Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/CApQMteq8EwCJzTV7ZfORaQcoPQ.roa
File: CApQMteq8EwCJzTV7ZfORaQcoPQ.roa (raw, json)
Hash identifier: Rl61V2/zLrVDRxa/h3Bxz8Aov8+QaUd5IvAgMXBj3hM=
Subject key identifier: 08:0A:50:32:D7:AA:F0:4C:02:27:34:D5:ED:97:CE:45:A4:1C:A0:F4
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0193A7D03CBA7A0F1A136BC1D23CE5494B51
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/CApQMteq8EwCJzTV7ZfORaQcoPQ.roa
Signing time: Sun 08 Dec 2024 19:47:42 +0000
ROA not before: Sun 08 Dec 2024 19:47:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207614
IP address blocks: 45.128.236.0/22 maxlen: 24
185.133.4.0/22 maxlen: 24
185.238.84.0/22 maxlen: 24
2a0f:4200::/29 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a7:d0:3c:ba:7a:0f:1a:13:6b:c1:d2:3c:e5:49:4b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Dec 8 19:47:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=080a5032d7aaf04c022734d5ed97ce45a41ca0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:54:08:c9:2a:56:64:c1:97:0d:02:e5:b2:
5f:dc:ef:70:47:68:cc:ad:c3:35:e0:5a:bf:cd:a1:
b7:de:e9:15:e7:6d:01:a7:b4:bf:d6:a0:66:f0:e8:
6e:20:b4:a4:03:10:bf:cb:22:5b:6d:c6:e9:ec:dc:
5e:bd:b9:90:a0:c9:19:78:0f:5d:9a:5e:f3:e0:bc:
8c:8d:4d:03:68:cb:f1:1f:ab:fa:4a:1e:f1:42:1a:
0a:b7:b8:83:a2:40:1b:30:3e:e6:99:62:ef:06:f5:
cc:13:18:45:b5:6e:2f:93:08:e3:a8:e5:8f:36:5d:
2d:e2:cf:d6:41:0e:64:15:3a:1c:ef:63:d2:bd:25:
9b:af:d4:cf:af:3b:41:7a:48:32:75:61:c5:07:e0:
b5:64:74:b7:37:ad:62:58:7c:35:0f:e0:ea:e8:6e:
8f:39:22:ae:2d:72:17:64:e5:e2:58:75:15:9f:4e:
d4:0c:38:63:58:2a:47:12:2e:dc:df:e5:90:6f:7a:
73:22:19:7f:b7:bc:d2:9e:ce:b2:86:08:d9:de:d4:
f9:2a:d1:05:9f:e6:6d:b3:e7:ae:5b:47:83:07:48:
9b:69:5e:52:89:b5:c1:51:99:b0:96:ab:1c:bc:f6:
1e:7e:d4:95:8d:b2:1c:d7:26:4c:ce:8d:c1:ef:6a:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0A:50:32:D7:AA:F0:4C:02:27:34:D5:ED:97:CE:45:A4:1C:A0:F4
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/CApQMteq8EwCJzTV7ZfORaQcoPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.236.0/22
185.133.4.0/22
185.238.84.0/22
IPv6:
2a0f:4200::/29
Signature Algorithm: sha256WithRSAEncryption
27:0d:39:88:3a:3e:37:25:40:89:4e:47:a8:c2:a1:ce:6c:ae:
3e:da:31:87:b2:12:43:ba:81:39:94:df:7d:76:b3:b7:7d:79:
3c:70:bb:5f:a0:34:cd:ce:c5:b1:60:a9:3c:e4:c9:f3:98:ab:
31:f4:7b:64:30:27:9d:76:f6:07:1d:0c:14:3d:31:bd:b8:7b:
85:2f:dc:cf:0c:40:39:9e:7f:ca:e1:df:c7:e2:10:3e:b3:bf:
8a:18:1b:58:92:20:89:6b:a5:f0:a0:8d:42:19:f3:ab:7e:31:
2c:fe:f0:3f:79:69:9c:c2:2a:2c:9d:bb:10:cc:7e:5c:67:dc:
2c:9a:21:7f:f8:c0:e3:82:ce:a9:e4:4e:93:34:d0:61:a4:6a:
b1:bc:07:96:71:1e:7a:f0:fd:7f:4a:2d:79:da:29:33:54:3f:
8c:52:6a:6d:f9:28:8e:d6:3a:dc:bf:71:7d:d5:f6:e9:26:4d:
d2:7d:7b:54:3b:a8:48:2e:87:cd:7e:a5:e2:65:90:27:20:91:
8c:4d:3b:87:0a:c1:c0:e0:d4:48:a0:cd:73:20:94:0e:ec:dd:
55:54:a0:68:70:45:76:88:dc:77:0f:b8:5c:67:60:a2:5b:2f:
df:cb:d7:ac:28:d0:6c:10:d5:23:cb:2f:3b:01:90:ce:10:cd:
ca:31:43:33
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZOn0Dy6eg8aE2vB0jzlSUtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk
Mjg0ZjAwHhcNMjQxMjA4MTk0NzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODBhNTAzMmQ3YWFmMDRjMDIyNzM0ZDVlZDk3Y2U0NWE0MWNhMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGBUCMkqVmTBlw0C5bJf3O9wR2jM
rcM14Fq/zaG33ukV520Bp7S/1qBm8OhuILSkAxC/yyJbbcbp7NxevbmQoMkZeA9d
ml7z4LyMjU0DaMvxH6v6Sh7xQhoKt7iDokAbMD7mmWLvBvXMExhFtW4vkwjjqOWP
Nl0t4s/WQQ5kFToc72PSvSWbr9TPrztBekgydWHFB+C1ZHS3N61iWHw1D+Dq6G6P
OSKuLXIXZOXiWHUVn07UDDhjWCpHEi7c3+WQb3pzIhl/t7zSns6yhgjZ3tT5KtEF
n+Zts+euW0eDB0ibaV5SibXBUZmwlqscvPYeftSVjbIc1yZMzo3B72rq5wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFAgKUDLXqvBMAic01e2XzkWkHKD0MB8GA1UdIwQY
MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt
YjI4ZjA3YjJmNDViLzEvQ0FwUU10ZXE4RXdDSnpUVjdaZk9SYVFjb1BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi
LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLYDsAwQC
uYUEAwQCue5UMA0EAgACMAcDBQMqD0IAMA0GCSqGSIb3DQEBCwUAA4IBAQAnDTmI
Oj43JUCJTkeowqHObK4+2jGHshJDuoE5lN99drO3fXk8cLtfoDTNzsWxYKk85Mnz
mKsx9HtkMCeddvYHHQwUPTG9uHuFL9zPDEA5nn/K4d/H4hA+s7+KGBtYkiCJa6Xw
oI1CGfOrfjEs/vA/eWmcwiosnbsQzH5cZ9wsmiF/+MDjgs6p5E6TNNBhpGqxvAeW
cR568P1/Si152ikzVD+MUmpt+SiO1jrcv3F91fbpJk3SfXtUO6hILofNfqXiZZAn
IJGMTTuHCsHA4NRIoM1zIJQO7N1VVKBocEV2iNx3D7hcZ2CiWy/fy9esKNBsENUj
yy87AZDOEM3KMUMz
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net