Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/30Cs4sdik0xoPDhmF8vFWjEObY0.roa
File: 30Cs4sdik0xoPDhmF8vFWjEObY0.roa (raw, json)
Hash identifier: aVXeQEwPW7mNXOFHl5VtrAEFc8elRyNUFTuXiMnRkm0=
Subject key identifier: DF:40:AC:E2:C7:62:93:4C:68:3C:38:66:17:CB:C5:5A:31:0E:6D:8D
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0193B5B118AE3483180F3851BBBC704FD755
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/30Cs4sdik0xoPDhmF8vFWjEObY0.roa
Signing time: Wed 11 Dec 2024 12:28:22 +0000
ROA not before: Wed 11 Dec 2024 12:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.151.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.81.0/24 maxlen: 24
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:b1:18:ae:34:83:18:0f:38:51:bb:bc:70:4f:d7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 11 12:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df40ace2c762934c683c386617cbc55a310e6d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:87:ee:3c:ff:ac:9c:08:0a:f9:62:4b:12:
f3:14:76:d6:d0:8d:a8:75:83:ab:7c:b6:1c:7e:bd:
da:01:5e:91:29:c6:16:79:cf:90:c4:3a:0f:92:c2:
7b:9b:73:28:19:4b:a2:ac:2b:03:1b:cb:b8:3a:75:
b4:49:6d:04:42:7d:4b:8f:88:18:fe:ad:26:a5:18:
0a:c8:2f:89:c0:50:af:e4:26:cc:6b:3d:12:d7:ef:
0f:6c:20:4e:02:db:7b:ca:ff:93:4f:97:c8:62:07:
be:34:b4:47:93:8a:6a:66:dd:17:ae:48:9d:0f:30:
6a:42:5e:bf:fb:64:2e:3b:24:46:b4:d8:b1:94:7d:
91:6c:31:47:9a:b2:70:10:d1:08:0f:4d:04:39:a2:
cd:c9:e9:77:07:cf:b7:ee:43:e2:d4:6c:7a:84:54:
b6:80:13:fd:66:f6:5e:54:4d:4b:5b:63:9e:9e:9a:
b4:1d:39:cb:a7:87:e1:ea:f9:9b:5a:af:38:0b:4e:
7c:35:eb:6b:a7:53:96:8e:79:a7:24:97:3c:2c:b0:
5b:77:7c:dd:bf:e6:7e:5f:1b:74:11:7c:57:fb:72:
a1:5e:67:b4:26:91:42:ea:40:e2:45:ea:2c:c8:0e:
0c:1e:3f:51:2f:17:99:eb:5a:3d:2c:51:8d:99:66:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:40:AC:E2:C7:62:93:4C:68:3C:38:66:17:CB:C5:5A:31:0E:6D:8D
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/30Cs4sdik0xoPDhmF8vFWjEObY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/24
46.38.151.0/24
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
61:19:a3:ee:af:59:5e:eb:f0:15:c5:a4:b9:71:de:55:08:75:
1b:c2:48:81:79:f6:a0:2f:7f:c1:f0:ca:6a:8b:86:73:4a:12:
61:1d:63:51:7c:ec:3f:a8:71:32:30:cd:7c:40:02:1c:90:63:
49:c1:8b:f2:13:c4:8e:ec:a2:aa:7e:f2:5b:96:46:3f:2f:83:
9e:41:78:d6:ed:81:f4:cf:4c:4f:2a:13:95:2d:ec:75:1e:ba:
2a:f5:4f:7a:7b:28:26:c1:1d:72:00:9e:45:80:78:87:75:ca:
56:de:f5:99:97:18:d5:d3:e4:17:41:72:d8:fd:93:d4:2c:75:
c6:2b:2f:84:0c:49:8f:aa:dc:2e:6c:92:2b:14:9a:2c:ed:83:
4a:76:8c:59:b5:77:99:92:03:e6:6f:04:f0:d5:7b:c0:bb:33:
38:6f:44:a5:2b:98:73:f0:9f:15:45:75:6d:35:6c:af:3b:33:
7a:38:76:be:96:91:cb:7c:f3:71:7f:19:b8:93:3c:cb:58:82:
7e:2d:1e:ef:23:c3:44:59:28:14:40:6e:5e:4a:05:39:5d:b5:
d0:08:73:f2:0b:ca:44:a8:68:99:95:b9:c3:73:f4:fa:09:d1:
ff:4c:45:25:6c:5d:8f:04:e2:29:44:bc:b3:f3:18:5c:78:fc:
e0:cc:8b:a9
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZO1sRiuNIMYDzhRu7xwT9dVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQxMjExMTIyODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjQwYWNlMmM3NjI5MzRjNjgzYzM4NjYxN2NiYzU1YTMxMGU2ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aCH7jz/rJwICvliSxLzFHbW0I2o
dYOrfLYcfr3aAV6RKcYWec+QxDoPksJ7m3MoGUuirCsDG8u4OnW0SW0EQn1Lj4gY
/q0mpRgKyC+JwFCv5CbMaz0S1+8PbCBOAtt7yv+TT5fIYge+NLRHk4pqZt0Xrkid
DzBqQl6/+2QuOyRGtNixlH2RbDFHmrJwENEID00EOaLNyel3B8+37kPi1Gx6hFS2
gBP9ZvZeVE1LW2Oenpq0HTnLp4fh6vmbWq84C058Netrp1OWjnmnJJc8LLBbd3zd
v+Z+Xxt0EXxX+3KhXme0JpFC6kDiReosyA4MHj9RLxeZ61o9LFGNmWbXgQIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFN9ArOLHYpNMaDw4ZhfLxVoxDm2NMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvMzBDczRzZGlrMHhvUERobUY4dkZXakVPYlkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQALiaBAwQA
LiaDAwQALiaMAwQALiaXAwQAuRiWAwQBuR3cAwQF1BBAAwQF1FAAMA0EAgACMAcD
BQMqAH2AMA0GCSqGSIb3DQEBCwUAA4IBAQBhGaPur1le6/AVxaS5cd5VCHUbwkiB
efagL3/B8Mpqi4ZzShJhHWNRfOw/qHEyMM18QAIckGNJwYvyE8SO7KKqfvJblkY/
L4OeQXjW7YH0z0xPKhOVLex1Hroq9U96eygmwR1yAJ5FgHiHdcpW3vWZlxjV0+QX
QXLY/ZPULHXGKy+EDEmPqtwubJIrFJos7YNKdoxZtXeZkgPmbwTw1XvAuzM4b0Sl
K5hz8J8VRXVtNWyvOzN6OHa+lpHLfPNxfxm4kzzLWIJ+LR7vI8NEWSgUQG5eSgU5
XbXQCHPyC8pEqGiZlbnDc/T6CdH/TEUlbF2PBOIpRLyz8xhcePzgzIup
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net