Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/OsSBNm-xPNWGloxOhQyXFkAb-HU.roa
File: OsSBNm-xPNWGloxOhQyXFkAb-HU.roa (raw, json)
Hash identifier: Y4RYYz7rlU1V5xZFEFHdYXjo0o7YsDfG7x+DmLnhVLc=
Subject key identifier: 3A:C4:81:36:6F:B1:3C:D5:86:96:8C:4E:85:0C:97:16:40:1B:F8:75
Certificate issuer: /CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Certificate serial: 018CC42520FCA099AA6A910538AC9626B580
Authority key identifier: 2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/OsSBNm-xPNWGloxOhQyXFkAb-HU.roa
Signing time: Mon 01 Jan 2024 08:30:16 +0000
ROA not before: Mon 01 Jan 2024 08:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207857
IP address blocks: 91.209.227.0/24 maxlen: 24
91.212.11.0/24 maxlen: 24
91.212.14.0/24 maxlen: 24
91.212.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:20:fc:a0:99:aa:6a:91:05:38:ac:96:26:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Validity
Not Before: Jan 1 08:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ac481366fb13cd586968c4e850c9716401bf875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:6e:e9:a2:8e:ad:ef:8f:85:2e:46:1a:eb:
98:bd:df:70:a1:22:e3:f8:d6:01:5e:cc:bb:18:90:
77:19:92:f4:b3:39:21:c8:a6:c3:1c:69:9d:0b:bd:
51:82:82:88:27:5c:9f:1c:74:4b:38:17:89:a7:9d:
00:99:64:14:65:5a:51:e7:6a:d9:45:b2:e3:81:60:
d8:b2:01:11:57:28:70:f6:f2:77:36:8d:84:83:0d:
8d:8e:9a:86:3a:95:c4:4b:7f:de:87:ff:24:34:de:
ee:51:99:85:f9:c2:cc:0c:b5:5b:a4:b6:79:60:f8:
32:85:05:76:c8:cf:be:f5:ff:2d:1c:49:1c:7b:b2:
6b:89:15:31:ac:9e:1f:4f:ed:a9:49:1c:a4:8f:d2:
2c:5a:d5:c7:9c:3c:9b:cf:74:24:7d:7f:31:ab:96:
0c:77:70:a5:4f:e2:8d:bf:36:48:7b:94:be:7e:b7:
4d:bd:08:f2:51:f2:1d:a7:2a:08:62:8e:b2:d6:24:
52:65:51:49:94:31:a2:38:ec:2a:a0:21:f1:8d:0d:
eb:a2:fb:5a:1a:ea:06:d8:a6:29:ce:e2:39:3a:b4:
3e:18:c1:17:43:67:ba:91:4b:26:39:1b:00:e6:bf:
a4:9e:ab:53:d7:50:bd:c6:21:17:6b:af:9b:02:d3:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:81:36:6F:B1:3C:D5:86:96:8C:4E:85:0C:97:16:40:1B:F8:75
X509v3 Authority Key Identifier:
keyid:2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/OsSBNm-xPNWGloxOhQyXFkAb-HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.227.0/24
91.212.11.0/24
91.212.14.0/24
91.212.19.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:dc:35:b6:2a:57:ab:ec:d2:50:22:9f:de:43:43:1b:71:64:
7e:19:76:e2:16:8d:c5:ec:c0:07:07:05:28:d6:7a:7e:c6:c6:
72:54:f5:e6:20:99:d7:a4:8c:fd:4a:81:c5:24:05:65:13:e5:
a3:9f:59:d2:da:dc:b9:40:09:89:e6:78:e6:cd:b9:d3:71:0a:
9f:bc:ec:6e:c8:8d:44:79:f0:72:9f:9b:2a:61:81:cd:c7:ce:
1d:a4:ae:e9:35:3d:30:f8:05:79:93:2d:79:1f:51:3e:3e:e7:
3c:d2:4a:74:9a:fd:c2:d7:dc:fd:bc:ec:85:e6:8b:0d:76:99:
20:f7:ec:48:43:65:de:3d:b7:6a:c3:dd:4d:be:74:c4:eb:e1:
10:58:29:d6:94:42:c8:7f:a7:a4:f3:85:72:9e:04:55:4f:66:
6d:89:51:6d:6b:90:7f:01:ce:fc:b0:6e:63:71:26:f6:20:6a:
f2:30:8a:54:8e:2b:68:13:a5:b3:2c:1d:63:db:99:ec:54:b5:
b2:ff:ee:8c:f3:1a:30:2a:cb:25:ac:ea:88:f6:c1:ae:2f:30:
ab:81:43:4c:c5:0c:9f:e3:32:db:8f:15:6d:21:97:c3:d8:04:
dd:38:34:ea:b7:84:f6:f3:02:18:ef:58:c3:b6:a6:14:b8:1a:
4a:52:6c:57
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzEJSD8oJmqapEFOKyWJrWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNmY5YmRhZjY5ZGNhMWNkYjllNDQwYzk3YzEwYTA5MmVj
MWIzOWMwHhcNMjQwMTAxMDgzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWM0ODEzNjZmYjEzY2Q1ODY5NjhjNGU4NTBjOTcxNjQwMWJmODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSlu6aKOre+PhS5GGuuYvd9woSLj
+NYBXsy7GJB3GZL0szkhyKbDHGmdC71RgoKIJ1yfHHRLOBeJp50AmWQUZVpR52rZ
RbLjgWDYsgERVyhw9vJ3No2Egw2NjpqGOpXES3/eh/8kNN7uUZmF+cLMDLVbpLZ5
YPgyhQV2yM++9f8tHEkce7JriRUxrJ4fT+2pSRykj9IsWtXHnDybz3QkfX8xq5YM
d3ClT+KNvzZIe5S+frdNvQjyUfIdpyoIYo6y1iRSZVFJlDGiOOwqoCHxjQ3rovta
GuoG2KYpzuI5OrQ+GMEXQ2e6kUsmORsA5r+knqtT11C9xiEXa6+bAtP5ewIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDrEgTZvsTzVhpaMToUMlxZAG/h1MB8GA1UdIwQY
MBaAFC1vm9r2ncoc255EDJfBCgkuwbOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFctYjJ2YWR5aHpibmtRTWw4RUtDUzdCczV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80NDY0ZjItNmMxYy00MDk2LTk2MGIt
ZTM5YjNhMzAyY2VkLzEvT3NTQk5tLXhQTldHbG94T2hReVhGa0FiLUhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80NDY0ZjItNmMxYy00MDk2LTk2MGItZTM5YjNhMzAyY2Vk
LzEvTFctYjJ2YWR5aHpibmtRTWw4RUtDUzdCczV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW9HjAwQA
W9QLAwQAW9QOAwQAW9QTMA0GCSqGSIb3DQEBCwUAA4IBAQCu3DW2Kler7NJQIp/e
Q0MbcWR+GXbiFo3F7MAHBwUo1np+xsZyVPXmIJnXpIz9SoHFJAVlE+Wjn1nS2ty5
QAmJ5njmzbnTcQqfvOxuyI1EefByn5sqYYHNx84dpK7pNT0w+AV5ky15H1E+Puc8
0kp0mv3C19z9vOyF5osNdpkg9+xIQ2XePbdqw91NvnTE6+EQWCnWlELIf6ek84Vy
ngRVT2ZtiVFta5B/Ac78sG5jcSb2IGryMIpUjitoE6WzLB1j25nsVLWy/+6M8xow
KsslrOqI9sGuLzCrgUNMxQyf4zLbjxVtIZfD2ATdODTqt4T28wIY71jDtqYUuBpK
UmxX
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:24 2024 by rpki-client on console.sobornost.net