Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/sSFOwbSXFWPfUxeJi0BxzKUvPGU.roa
File: sSFOwbSXFWPfUxeJi0BxzKUvPGU.roa (raw, json)
Hash identifier: dSsxj+C0NgKOZqW8Uxwyr8Yar0W/M9Nleu7tnHVhh5k=
Subject key identifier: B1:21:4E:C1:B4:97:15:63:DF:53:17:89:8B:40:71:CC:A5:2F:3C:65
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 0193DB1CE45A213DE11CEE97FA39D1BDBFAC
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/sSFOwbSXFWPfUxeJi0BxzKUvPGU.roa
Signing time: Wed 18 Dec 2024 18:52:03 +0000
ROA not before: Wed 18 Dec 2024 18:52:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198430
IP address blocks: 46.174.168.0/21 maxlen: 24
46.174.169.0/24 maxlen: 24
91.234.252.0/23 maxlen: 24
91.237.172.0/23 maxlen: 24
91.239.28.0/22 maxlen: 24
91.246.168.0/22 maxlen: 24
193.150.50.0/23 maxlen: 24
194.28.228.0/22 maxlen: 24
2001:678:d40::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:db:1c:e4:5a:21:3d:e1:1c:ee:97:fa:39:d1:bd:bf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Dec 18 18:52:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1214ec1b4971563df5317898b4071cca52f3c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:e4:5b:71:33:46:ab:76:52:78:40:aa:e3:
ab:cb:f1:d9:6e:f7:4c:0b:fb:40:e8:ff:1a:8e:86:
bf:0d:5f:6b:c6:7d:69:cf:b4:6f:40:4e:71:f5:c0:
7a:6a:af:9a:3e:cd:ad:e7:b6:c3:33:e5:f3:10:c8:
d4:e2:19:ef:0b:ba:44:3e:1f:d7:ae:8a:35:49:3b:
03:5f:e8:4d:83:66:94:b2:4c:71:24:14:98:19:e8:
54:2c:3f:05:1e:dd:40:4b:a8:24:c1:3f:52:8a:e5:
f0:d0:7b:a6:a5:54:1c:d6:be:28:2a:df:31:5f:1e:
ba:40:02:95:dd:d9:2f:bc:43:80:2f:d6:99:32:ca:
20:51:75:29:47:b1:cd:dc:58:7e:96:49:be:02:24:
cd:63:ac:3c:5c:9f:a2:ee:4e:4e:0b:31:4e:0d:a1:
26:2d:52:87:98:48:e9:ea:93:a2:4b:52:1f:fb:84:
49:00:27:0b:f4:1a:dd:02:18:18:2f:a2:99:54:6b:
2d:7f:1f:6b:da:8b:7c:d6:3e:fa:0f:e2:7b:f0:a3:
22:f8:7f:e5:4c:57:0e:ae:f1:2f:35:b1:db:1c:d3:
e0:a4:9e:f8:bd:3b:e6:74:d8:19:ad:3b:3f:e2:8e:
12:d4:11:4e:4a:d7:ab:ab:80:b5:1a:bf:9b:44:f4:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:21:4E:C1:B4:97:15:63:DF:53:17:89:8B:40:71:CC:A5:2F:3C:65
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/sSFOwbSXFWPfUxeJi0BxzKUvPGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.168.0/21
91.234.252.0/23
91.237.172.0/23
91.239.28.0/22
91.246.168.0/22
193.150.50.0/23
194.28.228.0/22
IPv6:
2001:678:d40::/48
Signature Algorithm: sha256WithRSAEncryption
41:da:c5:7d:d9:f4:78:7d:c8:26:53:ba:e7:8e:52:f2:86:45:
f9:0c:16:da:c8:a4:de:72:12:d8:eb:0d:8f:d9:59:5a:d9:9e:
67:1c:5c:09:3d:2d:c2:ce:ae:b7:37:bb:5b:f7:ea:3d:57:ed:
ae:1d:32:07:70:5c:53:40:6e:2b:d3:52:b8:7a:25:e2:62:16:
1a:c0:58:79:16:0d:a2:0f:13:59:3f:92:d1:c7:8e:e5:c6:b5:
a9:12:47:8a:0a:33:86:0d:6d:e9:27:f8:96:8a:ee:e9:81:68:
aa:f8:40:11:a3:da:2d:05:8d:a0:3a:99:ed:64:ee:bb:6c:bd:
9c:81:9d:b4:9e:59:b9:c4:6e:89:af:f2:3d:1b:4e:f9:18:91:
82:19:b4:cb:85:bb:b0:75:d6:84:62:26:e1:b2:c0:12:d1:07:
e4:84:69:69:19:34:38:31:c4:70:ed:74:72:ae:39:0f:3b:85:
79:1b:6f:a5:cf:c3:49:df:8c:f2:84:01:8a:55:75:d7:a3:1c:
e8:b0:b8:eb:83:17:c7:e5:f9:12:a6:c9:36:66:08:cd:29:9b:
9d:91:39:7d:86:44:b0:31:41:41:14:de:bd:76:60:ff:33:f2:
f9:67:8b:b3:eb:e9:41:85:18:31:5c:bd:3b:66:b1:3f:40:08:
4e:6a:0a:f6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZPbHORaIT3hHO6X+jnRvb+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiY2IxMjdjN2NkNzc4NjA3Mjk2Yjg4Mzg2ZTg5NGFlMWRl
Mzg1YmYwHhcNMjQxMjE4MTg1MjAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTIxNGVjMWI0OTcxNTYzZGY1MzE3ODk4YjQwNzFjY2E1MmYzYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sTkW3EzRqt2UnhAquOry/HZbvdM
C/tA6P8ajoa/DV9rxn1pz7RvQE5x9cB6aq+aPs2t57bDM+XzEMjU4hnvC7pEPh/X
roo1STsDX+hNg2aUskxxJBSYGehULD8FHt1AS6gkwT9SiuXw0HumpVQc1r4oKt8x
Xx66QAKV3dkvvEOAL9aZMsogUXUpR7HN3Fh+lkm+AiTNY6w8XJ+i7k5OCzFODaEm
LVKHmEjp6pOiS1If+4RJACcL9BrdAhgYL6KZVGstfx9r2ot81j76D+J78KMi+H/l
TFcOrvEvNbHbHNPgpJ74vTvmdNgZrTs/4o4S1BFOSterq4C1Gr+bRPSLOwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFLEhTsG0lxVj31MXiYtAccylLzxlMB8GA1UdIwQY
MBaAFHvLEnx813hgcpa4g4bolK4d44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWIt
MmUyMGE3OWY3MTQ1LzEvc1NGT3diU1hGV1BmVXhlSmkwQnh6S1V2UEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWItMmUyMGE3OWY3MTQ1
LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAwBAIAATAqAwQDLq6oAwQB
W+r8AwQBW+2sAwQCW+8cAwQCW/aoAwQBwZYyAwQCwhzkMA8EAgACMAkDBwAgAQZ4
DUAwDQYJKoZIhvcNAQELBQADggEBAEHaxX3Z9Hh9yCZTuueOUvKGRfkMFtrIpN5y
EtjrDY/ZWVrZnmccXAk9LcLOrrc3u1v36j1X7a4dMgdwXFNAbivTUrh6JeJiFhrA
WHkWDaIPE1k/ktHHjuXGtakSR4oKM4YNbekn+JaK7umBaKr4QBGj2i0FjaA6me1k
7rtsvZyBnbSeWbnEbomv8j0bTvkYkYIZtMuFu7B11oRiJuGywBLRB+SEaWkZNDgx
xHDtdHKuOQ87hXkbb6XPw0nfjPKEAYpVddejHOiwuOuDF8fl+RKmyTZmCM0pm52R
OX2GRLAxQUEU3r12YP8z8vlni7Pr6UGFGDFcvTtmsT9ACE5qCvY=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:29 2024 by rpki-client on console.sobornost.net