Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/HIRrpKb6RNSJWeknZ9eHlyzha_E.roa
File: HIRrpKb6RNSJWeknZ9eHlyzha_E.roa (raw, json)
Hash identifier: XhtUmp/kRkPAxYpuBL863V4xP2i+j3Q0NvgSKSeLg8Q=
Subject key identifier: 1C:84:6B:A4:A6:FA:44:D4:89:59:E9:27:67:D7:87:97:2C:E1:6B:F1
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0190BFD43728312250D753393EB748BDA9F9
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/HIRrpKb6RNSJWeknZ9eHlyzha_E.roa
Signing time: Wed 17 Jul 2024 08:34:34 +0000
ROA not before: Wed 17 Jul 2024 08:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203744
IP address blocks: 45.131.116.0/24 maxlen: 24
45.131.117.0/24 maxlen: 24
45.131.119.0/24 maxlen: 24
89.111.240.0/24 maxlen: 24
185.125.120.0/22 maxlen: 22
185.125.120.0/24 maxlen: 24
185.125.121.0/24 maxlen: 24
185.125.122.0/24 maxlen: 24
185.125.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:d4:37:28:31:22:50:d7:53:39:3e:b7:48:bd:a9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jul 17 08:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c846ba4a6fa44d48959e92767d787972ce16bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:16:e2:fb:48:d6:5e:5a:be:9b:f2:22:6e:
23:af:c3:69:76:b3:4f:6b:69:cb:57:72:28:f1:41:
a5:3f:8e:58:7b:d4:ee:3e:02:c2:cf:b7:da:b8:6f:
6f:93:ea:3b:1d:1b:5c:c3:8a:eb:a7:57:92:5c:7c:
69:54:84:c0:24:fd:c9:cf:e6:41:e4:22:5b:9e:fd:
4b:ac:5c:cf:15:ff:c2:08:53:ab:19:46:e6:c7:e3:
ab:51:cf:d7:9b:06:68:3d:34:43:3b:d7:8d:91:3d:
ed:53:8f:77:3f:22:38:4b:c7:5a:b2:70:39:99:af:
7f:f3:25:31:dd:e7:15:4f:1f:0c:09:04:c4:7d:f9:
58:1c:91:80:58:72:48:2b:55:5c:8b:3e:43:2f:7b:
6c:96:01:a6:b6:ab:37:dc:70:9c:e5:91:64:ea:64:
46:4e:46:b7:b8:59:5e:c4:cc:f8:74:91:fa:1b:ed:
db:eb:1c:0f:5e:28:3e:af:34:80:b7:be:a0:32:4d:
30:78:b2:6b:d9:f5:14:2c:47:ab:23:26:12:1c:5f:
63:b3:b7:e9:21:83:68:ba:3b:e8:27:32:f8:0a:db:
a5:ce:41:c4:7a:b3:a1:5c:2e:d9:5e:47:f6:d9:20:
00:a0:d3:be:2b:d3:e5:8b:ff:e2:a8:f9:0a:4e:f0:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:84:6B:A4:A6:FA:44:D4:89:59:E9:27:67:D7:87:97:2C:E1:6B:F1
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/HIRrpKb6RNSJWeknZ9eHlyzha_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.116.0/23
45.131.119.0/24
89.111.240.0/24
185.125.120.0/22
Signature Algorithm: sha256WithRSAEncryption
49:83:e1:e9:42:88:bb:62:62:5c:de:f3:9f:bb:5e:3d:ba:47:
ec:01:e5:dd:82:b4:a1:ff:b0:08:39:d8:c5:3e:f8:be:bb:23:
e6:f6:b6:b8:51:76:45:6e:58:78:92:02:a4:26:c7:1e:03:e7:
1d:9f:9f:8c:42:af:05:24:52:0c:7e:1b:ad:3b:6a:67:f3:cd:
22:a6:99:81:1a:f6:6e:38:60:6a:2b:3c:52:15:97:cd:dc:4c:
db:c5:da:d3:df:c0:a2:66:84:1a:04:4c:14:d1:92:fe:74:64:
8c:e7:74:ea:be:09:ae:77:10:2e:40:0b:ea:5d:f5:9f:cd:f2:
48:f0:70:7e:1b:4a:7a:4d:b2:da:9f:c6:2e:ec:26:4a:8e:9a:
8b:55:31:8d:04:1f:4e:84:c7:a9:1a:d3:c7:7c:8e:0d:95:23:
8b:07:60:74:46:a0:41:76:05:23:74:49:7a:72:75:06:a4:12:
83:2b:4e:24:6d:d3:68:b1:0e:68:bd:8a:7c:bb:3f:69:bc:bf:
1c:ae:b0:8d:59:ca:9d:12:d8:86:9e:33:be:70:4a:e5:76:f4:
fb:ac:fe:ee:d6:3b:6e:1e:91:2f:61:30:50:9a:75:cf:77:82:
a6:fc:b1:36:19:d4:df:4f:f5:5a:08:6c:ec:9d:f6:f9:48:96:
f4:b2:36:a3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZC/1DcoMSJQ11M5PrdIvan5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1
ZGVlZTgwHhcNMjQwNzE3MDgzNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzg0NmJhNGE2ZmE0NGQ0ODk1OWU5Mjc2N2Q3ODc5NzJjZTE2YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGoW4vtI1l5avpvyIm4jr8NpdrNP
a2nLV3Io8UGlP45Ye9TuPgLCz7fauG9vk+o7HRtcw4rrp1eSXHxpVITAJP3Jz+ZB
5CJbnv1LrFzPFf/CCFOrGUbmx+OrUc/XmwZoPTRDO9eNkT3tU493PyI4S8dasnA5
ma9/8yUx3ecVTx8MCQTEfflYHJGAWHJIK1Vciz5DL3tslgGmtqs33HCc5ZFk6mRG
Tka3uFlexMz4dJH6G+3b6xwPXig+rzSAt76gMk0weLJr2fUULEerIyYSHF9js7fp
IYNoujvoJzL4CtulzkHEerOhXC7ZXkf22SAAoNO+K9Pli//iqPkKTvB1bwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFByEa6Sm+kTUiVnpJ2fXh5cs4WvxMB8GA1UdIwQY
MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt
ZDliNTMzZjdmYmMzLzEvSElScnBLYjZSTlNKV2Vrblo5ZUhseXpoYV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz
LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYN0AwQA
LYN3AwQAWW/wAwQCuX14MA0GCSqGSIb3DQEBCwUAA4IBAQBJg+HpQoi7YmJc3vOf
u149ukfsAeXdgrSh/7AIOdjFPvi+uyPm9ra4UXZFblh4kgKkJsceA+cdn5+MQq8F
JFIMfhutO2pn880ippmBGvZuOGBqKzxSFZfN3EzbxdrT38CiZoQaBEwU0ZL+dGSM
53TqvgmudxAuQAvqXfWfzfJI8HB+G0p6TbLan8Yu7CZKjpqLVTGNBB9OhMepGtPH
fI4NlSOLB2B0RqBBdgUjdEl6cnUGpBKDK04kbdNosQ5ovYp8uz9pvL8crrCNWcqd
EtiGnjO+cErldvT7rP7u1jtuHpEvYTBQmnXPd4Km/LE2GdTfT/VaCGzsnfb5SJb0
sjaj
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net