Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/fNHQwxB7rM1gEePtfNHUTgKjnd8.roa
File: fNHQwxB7rM1gEePtfNHUTgKjnd8.roa (raw, json)
Hash identifier: b4mbHwYI8o81yqDuOVMGsaJJLFQEfa7g+h3dXnFxkbg=
Subject key identifier: 7C:D1:D0:C3:10:7B:AC:CD:60:11:E3:ED:7C:D1:D4:4E:02:A3:9D:DF
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 01935DA3B59596B9B0EC3F1941542662FD88
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/fNHQwxB7rM1gEePtfNHUTgKjnd8.roa
Signing time: Sun 24 Nov 2024 10:07:09 +0000
ROA not before: Sun 24 Nov 2024 10:07:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 91.207.60.0/24 maxlen: 24
91.217.91.0/24 maxlen: 24
176.103.48.0/20 maxlen: 20
193.169.86.0/23 maxlen: 23
2001:678:334::/48 maxlen: 48
2a13:f580:1::/48 maxlen: 48
2a13:f580:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5d:a3:b5:95:96:b9:b0:ec:3f:19:41:54:26:62:fd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Nov 24 10:07:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cd1d0c3107baccd6011e3ed7cd1d44e02a39ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:64:ff:93:3b:b1:77:d8:fa:8f:23:fb:5e:
f8:a0:04:60:04:fa:1f:cf:c1:ae:a9:9f:36:1d:2f:
a1:c8:da:ef:5f:b8:32:ec:96:c1:62:63:ab:82:2d:
f6:6d:6d:2c:37:ef:34:eb:de:ad:40:7a:e4:cf:d5:
2f:5f:93:93:76:48:99:bb:bf:46:aa:60:da:73:ad:
43:59:ca:d2:2f:53:c2:92:0c:41:95:75:22:4d:1c:
95:17:c2:5b:5f:b4:e8:b9:13:cb:13:2c:38:d9:d7:
9d:55:7f:75:28:2c:05:c6:04:df:d6:f1:0a:cd:12:
40:6b:ff:ff:2c:cf:47:0a:62:02:9e:b5:21:2a:9e:
08:af:d9:d0:d3:81:72:6c:9b:38:69:86:3b:84:90:
cf:53:85:54:a9:bf:7b:04:03:32:55:d2:51:f6:dc:
4b:e1:89:5d:db:d0:52:f5:5c:4a:25:53:9e:e6:d5:
25:03:37:da:a9:86:be:ad:eb:8a:7b:72:d5:57:66:
95:d4:d6:d1:77:24:df:7b:e1:b4:48:71:bc:2e:cf:
8d:f2:dc:2e:2a:e0:d8:82:d0:9b:35:bf:06:13:bf:
71:5a:6d:7c:65:ce:5a:61:f8:49:49:a3:b8:64:0c:
80:51:a9:93:4c:f7:ce:f6:f7:6e:b3:97:5f:bb:41:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:D0:C3:10:7B:AC:CD:60:11:E3:ED:7C:D1:D4:4E:02:A3:9D:DF
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/fNHQwxB7rM1gEePtfNHUTgKjnd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.60.0/24
91.217.91.0/24
176.103.48.0/20
193.169.86.0/23
IPv6:
2001:678:334::/48
2a13:f580:1::/48
2a13:f580:4::/48
Signature Algorithm: sha256WithRSAEncryption
68:bd:9a:44:39:28:f5:28:c2:7d:32:02:12:d9:44:19:dd:0e:
46:f7:11:ca:b5:3c:db:c2:1c:3e:68:0e:3c:6a:27:0c:f0:ed:
94:a7:c5:0b:b5:65:42:d0:3e:18:7e:8d:8a:93:e4:fc:f4:27:
e3:9d:fd:e2:53:a5:0f:b2:e6:c3:17:01:ba:f0:76:fd:28:41:
65:07:cb:95:b8:d6:17:68:78:16:c1:da:bf:81:00:f7:48:34:
7f:85:18:d5:72:86:97:57:80:16:b9:3b:35:fb:ac:bd:ca:fd:
57:7c:39:fd:2e:0d:8e:f7:4f:95:31:09:a7:0c:3b:ec:9f:e3:
66:5d:b9:b9:08:91:ac:e8:c4:8e:e5:1c:ec:5e:9a:9a:37:ee:
1c:63:ee:46:7a:8c:b0:7b:5a:27:76:34:61:63:35:d5:74:32:
02:c6:ce:0b:e8:57:c9:06:53:2c:10:58:0c:97:4e:e5:f3:d4:
22:0e:8e:db:2a:73:90:9a:15:df:3f:fb:aa:54:6b:12:e5:2b:
ea:19:b3:de:76:e9:31:f5:8c:d0:29:17:76:eb:4e:03:34:e1:
d7:4a:84:77:cb:b1:bf:42:df:01:26:e2:1e:85:5f:1f:aa:7e:
b3:af:3e:1c:5e:f9:eb:c1:ef:89:a6:4d:75:c2:0a:c3:2b:4b:
a5:00:d6:3d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZNdo7WVlrmw7D8ZQVQmYv2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw
NGU1MzgwHhcNMjQxMTI0MTAwNzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2QxZDBjMzEwN2JhY2NkNjAxMWUzZWQ3Y2QxZDQ0ZTAyYTM5ZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNpk/5M7sXfY+o8j+174oARgBPof
z8GuqZ82HS+hyNrvX7gy7JbBYmOrgi32bW0sN+80696tQHrkz9UvX5OTdkiZu79G
qmDac61DWcrSL1PCkgxBlXUiTRyVF8JbX7TouRPLEyw42dedVX91KCwFxgTf1vEK
zRJAa///LM9HCmICnrUhKp4Ir9nQ04FybJs4aYY7hJDPU4VUqb97BAMyVdJR9txL
4Yld29BS9VxKJVOe5tUlAzfaqYa+reuKe3LVV2aV1NbRdyTfe+G0SHG8Ls+N8twu
KuDYgtCbNb8GE79xWm18Zc5aYfhJSaO4ZAyAUamTTPfO9vdus5dfu0EIGwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFHzR0MMQe6zNYBHj7XzR1E4Co53fMB8GA1UdIwQY
MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt
NDIyYWVkM2E3NzAyLzEvZk5IUXd4QjdyTTFnRWVQdGZOSFVUZ0tqbmQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy
LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAeBAIAATAYAwQAW888AwQA
W9lbAwQEsGcwAwQBwalWMCEEAgACMBsDBwAgAQZ4AzQDBwAqE/WAAAEDBwAqE/WA
AAQwDQYJKoZIhvcNAQELBQADggEBAGi9mkQ5KPUown0yAhLZRBndDkb3Ecq1PNvC
HD5oDjxqJwzw7ZSnxQu1ZULQPhh+jYqT5Pz0J+Od/eJTpQ+y5sMXAbrwdv0oQWUH
y5W41hdoeBbB2r+BAPdINH+FGNVyhpdXgBa5OzX7rL3K/Vd8Of0uDY73T5UxCacM
O+yf42ZdubkIkazoxI7lHOxempo37hxj7kZ6jLB7Wid2NGFjNdV0MgLGzgvoV8kG
UywQWAyXTuXz1CIOjtsqc5CaFd8/+6pUaxLlK+oZs9526TH1jNApF3brTgM04ddK
hHfLsb9C3wEm4h6FXx+qfrOvPhxe+evB74mmTXXCCsMrS6UA1j0=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net