Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/fuWDnpWpXSDH0BS1hhM56k87PPw.roa
File: fuWDnpWpXSDH0BS1hhM56k87PPw.roa (raw, json)
Hash identifier: hff6gAv57H2SzDKqcKuWEat0tiuKKUOa9GeLc8zdS0Q=
Subject key identifier: 7E:E5:83:9E:95:A9:5D:20:C7:D0:14:B5:86:13:39:EA:4F:3B:3C:FC
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 018CC3488B5D7CA095211E600A9E8CFF047C
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/fuWDnpWpXSDH0BS1hhM56k87PPw.roa
Signing time: Mon 01 Jan 2024 04:29:20 +0000
ROA not before: Mon 01 Jan 2024 04:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200937
IP address blocks: 185.90.151.0/24 maxlen: 24
185.90.148.0/24 maxlen: 24
185.90.149.0/24 maxlen: 24
185.90.150.0/24 maxlen: 24
185.90.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8b:5d:7c:a0:95:21:1e:60:0a:9e:8c:ff:04:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ee5839e95a95d20c7d014b5861339ea4f3b3cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:51:e6:f9:a2:c6:3e:5d:13:c9:01:03:a7:
cf:93:bf:2f:72:ff:f5:24:c7:37:a3:ef:e5:52:de:
44:7c:47:7b:0c:3d:e6:0f:09:59:5a:cf:03:6d:4a:
ac:8f:d9:67:e8:5b:a7:83:34:4e:97:ba:e0:9b:e1:
74:9a:18:07:2e:7b:40:9b:af:03:72:7d:5a:ea:79:
6d:6b:78:8e:c1:c6:35:ee:02:bb:75:2c:23:43:9d:
46:f2:04:86:48:30:15:d0:b5:45:9f:2b:d5:e0:a1:
98:a0:90:24:a7:4a:30:29:f1:09:42:80:87:80:ea:
ad:bb:59:bb:63:ac:a5:7f:57:e4:ea:01:6a:a7:93:
27:89:d1:9d:f0:9e:62:47:e8:d5:1e:59:22:bc:6f:
00:4b:e4:bc:24:8d:83:07:56:60:91:35:e2:cb:3d:
97:c0:24:17:7c:52:d5:2b:5e:db:97:a4:57:58:d7:
ff:6d:c9:bc:16:64:d7:55:76:0d:f9:5e:ff:83:af:
53:71:5c:58:34:12:8c:57:c0:bc:55:e5:c2:ec:a6:
78:2d:f4:ed:ae:d3:b7:8e:90:14:ec:60:b4:a6:0e:
7e:a4:9a:4a:2f:59:09:ce:df:e2:a4:44:f1:62:fd:
77:da:38:ec:ac:c0:9a:11:56:76:c0:d0:bb:f8:c9:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E5:83:9E:95:A9:5D:20:C7:D0:14:B5:86:13:39:EA:4F:3B:3C:FC
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/fuWDnpWpXSDH0BS1hhM56k87PPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:fd:9a:63:ce:c7:40:26:ac:e2:78:e9:5a:88:69:85:28:43:
f6:e3:96:d9:ad:fd:49:bb:95:71:07:fc:af:b1:16:37:7d:22:
8e:3f:e4:de:ad:b6:ee:c8:dd:2e:5e:f6:0a:3a:a1:89:cc:49:
f2:b0:fa:fd:77:1a:0b:d1:dc:2e:2c:b0:17:9a:97:7d:d8:10:
a1:2d:56:3e:10:b4:9f:fb:35:16:a0:18:0f:c8:0b:80:05:33:
21:b3:17:d2:ef:94:97:0d:3e:04:a4:8e:d2:61:cd:f0:94:6a:
c1:25:46:47:e6:33:ce:1f:a5:77:45:1e:e7:18:5b:1f:eb:68:
0f:c6:ec:1c:f7:0d:0e:94:b0:67:75:d4:28:eb:61:b0:02:c8:
91:9d:4f:74:26:f7:2c:a1:40:e5:c0:58:ea:24:b1:be:89:ec:
c7:2c:6c:db:83:d5:ca:8f:76:2e:ff:1c:e5:26:6e:aa:cc:d7:
40:ed:6b:7a:02:f4:53:77:f8:ac:ab:88:90:6f:ec:85:87:70:
aa:13:50:f5:70:ea:a8:f4:c2:e0:aa:54:ed:04:57:de:ff:cd:
c6:65:e4:0a:df:98:e4:f0:fd:91:15:43:84:0f:8c:74:ad:95:
59:54:b2:fd:ae:74:5c:cb:ed:d0:85:4c:cf:d8:5c:2d:f1:bc:
b3:dc:55:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSItdfKCVIR5gCp6M/wR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZDkxNDYyYzRkYzFkZjZhOGEzYTk3YTFhZWU1N2EwY2Mx
NGVmYmEwHhcNMjQwMTAxMDQyOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWU1ODM5ZTk1YTk1ZDIwYzdkMDE0YjU4NjEzMzllYTRmM2IzY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjhR5vmixj5dE8kBA6fPk78vcv/1
JMc3o+/lUt5EfEd7DD3mDwlZWs8DbUqsj9ln6FungzROl7rgm+F0mhgHLntAm68D
cn1a6nlta3iOwcY17gK7dSwjQ51G8gSGSDAV0LVFnyvV4KGYoJAkp0owKfEJQoCH
gOqtu1m7Y6ylf1fk6gFqp5MnidGd8J5iR+jVHlkivG8AS+S8JI2DB1ZgkTXiyz2X
wCQXfFLVK17bl6RXWNf/bcm8FmTXVXYN+V7/g69TcVxYNBKMV8C8VeXC7KZ4LfTt
rtO3jpAU7GC0pg5+pJpKL1kJzt/ipETxYv132jjsrMCaEVZ2wNC7+MmfIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7lg56VqV0gx9AUtYYTOepPOzz8MB8GA1UdIwQY
MBaAFMfZFGLE3B32qKOpehruV6DMFO+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzIt
MzQ5N2Y3ZTJkZTYyLzEvZnVXRG5wV3BYU0RIMEJTMWhoTTU2azg3UFB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzItMzQ5N2Y3ZTJkZTYy
LzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVqUMA0G
CSqGSIb3DQEBCwUAA4IBAQCw/ZpjzsdAJqzieOlaiGmFKEP245bZrf1Ju5VxB/yv
sRY3fSKOP+TerbbuyN0uXvYKOqGJzEnysPr9dxoL0dwuLLAXmpd92BChLVY+ELSf
+zUWoBgPyAuABTMhsxfS75SXDT4EpI7SYc3wlGrBJUZH5jPOH6V3RR7nGFsf62gP
xuwc9w0OlLBnddQo62GwAsiRnU90JvcsoUDlwFjqJLG+iezHLGzbg9XKj3Yu/xzl
Jm6qzNdA7Wt6AvRTd/isq4iQb+yFh3CqE1D1cOqo9MLgqlTtBFfe/83GZeQK35jk
8P2RFUOED4x0rZVZVLL9rnRcy+3QhUzP2Fwt8byz3FXc
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:18:03 2024 by rpki-client on console.sobornost.net