Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/_Lp28N5uSIsMygtBTs2j8aSjatA.roa
File: _Lp28N5uSIsMygtBTs2j8aSjatA.roa (raw, json)
Hash identifier: TsUMRvL0QS251fu6aevz87QvZZIW8eHWURsmjwWdw7Y=
Subject key identifier: FC:BA:76:F0:DE:6E:48:8B:0C:CA:0B:41:4E:CD:A3:F1:A4:A3:6A:D0
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 018CC6B7E87413E22C85CE6B2665B1D4AC8D
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/_Lp28N5uSIsMygtBTs2j8aSjatA.roa
Signing time: Mon 01 Jan 2024 20:29:50 +0000
ROA not before: Mon 01 Jan 2024 20:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204144
IP address blocks: 45.85.212.0/22 maxlen: 22
193.108.183.0/24 maxlen: 24
45.80.240.0/22 maxlen: 22
45.88.252.0/22 maxlen: 22
193.108.198.0/24 maxlen: 24
193.108.208.0/24 maxlen: 24
193.108.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:e8:74:13:e2:2c:85:ce:6b:26:65:b1:d4:ac:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 1 20:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcba76f0de6e488b0cca0b414ecda3f1a4a36ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:b0:78:90:6f:85:ca:bb:20:3f:1c:17:38:
8e:1b:d0:7d:c1:64:6b:7a:07:70:5f:d4:ef:b6:72:
a0:5f:a2:45:90:f7:97:76:59:40:30:d0:ac:12:e9:
f9:20:67:ae:48:28:61:16:0e:8d:3c:cd:e5:88:b7:
89:17:10:4f:ee:0f:27:8b:31:66:fe:ae:9e:dc:69:
5a:5d:77:82:70:2d:d5:cb:21:22:85:a3:df:9c:65:
6f:e1:fa:f6:b9:4f:2d:d2:e9:18:9a:72:17:7f:41:
5a:42:2c:27:b4:31:36:73:5b:61:09:7f:bc:88:90:
8f:82:ed:2b:d3:09:9c:46:82:7e:e5:2d:b8:40:29:
a8:30:13:24:ca:c8:12:c5:d8:06:98:fb:83:ed:79:
35:3c:a7:d8:d3:62:78:f8:b2:a9:15:3c:0c:f1:84:
15:7d:6c:e8:e3:41:31:46:30:c3:f2:af:b2:12:34:
02:a0:4f:10:ee:90:09:f3:72:ad:7d:72:a6:c4:47:
d4:66:98:5b:c4:68:5d:ac:e9:b2:12:81:71:ed:12:
e9:7f:2b:ef:6e:06:0f:b5:19:f6:a1:8f:ab:54:a3:
52:97:0a:54:29:f2:e0:da:79:af:10:27:52:75:e7:
69:74:02:49:0c:73:b8:d3:66:42:54:89:2a:3d:fe:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BA:76:F0:DE:6E:48:8B:0C:CA:0B:41:4E:CD:A3:F1:A4:A3:6A:D0
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/_Lp28N5uSIsMygtBTs2j8aSjatA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.240.0/22
45.85.212.0/22
45.88.252.0/22
193.108.183.0/24
193.108.198.0/24
193.108.208.0/24
193.108.211.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a9:ad:3a:eb:59:be:0a:8b:67:7b:fe:09:7b:48:c4:b6:19:
7c:a8:1a:fc:54:fd:7d:5c:f8:bc:b4:22:3e:7c:d6:ee:45:ed:
b1:49:82:80:24:2a:2e:71:90:d3:c1:61:e6:99:60:72:c5:9f:
59:18:e3:77:0c:4c:01:71:1b:98:36:55:b9:70:e3:dd:95:b4:
92:e8:0d:3a:ba:44:50:4c:07:2d:5b:78:3f:ae:10:56:0e:c7:
64:fe:86:c0:d6:21:99:31:45:3a:41:6a:9f:26:ad:0d:93:f5:
9c:92:8e:09:fc:29:24:ba:2b:0d:41:89:3d:79:e3:3e:22:fc:
14:85:c6:b0:74:65:8f:25:ea:50:2a:55:db:e2:86:b1:de:56:
4d:40:26:b6:dc:ec:77:d8:c2:78:aa:90:54:2f:2f:e1:ae:89:
ec:c6:2a:0d:27:7a:75:47:dc:23:1d:33:6c:4f:ad:ad:40:4f:
18:09:59:d5:b0:ad:a5:aa:8a:b2:05:4a:7d:0a:45:4e:5e:2a:
0f:6a:72:ee:3d:39:51:6d:c2:3b:69:d7:0a:a5:86:1e:26:60:
34:e0:31:f8:66:06:ab:c6:d5:6a:87:49:28:47:07:16:e1:64:
ab:49:8b:84:f7:5c:73:cb:d3:87:56:bd:ac:52:99:3c:27:e3:
cf:61:af:ec
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzGt+h0E+Ishc5rJmWx1KyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx
YTA0MTAwHhcNMjQwMTAxMjAyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2JhNzZmMGRlNmU0ODhiMGNjYTBiNDE0ZWNkYTNmMWE0YTM2YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm02weJBvhcq7ID8cFziOG9B9wWRr
egdwX9TvtnKgX6JFkPeXdllAMNCsEun5IGeuSChhFg6NPM3liLeJFxBP7g8nizFm
/q6e3GlaXXeCcC3VyyEihaPfnGVv4fr2uU8t0ukYmnIXf0FaQiwntDE2c1thCX+8
iJCPgu0r0wmcRoJ+5S24QCmoMBMkysgSxdgGmPuD7Xk1PKfY02J4+LKpFTwM8YQV
fWzo40ExRjDD8q+yEjQCoE8Q7pAJ83KtfXKmxEfUZphbxGhdrOmyEoFx7RLpfyvv
bgYPtRn2oY+rVKNSlwpUKfLg2nmvECdSdedpdAJJDHO402ZCVIkqPf67WQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPy6dvDebkiLDMoLQU7No/Gko2rQMB8GA1UdIwQY
MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt
YTA1NjBhYzgyYmE3LzEvX0xwMjhONXVTSXNNeWd0QlRzMmo4YVNqYXRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3
LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLVDwAwQC
LVXUAwQCLVj8AwQAwWy3AwQAwWzGAwQAwWzQAwQAwWzTMA0GCSqGSIb3DQEBCwUA
A4IBAQAxqa0661m+Cotne/4Je0jEthl8qBr8VP19XPi8tCI+fNbuRe2xSYKAJCou
cZDTwWHmmWByxZ9ZGON3DEwBcRuYNlW5cOPdlbSS6A06ukRQTActW3g/rhBWDsdk
/obA1iGZMUU6QWqfJq0Nk/Wcko4J/CkkuisNQYk9eeM+IvwUhcawdGWPJepQKlXb
4oax3lZNQCa23Ox32MJ4qpBULy/hronsxioNJ3p1R9wjHTNsT62tQE8YCVnVsK2l
qoqyBUp9CkVOXioPanLuPTlRbcI7adcKpYYeJmA04DH4ZgarxtVqh0koRwcW4WSr
SYuE91xzy9OHVr2sUpk8J+PPYa/s
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:26 2024 by rpki-client on console.sobornost.net