Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/aO9KlwBIhAW4nfePrz8IpC3xr8M.roa
File: aO9KlwBIhAW4nfePrz8IpC3xr8M.roa (raw, json)
Hash identifier: l8BjsfH1arXLPB9MqmNBfohCdE6v7iNuMvoQfd0VFws=
Subject key identifier: 68:EF:4A:97:00:48:84:05:B8:9D:F7:8F:AF:3F:08:A4:2D:F1:AF:C3
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019228EA7D521EDEAFF17F395B9E4A2BB245
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/aO9KlwBIhAW4nfePrz8IpC3xr8M.roa
Signing time: Wed 25 Sep 2024 11:21:49 +0000
ROA not before: Wed 25 Sep 2024 11:21:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49569
IP address blocks: 45.138.146.0/24 maxlen: 24
194.32.96.0/23 maxlen: 23
194.32.96.0/24 maxlen: 24
194.32.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:ea:7d:52:1e:de:af:f1:7f:39:5b:9e:4a:2b:b2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Sep 25 11:21:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68ef4a9700488405b89df78faf3f08a42df1afc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:2a:d4:a1:c1:7b:bf:f9:f3:34:bc:01:1b:
f3:ef:6a:4c:71:35:ce:bd:25:e5:6c:20:00:e2:cd:
bc:53:f5:ad:4b:12:99:20:cf:e1:e1:96:b4:58:f0:
25:be:a1:46:b9:b4:b1:89:56:ea:78:6d:fc:06:ea:
de:0f:7b:af:e1:5e:2d:dc:fe:af:bf:11:a8:27:28:
69:df:9b:32:04:df:62:f6:59:44:4e:18:ce:61:60:
d4:f4:46:76:20:62:13:54:70:d7:03:25:06:b9:38:
8a:64:8a:4e:db:1c:e6:83:d9:e1:eb:94:56:de:8c:
49:31:29:d7:5c:59:80:7e:8f:aa:b5:40:a7:8f:75:
d9:87:00:b7:05:f5:29:6d:c6:0e:84:4d:5e:90:0e:
1e:1d:4d:e6:fd:cd:10:c9:3d:61:4a:40:8f:9f:25:
c4:67:42:83:d3:5c:e6:39:40:9e:26:83:f4:75:8d:
54:01:95:f7:3f:09:1f:7a:32:e1:87:f5:d3:6f:a8:
fe:42:37:4b:69:bf:d3:de:50:d5:6a:d9:b4:97:77:
89:60:60:07:0b:48:5b:2c:9d:5d:55:d8:1b:3c:56:
f6:41:78:4d:b2:a8:89:6f:c1:09:18:9e:93:e9:d6:
ad:62:1f:e0:8a:84:41:81:d2:b0:b2:5e:1d:20:2d:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EF:4A:97:00:48:84:05:B8:9D:F7:8F:AF:3F:08:A4:2D:F1:AF:C3
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/aO9KlwBIhAW4nfePrz8IpC3xr8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.146.0/24
194.32.96.0/23
Signature Algorithm: sha256WithRSAEncryption
09:0d:e1:98:46:df:ba:c8:96:7b:2e:bc:56:74:76:5a:c3:75:
88:7c:cb:18:75:5a:0e:a0:80:bf:ca:e7:80:83:f6:db:be:1e:
da:77:0a:ca:29:ba:c8:0d:7e:e5:21:ac:b7:49:09:32:d2:c7:
ba:c2:de:34:49:e6:7d:8d:54:cf:24:ae:62:ca:15:6a:ba:1e:
4f:fb:2b:f6:3e:6b:ff:16:48:71:9e:f1:12:6a:fb:ba:a2:ff:
77:ec:6e:4e:6b:8e:e0:36:c0:5e:ce:02:a5:07:1f:23:e2:60:
3b:4f:52:a6:fd:8d:06:00:59:15:f1:70:61:bb:d3:51:3d:c9:
3e:cf:3e:54:ac:9e:ac:84:da:40:10:06:38:13:37:d1:15:54:
a1:55:e7:52:bd:d8:55:cf:a6:a2:64:78:b6:c6:29:b9:5c:af:
27:0c:38:4e:02:53:ae:48:7b:46:e1:96:fa:0d:64:50:cb:ea:
c1:c0:31:85:a0:77:b3:c4:11:e9:78:2c:44:86:15:47:23:27:
d9:e1:72:2e:7d:bd:3f:9e:42:a4:6c:f4:e6:78:cb:ff:64:a8:
5e:ae:22:5b:bb:2a:8a:e1:21:8c:ee:ea:c5:5f:f1:17:b7:dd:
ed:9e:e1:2f:96:9a:6b:1e:fa:52:7c:40:f2:80:e5:9d:38:7d:
2c:73:68:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIo6n1SHt6v8X85W55KK7JFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjQwOTI1MTEyMTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGVmNGE5NzAwNDg4NDA1Yjg5ZGY3OGZhZjNmMDhhNDJkZjFhZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19oq1KHBe7/58zS8ARvz72pMcTXO
vSXlbCAA4s28U/WtSxKZIM/h4Za0WPAlvqFGubSxiVbqeG38BureD3uv4V4t3P6v
vxGoJyhp35syBN9i9llEThjOYWDU9EZ2IGITVHDXAyUGuTiKZIpO2xzmg9nh65RW
3oxJMSnXXFmAfo+qtUCnj3XZhwC3BfUpbcYOhE1ekA4eHU3m/c0QyT1hSkCPnyXE
Z0KD01zmOUCeJoP0dY1UAZX3PwkfejLhh/XTb6j+QjdLab/T3lDVatm0l3eJYGAH
C0hbLJ1dVdgbPFb2QXhNsqiJb8EJGJ6T6datYh/gioRBgdKwsl4dIC2dGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGjvSpcASIQFuJ33j68/CKQt8a/DMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvYU85S2x3QkloQVc0bmZlUHJ6OElwQzN4cjhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYqSAwQB
wiBgMA0GCSqGSIb3DQEBCwUAA4IBAQAJDeGYRt+6yJZ7LrxWdHZaw3WIfMsYdVoO
oIC/yueAg/bbvh7adwrKKbrIDX7lIay3SQky0se6wt40SeZ9jVTPJK5iyhVquh5P
+yv2Pmv/FkhxnvESavu6ov937G5Oa47gNsBezgKlBx8j4mA7T1Km/Y0GAFkV8XBh
u9NRPck+zz5UrJ6shNpAEAY4EzfRFVShVedSvdhVz6aiZHi2xim5XK8nDDhOAlOu
SHtG4Zb6DWRQy+rBwDGFoHezxBHpeCxEhhVHIyfZ4XIufb0/nkKkbPTmeMv/ZKhe
riJbuyqK4SGM7urFX/EXt93tnuEvlpprHvpSfEDygOWdOH0sc2jT
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:11 2024 by rpki-client on console.sobornost.net