Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/5AqrSuZ1KscXZzIQdeufqkV4JE4.roa
File: 5AqrSuZ1KscXZzIQdeufqkV4JE4.roa (raw, json)
Hash identifier: Fs0sqF3KswA4Okvme36bliHAGAR7qaEj1iHInVRaotE=
Subject key identifier: E4:0A:AB:4A:E6:75:2A:C7:17:67:32:10:75:EB:9F:AA:45:78:24:4E
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 0190784D6DA1F01703405651683A37EE80F2
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/5AqrSuZ1KscXZzIQdeufqkV4JE4.roa
Signing time: Wed 03 Jul 2024 11:14:18 +0000
ROA not before: Wed 03 Jul 2024 11:14:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52142
IP address blocks: 46.174.179.0/24 maxlen: 24
46.174.182.0/24 maxlen: 24
46.174.183.0/24 maxlen: 24
91.210.128.0/24 maxlen: 24
91.210.129.0/24 maxlen: 24
195.69.80.0/22 maxlen: 22
2a03:c940::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:4d:6d:a1:f0:17:03:40:56:51:68:3a:37:ee:80:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jul 3 11:14:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e40aab4ae6752ac71767321075eb9faa4578244e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:f2:3b:34:26:71:c0:a9:43:ca:05:b5:f2:
c6:fd:37:0d:41:6a:09:ff:b5:1a:6f:d1:49:a7:38:
77:1f:4d:c4:aa:66:9b:52:8d:f0:8e:96:33:bf:27:
39:e6:e8:9e:79:8f:b8:f9:94:de:05:e2:5a:78:82:
42:d5:3f:42:90:9a:e0:82:6c:5f:e7:fb:89:34:b0:
e8:8e:c9:62:1f:52:ae:08:94:81:68:1e:e4:2f:39:
cc:51:8a:4b:13:f5:07:a5:2b:60:dd:b1:8c:eb:a0:
0c:b7:e4:b3:99:0c:1f:ff:37:5a:c5:92:04:23:04:
42:32:49:fa:63:ed:45:c4:81:4b:2f:5d:01:e5:84:
3f:eb:4b:32:69:fa:cf:dc:4b:a7:7c:f0:d1:b0:2b:
f4:25:28:60:47:96:f4:6c:f0:4c:32:9d:08:fc:cc:
2a:48:e8:ed:62:3c:12:24:07:a1:b8:a5:25:90:84:
d6:3f:5b:56:81:bc:f9:ec:18:79:90:de:cc:6f:9d:
ef:ae:9e:79:76:c9:77:40:89:3f:21:00:11:ec:83:
7d:a3:e1:90:8c:5f:ee:92:f3:aa:e6:b7:69:76:33:
ce:c1:cc:f9:d2:40:86:c9:65:72:a6:98:d8:f1:b0:
c5:d9:16:ab:3c:3f:66:d1:e4:19:19:86:02:b5:05:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0A:AB:4A:E6:75:2A:C7:17:67:32:10:75:EB:9F:AA:45:78:24:4E
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/5AqrSuZ1KscXZzIQdeufqkV4JE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.179.0/24
46.174.182.0/23
91.210.128.0/23
195.69.80.0/22
IPv6:
2a03:c940::/32
Signature Algorithm: sha256WithRSAEncryption
41:8f:6a:60:f3:23:4c:dd:d5:2a:f1:09:52:c5:e2:a4:0b:3f:
c8:56:ad:94:22:ed:a6:60:db:50:5e:23:64:44:d5:97:74:e7:
1f:b0:c6:b3:4b:9d:99:cb:25:3b:19:dd:07:83:87:50:7b:93:
23:8a:cc:06:90:11:07:0b:e3:b1:a8:3c:a0:4d:21:d2:ba:90:
33:ce:1a:25:15:a0:2c:1c:f8:ee:16:1c:45:bb:8b:fe:1a:cb:
61:d0:3f:60:37:4a:9b:0b:a8:f5:ca:d0:87:28:cf:a8:9b:89:
60:5b:63:39:31:63:9b:08:ba:15:93:df:fd:12:26:b1:ce:bc:
72:27:a9:03:78:10:9b:53:a9:b3:07:0a:1a:67:02:9a:0e:06:
2d:23:64:d0:bb:77:c8:70:cd:ec:cb:57:d5:94:01:b3:d5:5b:
0f:b2:2a:80:d7:41:41:cc:66:0a:8d:cc:f5:1d:25:c3:58:97:
e7:5f:0d:7a:a7:ad:1b:ce:32:15:52:e2:b5:d3:ae:d3:7f:13:
86:b2:79:c6:e8:a5:8d:a3:7f:02:68:f9:08:8e:a7:6a:55:1c:
17:dc:e2:26:1e:7b:b6:fe:91:ea:6b:9f:2b:2e:7f:b9:e0:64:
42:86:78:27:2c:73:32:dd:ad:73:3b:73:2b:94:4a:e7:aa:09:
9b:25:49:42
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZB4TW2h8BcDQFZRaDo37oDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzYxYjUxZWJjODQxODBmMGE2YjIzMmU4N2RmOWQ2MWM5
MGZhYWIwHhcNMjQwNzAzMTExNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDBhYWI0YWU2NzUyYWM3MTc2NzMyMTA3NWViOWZhYTQ1NzgyNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxbyOzQmccCpQ8oFtfLG/TcNQWoJ
/7Uab9FJpzh3H03EqmabUo3wjpYzvyc55uieeY+4+ZTeBeJaeIJC1T9CkJrggmxf
5/uJNLDojsliH1KuCJSBaB7kLznMUYpLE/UHpStg3bGM66AMt+SzmQwf/zdaxZIE
IwRCMkn6Y+1FxIFLL10B5YQ/60syafrP3EunfPDRsCv0JShgR5b0bPBMMp0I/Mwq
SOjtYjwSJAehuKUlkITWP1tWgbz57Bh5kN7Mb53vrp55dsl3QIk/IQAR7IN9o+GQ
jF/ukvOq5rdpdjPOwcz50kCGyWVyppjY8bDF2RarPD9m0eQZGYYCtQUgHwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOQKq0rmdSrHF2cyEHXrn6pFeCROMB8GA1UdIwQY
MBaAFMPGG1HryEGA8KayMuh9+dYckPqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUt
OGY5ODI3MzQ0NzkwLzEvNUFxclN1WjFLc2NYWnpJUWRldWZxa1Y0SkU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUtOGY5ODI3MzQ0Nzkw
LzEvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQALq6zAwQB
Lq62AwQBW9KAAwQCw0VQMA0EAgACMAcDBQAqA8lAMA0GCSqGSIb3DQEBCwUAA4IB
AQBBj2pg8yNM3dUq8QlSxeKkCz/IVq2UIu2mYNtQXiNkRNWXdOcfsMazS52ZyyU7
Gd0Hg4dQe5MjiswGkBEHC+OxqDygTSHSupAzzholFaAsHPjuFhxFu4v+Gsth0D9g
N0qbC6j1ytCHKM+om4lgW2M5MWObCLoVk9/9EiaxzrxyJ6kDeBCbU6mzBwoaZwKa
DgYtI2TQu3fIcM3sy1fVlAGz1VsPsiqA10FBzGYKjcz1HSXDWJfnXw16p60bzjIV
UuK1067TfxOGsnnG6KWNo38CaPkIjqdqVRwX3OImHnu2/pHqa58rLn+54GRChngn
LHMy3a1zO3MrlErnqgmbJUlC
-----END CERTIFICATE-----
Generated at Sun Jul 14 08:35:22 2024 by rpki-client on console.sobornost.net