 maxlen: 24
45.152.3.0/24 maxlen: 24
45.152.0.0/22 maxlen: 22
45.152.0.0/24 maxlen: 24
45.152.1.0/24 maxlen: 24
185.65.111.0/24 maxlen: 24
185.65.109.0/24 maxlen: 24
185.65.110.0/24 maxlen: 24
185.65.108.0/22 maxlen: 22
185.65.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f7:da:e3:e3:f9:bb:55:a9:25:7a:8f:d8:22:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=907156a653a670f4848e56d19161c2d659037406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:24:dc:88:d1:33:f0:bd:6a:fd:07:d5:7b:
b8:09:3a:52:a9:83:19:96:f4:66:36:0f:3d:a6:33:
12:af:26:9d:9f:3d:5e:90:e5:b8:a9:94:e4:d1:3f:
fb:32:3d:37:91:5d:70:79:24:7f:a6:d5:51:5d:a2:
cd:71:08:e0:e9:cc:40:ce:e8:e1:14:68:4e:45:cf:
82:79:82:86:ff:cd:42:d2:dd:dd:8d:8d:93:a4:4c:
3b:21:bd:42:4e:6c:e5:b0:ed:d1:58:e1:e3:06:a3:
92:b1:00:a4:25:ec:2e:98:1f:c2:df:56:ca:57:3f:
da:a4:f7:98:39:34:ad:5d:bb:1e:76:cf:cb:f5:86:
94:43:3c:cc:03:4b:2d:47:06:d4:c6:ca:ec:3a:4f:
77:e8:ba:ba:8c:ef:d3:3f:0a:50:72:57:b6:3c:8f:
ea:b8:29:f6:33:41:e4:30:54:c8:e9:96:c7:a7:53:
dd:9e:ef:a6:62:a0:0b:39:55:c4:65:2f:c5:5a:9b:
08:dd:a1:a7:18:bc:b1:a5:b8:f1:7b:81:e4:a3:b5:
09:08:11:cf:fa:fa:ce:2b:c1:11:a5:45:c8:20:ed:
54:ad:c4:62:a4:12:05:46:33:e6:ef:f8:92:ed:d7:
17:60:1b:fa:0d:c0:c2:a8:9a:ca:3f:31:fe:24:65:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:71:56:A6:53:A6:70:F4:84:8E:56:D1:91:61:C2:D6:59:03:74:06
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/kHFWplOmcPSEjlbRkWHC1lkDdAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.0.0/22
185.22.252.0/22
185.65.108.0/22
Signature Algorithm: sha256WithRSAEncryption
11:5f:5a:ee:7a:76:9e:84:14:18:64:bd:65:b9:24:ba:af:57:
9a:aa:7d:fb:a6:da:55:79:fd:49:13:c1:b4:b3:2c:57:75:a8:
0c:cb:24:7d:33:81:56:99:b0:cb:1d:ab:97:3d:fe:f2:c7:f6:
d9:7c:96:eb:0a:0c:96:51:58:61:5d:fb:1f:9d:ed:ba:58:fb:
fc:06:3c:ee:25:49:f3:b4:ec:cc:9d:30:87:7a:62:a9:c2:32:
39:66:12:a2:90:94:7e:a0:fb:98:84:2d:61:ca:09:aa:42:7c:
a2:5b:a1:ad:dd:11:e8:e3:4f:ca:ca:2f:cf:d4:90:94:f4:94:
95:48:85:54:fe:c3:cf:ca:04:db:60:41:64:53:28:52:c7:fb:
0c:38:e4:1e:ea:33:8a:2d:ad:df:4b:43:3f:7d:cb:e0:7d:11:
d1:0d:9d:0e:25:95:89:76:4d:c0:7b:74:cb:8a:e6:41:4f:1e:
45:aa:34:d4:82:17:13:a8:01:f5:13:56:4f:61:be:b6:bb:46:
48:de:01:76:ad:3d:ad:06:43:4d:5d:63:e2:af:eb:24:5f:4f:
ba:8b:0a:15:45:c6:64:00:7b:28:bb:65:bb:96:e9:75:a4:a5:
2b:a3:58:36:0d:c0:2f:8b:63:9c:5b:77:24:45:0c:e5:69:c0:
bd:29:70:2b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzC2vfa4+P5u1WpJXqP2CJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz
Y2U2ZjIwHhcNMjQwMTAxMDIyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDcxNTZhNjUzYTY3MGY0ODQ4ZTU2ZDE5MTYxYzJkNjU5MDM3NDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLQk3IjRM/C9av0H1Xu4CTpSqYMZ
lvRmNg89pjMSryadnz1ekOW4qZTk0T/7Mj03kV1weSR/ptVRXaLNcQjg6cxAzujh
FGhORc+CeYKG/81C0t3djY2TpEw7Ib1CTmzlsO3RWOHjBqOSsQCkJewumB/C31bK
Vz/apPeYOTStXbseds/L9YaUQzzMA0stRwbUxsrsOk936Lq6jO/TPwpQcle2PI/q
uCn2M0HkMFTI6ZbHp1Pdnu+mYqALOVXEZS/FWpsI3aGnGLyxpbjxe4Hko7UJCBHP
+vrOK8ERpUXIIO1UrcRipBIFRjPm7/iS7dcXYBv6DcDCqJrKPzH+JGW2AwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJBxVqZTpnD0hI5W0ZFhwtZZA3QGMB8GA1UdIwQY
MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt
ZmIwZWU1Zjk5N2RhLzEva0hGV3BsT21jUFNFamxiUmtXSEMxbGtEZEFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh
LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZgAAwQC
uRb8AwQCuUFsMA0GCSqGSIb3DQEBCwUAA4IBAQARX1ruenaehBQYZL1luSS6r1ea
qn37ptpVef1JE8G0syxXdagMyyR9M4FWmbDLHauXPf7yx/bZfJbrCgyWUVhhXfsf
ne26WPv8BjzuJUnztOzMnTCHemKpwjI5ZhKikJR+oPuYhC1hygmqQnyiW6Gt3RHo
40/Kyi/P1JCU9JSVSIVU/sPPygTbYEFkUyhSx/sMOOQe6jOKLa3fS0M/fcvgfRHR
DZ0OJZWJdk3Ae3TLiuZBTx5FqjTUghcTqAH1E1ZPYb62u0ZI3gF2rT2tBkNNXWPi
r+skX0+6iwoVRcZkAHsou2W7lul1pKUro1g2DcAvi2OcW3ckRQzlacC9KXAr
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:08 2024 by rpki-client on console.sobornost.net