Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/4hV-WauH8aRe-matXISwnBbj0aE.roa
File: 4hV-WauH8aRe-matXISwnBbj0aE.roa (raw, json)
Hash identifier: blgTAYOtumzmTFxOPJSBWjRdn4nDb+K3lNVcRzjkJbI=
Subject key identifier: E2:15:7E:59:AB:87:F1:A4:5E:FA:66:AD:5C:84:B0:9C:16:E3:D1:A1
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 0190E0114868ED71968B467E19031A9DDC4A
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/4hV-WauH8aRe-matXISwnBbj0aE.roa
Signing time: Tue 23 Jul 2024 14:49:07 +0000
ROA not before: Tue 23 Jul 2024 14:49:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1820
IP address blocks: 31.172.136.0/21 maxlen: 32
80.92.224.0/20 maxlen: 32
82.117.229.0/24 maxlen: 32
85.90.223.0/24 maxlen: 32
91.231.127.0/24 maxlen: 32
92.60.176.0/20 maxlen: 32
92.119.220.0/22 maxlen: 32
128.0.168.0/21 maxlen: 32
185.38.208.0/23 maxlen: 32
185.39.196.0/22 maxlen: 32
193.111.0.0/23 maxlen: 32
193.111.48.0/22 maxlen: 32
212.110.129.0/24 maxlen: 32
212.110.130.0/23 maxlen: 32
212.110.132.0/23 maxlen: 32
212.110.136.0/22 maxlen: 32
212.110.140.0/23 maxlen: 32
212.110.154.0/23 maxlen: 32
217.20.160.0/19 maxlen: 32
2a01:6b0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e0:11:48:68:ed:71:96:8b:46:7e:19:03:1a:9d:dc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jul 23 14:49:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2157e59ab87f1a45efa66ad5c84b09c16e3d1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:77:6b:3d:c9:db:85:86:86:09:1d:7c:90:
6a:81:45:4b:bb:cf:4a:67:7e:c4:e9:6b:7d:f0:95:
db:12:c7:9f:45:e4:46:9b:dd:a2:1f:ae:a1:ea:8d:
99:80:5d:a6:c7:5f:1a:87:15:f9:3b:eb:d8:0b:bf:
e1:71:d6:74:ab:be:0e:cb:5d:17:03:61:42:af:4f:
f1:24:2b:47:35:32:34:19:28:c5:43:3b:f4:34:f2:
28:28:01:84:a0:15:10:fb:30:d5:f8:ff:66:81:1a:
27:e3:07:a2:8f:3d:f2:82:33:4f:e7:e2:cb:01:1b:
c9:b2:06:ac:38:49:4f:26:0e:47:c3:be:9c:5c:eb:
07:b9:8b:62:ed:bc:79:0c:7f:73:19:aa:86:5a:77:
53:5d:2c:88:e5:9c:e1:38:b5:a6:2a:4e:6c:a2:a0:
71:b4:00:db:d0:e8:8c:62:ef:fa:f8:77:d8:b2:f6:
db:cd:9c:2f:64:c2:ba:89:7c:38:84:b1:a1:f6:cf:
ea:e9:e6:bc:e4:11:57:bc:b4:94:42:87:ea:1d:d5:
ac:ec:20:7c:8f:8d:de:11:e9:07:a1:32:44:ce:0a:
ea:c6:16:40:91:39:91:fe:fa:0d:b7:ca:f4:d1:de:
99:ee:ba:dd:14:62:98:e9:ad:2c:b9:c4:d5:6f:73:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:15:7E:59:AB:87:F1:A4:5E:FA:66:AD:5C:84:B0:9C:16:E3:D1:A1
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/4hV-WauH8aRe-matXISwnBbj0aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.136.0/21
80.92.224.0/20
82.117.229.0/24
85.90.223.0/24
91.231.127.0/24
92.60.176.0/20
92.119.220.0/22
128.0.168.0/21
185.38.208.0/23
185.39.196.0/22
193.111.0.0/23
193.111.48.0/22
212.110.129.0-212.110.133.255
212.110.136.0-212.110.141.255
212.110.154.0/23
217.20.160.0/19
IPv6:
2a01:6b0::/32
Signature Algorithm: sha256WithRSAEncryption
18:c0:93:8e:6b:23:5a:67:66:1f:68:f2:53:19:c4:63:c0:44:
af:93:9a:8a:8e:97:1d:92:20:8f:88:87:00:ef:01:ea:07:a7:
74:ab:15:15:43:47:03:bb:93:c1:ba:05:c9:6b:01:11:e1:5c:
c9:21:d1:42:2b:35:11:7b:09:a2:47:3e:2f:5c:09:06:95:08:
cb:f0:77:7f:8c:d3:1a:e4:cf:c1:8f:d7:96:1f:50:8a:a8:55:
e3:68:50:59:03:03:49:97:13:d2:66:fb:0f:2e:9a:d1:42:8c:
46:73:c5:29:8f:d5:cd:36:4c:ad:9c:99:1d:16:28:14:52:60:
88:86:4e:6e:cc:06:f0:df:63:3e:21:c4:83:86:4a:cd:d4:36:
45:1a:cd:d8:b3:22:e6:92:e3:ce:95:51:aa:a9:3e:e9:06:8f:
16:75:a0:ff:d4:e9:30:ae:97:aa:32:88:65:7a:d2:c7:f5:51:
84:0a:34:0e:b6:b9:d5:37:0f:71:e6:23:16:35:7d:be:46:e2:
88:72:cb:cc:c4:fe:d6:13:25:74:4e:b4:95:f1:ac:60:13:56:
11:fe:d7:ad:0a:d6:2e:ab:4a:62:3b:d1:fd:ad:9b:3b:d8:e4:
73:99:3b:70:82:96:67:1e:06:43:a1:fc:e2:ec:05:b8:6d:e2:
06:f3:c3:b2
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZDgEUho7XGWi0Z+GQMandxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODcxNDJiZGMyYjNmMGQwODQ4YTBkODAwYjY5MzBiMWFi
YjM0YmMwHhcNMjQwNzIzMTQ0OTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjE1N2U1OWFiODdmMWE0NWVmYTY2YWQ1Yzg0YjA5YzE2ZTNkMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyt3az3J24WGhgkdfJBqgUVLu89K
Z37E6Wt98JXbEsefReRGm92iH66h6o2ZgF2mx18ahxX5O+vYC7/hcdZ0q74Oy10X
A2FCr0/xJCtHNTI0GSjFQzv0NPIoKAGEoBUQ+zDV+P9mgRon4weijz3ygjNP5+LL
ARvJsgasOElPJg5Hw76cXOsHuYti7bx5DH9zGaqGWndTXSyI5ZzhOLWmKk5soqBx
tADb0OiMYu/6+HfYsvbbzZwvZMK6iXw4hLGh9s/q6ea85BFXvLSUQofqHdWs7CB8
j43eEekHoTJEzgrqxhZAkTmR/voNt8r00d6Z7rrdFGKY6a0sucTVb3MkHQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFOIVflmrh/GkXvpmrVyEsJwW49GhMB8GA1UdIwQY
MBaAFA2HFCvcKz8NCEig2AC2kwsauzS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQt
YTMxNzA4ZDQwMzkxLzEvNGhWLVdhdUg4YVJlLW1hdFhJU3duQmJqMGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQtYTMxNzA4ZDQwMzkx
LzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzB2BAIAATBwAwQDH6yI
AwQEUFzgAwQAUnXlAwQAVVrfAwQAW+d/AwQEXDywAwQCXHfcAwQDgACoAwQBuSbQ
AwQCuSfEAwQBwW8AAwQCwW8wMAwDBADUboEDBAHUboQwDAMEA9RuiAMEAdRujAME
AdRumgMEBdkUoDANBAIAAjAHAwUAKgEGsDANBgkqhkiG9w0BAQsFAAOCAQEAGMCT
jmsjWmdmH2jyUxnEY8BEr5Oaio6XHZIgj4iHAO8B6gendKsVFUNHA7uTwboFyWsB
EeFcySHRQis1EXsJokc+L1wJBpUIy/B3f4zTGuTPwY/Xlh9QiqhV42hQWQMDSZcT
0mb7Dy6a0UKMRnPFKY/VzTZMrZyZHRYoFFJgiIZObswG8N9jPiHEg4ZKzdQ2RRrN
2LMi5pLjzpVRqqk+6QaPFnWg/9TpMK6XqjKIZXrSx/VRhAo0Dra51TcPceYjFjV9
vkbiiHLLzMT+1hMldE60lfGsYBNWEf7XrQrWLqtKYjvR/a2bO9jkc5k7cIKWZx4G
Q6H84uwFuG3iBvPDsg==
-----END CERTIFICATE-----
Generated at Wed Sep 11 05:47:52 2024 by rpki-client on console.sobornost.net