Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/1-QcCLlpcjuLYZR4Ri7L2vtrHt1c.roa
File: 1-QcCLlpcjuLYZR4Ri7L2vtrHt1c.roa (raw, json)
Hash identifier: 4dTeQIC1b5zFruHrqWWxxF3dfgSrYgIvjqF1PrhXAJE=
Subject key identifier: F9:07:02:2E:5A:5C:8E:E2:D8:65:1E:11:8B:B2:F6:BE:DA:C7:B7:57
Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial: 01920A74EFB49A28BC7AFB816E1214F49E39
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/1-QcCLlpcjuLYZR4Ri7L2vtrHt1c.roa
Signing time: Thu 19 Sep 2024 13:24:48 +0000
ROA not before: Thu 19 Sep 2024 13:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49088
IP address blocks: 45.86.108.0/22 maxlen: 22
45.90.92.0/22 maxlen: 22
45.135.68.0/22 maxlen: 22
62.146.244.0/22 maxlen: 22
91.212.72.0/23 maxlen: 23
91.212.160.0/23 maxlen: 23
185.144.72.0/22 maxlen: 22
185.214.200.0/22 maxlen: 22
185.216.184.0/22 maxlen: 22
195.39.250.0/23 maxlen: 23
195.39.252.0/23 maxlen: 23
2a07:3d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:74:ef:b4:9a:28:bc:7a:fb:81:6e:12:14:f4:9e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Validity
Not Before: Sep 19 13:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f907022e5a5c8ee2d8651e118bb2f6bedac7b757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:ab:ed:0f:ef:09:6f:df:55:33:f7:4e:99:
06:fb:1a:ab:4c:75:5b:c8:eb:89:36:c2:f3:4f:50:
f0:d6:af:f8:02:bd:07:c9:ed:0b:78:40:2a:61:c9:
37:92:53:bd:b3:c6:bf:49:cb:54:15:9b:af:3f:cc:
bd:aa:b8:ab:c5:74:a1:a3:85:8a:d1:df:62:52:07:
d4:16:52:fd:56:1d:db:41:81:aa:ab:a1:ae:fa:a4:
6f:ef:da:56:af:d6:41:ef:e5:20:72:98:f3:ef:09:
ce:92:db:a7:51:02:a6:d9:d0:85:ae:c2:07:9b:3d:
7b:d4:d6:26:ba:5a:14:97:f4:b8:94:0c:b2:40:ee:
4b:16:ed:0d:67:42:76:7c:5b:4c:fc:9b:09:bd:0b:
47:7d:30:72:a3:23:2b:48:f8:d0:cd:7a:c8:fe:35:
e4:15:79:0a:50:08:9c:c3:2d:e6:ac:8e:f3:9a:cb:
ef:5b:8e:13:d7:a7:7f:f0:ba:30:e4:7d:f2:98:18:
48:ac:cf:69:13:26:c8:6e:ee:3a:1e:f6:cf:0e:fe:
29:90:30:54:ef:f0:ff:a6:4d:75:0f:35:0b:db:f8:
71:2f:72:49:cc:c8:f6:ba:92:a8:43:be:a8:18:0c:
e7:07:8b:13:b7:39:8d:28:52:d2:e7:1f:92:36:da:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:02:2E:5A:5C:8E:E2:D8:65:1E:11:8B:B2:F6:BE:DA:C7:B7:57
X509v3 Authority Key Identifier:
keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/1-QcCLlpcjuLYZR4Ri7L2vtrHt1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.108.0/22
45.90.92.0/22
45.135.68.0/22
62.146.244.0/22
91.212.72.0/23
91.212.160.0/23
185.144.72.0/22
185.214.200.0/22
185.216.184.0/22
195.39.250.0-195.39.253.255
IPv6:
2a07:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
5a:bd:b4:02:ab:c1:93:7f:82:a3:7a:01:cf:7d:ed:3d:ed:40:
c4:25:c0:7e:d7:fa:07:1a:9f:e1:40:bf:23:74:4c:37:00:48:
1a:18:13:ab:74:3f:5a:fd:4a:b8:fb:e9:0c:d0:9f:4a:a6:22:
56:1d:82:f7:45:4c:a0:91:16:67:b3:9c:fd:56:25:86:56:6c:
fd:d1:ee:ed:c1:e3:93:78:ab:07:a0:31:63:17:21:bc:4f:6c:
ec:61:4f:87:f4:91:74:55:07:87:3a:2c:bf:71:f6:ff:df:9c:
c2:0d:74:04:fc:ea:bb:0d:f2:23:98:b7:a7:ba:d2:5d:2e:2e:
00:e4:70:53:b7:2e:0e:6a:ad:94:4c:23:a9:36:8a:f6:99:6f:
ce:79:01:4e:3b:11:7a:fe:0a:4a:05:ab:c5:dc:b5:fb:d6:b5:
17:47:59:4e:c5:ee:1f:3e:84:53:05:83:43:54:2a:f9:10:60:
d9:55:cd:ae:28:c2:c5:a7:07:c2:29:89:84:15:30:c3:87:ec:
1f:27:0f:c6:ff:ba:81:a2:e3:91:48:60:f8:b1:80:0a:4c:da:
f7:91:66:b4:a8:39:51:a8:b4:85:a0:81:04:bb:7f:7c:48:45:
c9:40:42:9b:46:29:ff:9a:bc:a9:57:ff:6b:77:2f:a3:2a:ee:
9b:22:c8:e7
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZIKdO+0mii8evuBbhIU9J45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YWI0Njk3YTZhNDhmNmM2YzY5M2UzODM5YmZkNWIzZmIw
ZTNiZjEwHhcNMjQwOTE5MTMyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTA3MDIyZTVhNWM4ZWUyZDg2NTFlMTE4YmIyZjZiZWRhYzdiNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSWr7Q/vCW/fVTP3TpkG+xqrTHVb
yOuJNsLzT1Dw1q/4Ar0Hye0LeEAqYck3klO9s8a/SctUFZuvP8y9qrirxXSho4WK
0d9iUgfUFlL9Vh3bQYGqq6Gu+qRv79pWr9ZB7+Ugcpjz7wnOktunUQKm2dCFrsIH
mz171NYmuloUl/S4lAyyQO5LFu0NZ0J2fFtM/JsJvQtHfTByoyMrSPjQzXrI/jXk
FXkKUAicwy3mrI7zmsvvW44T16d/8Low5H3ymBhIrM9pEybIbu46HvbPDv4pkDBU
7/D/pk11DzUL2/hxL3JJzMj2upKoQ76oGAznB4sTtzmNKFLS5x+SNtrdxwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFPkHAi5aXI7i2GUeEYuy9r7ax7dXMB8GA1UdIwQY
MBaAFJarRpempI9sbGk+ODm/1bP7DjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQt
M2IxZTcyMmE5ZGM4LzEvMS1RY0NMbHBjanVMWVpSNFJpN0wydnRySHQxYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzkvMzcxY2E5LTU2YWQtNGQxMi05NmY0LTNiMWU3MjJhOWRj
OC8xL2xxdEdsNmFrajJ4c2FUNDRPYl9Wc19zT09fRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBsBggrBgEFBQcBBwEB/wRdMFswSgQCAAEwRAMEAi1WbAME
Ai1aXAMEAi2HRAMEAj6S9AMEAVvUSAMEAVvUoAMEArmQSAMEArnWyAMEArnYuDAM
AwQBwyf6AwQBwyf8MA0EAgACMAcDBQMqBz0AMA0GCSqGSIb3DQEBCwUAA4IBAQBa
vbQCq8GTf4KjegHPfe097UDEJcB+1/oHGp/hQL8jdEw3AEgaGBOrdD9a/Uq4++kM
0J9KpiJWHYL3RUygkRZns5z9ViWGVmz90e7tweOTeKsHoDFjFyG8T2zsYU+H9JF0
VQeHOiy/cfb/35zCDXQE/Oq7DfIjmLenutJdLi4A5HBTty4Oaq2UTCOpNor2mW/O
eQFOOxF6/gpKBavF3LX71rUXR1lOxe4fPoRTBYNDVCr5EGDZVc2uKMLFpwfCKYmE
FTDDh+wfJw/G/7qBouORSGD4sYAKTNr3kWa0qDlRqLSFoIEEu398SEXJQEKbRin/
mrypV/9rdy+jKu6bIsjn
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:51 2024 by rpki-client on console.sobornost.net