Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/HxUKHvFVYreL8nMgmYA0k-SP9-U.roa
File: HxUKHvFVYreL8nMgmYA0k-SP9-U.roa (raw, json)
Hash identifier: bf8zaOag8RBH9dppxh2CVUew/z5xk/u9FwhZVWDygOc=
Subject key identifier: 1F:15:0A:1E:F1:55:62:B7:8B:F2:73:20:99:80:34:93:E4:8F:F7:E5
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 01939B2A7064C8DFEE4CA2BB621F23E4C87B
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/HxUKHvFVYreL8nMgmYA0k-SP9-U.roa
Signing time: Fri 06 Dec 2024 08:51:09 +0000
ROA not before: Fri 06 Dec 2024 08:51:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25082
IP address blocks: 91.203.140.0/22 maxlen: 22
91.203.140.0/24 maxlen: 24
91.203.141.0/24 maxlen: 24
91.203.142.0/24 maxlen: 24
91.203.143.0/24 maxlen: 24
91.215.68.0/22 maxlen: 22
91.215.68.0/23 maxlen: 23
91.215.68.0/24 maxlen: 24
91.215.70.0/23 maxlen: 23
91.215.70.0/24 maxlen: 24
91.215.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:2a:70:64:c8:df:ee:4c:a2:bb:62:1f:23:e4:c8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Dec 6 08:51:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f150a1ef15562b78bf2732099803493e48ff7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:cf:74:e4:26:27:24:08:87:af:71:b0:1c:
6e:90:73:25:d6:36:93:7c:f8:00:c1:7d:67:d9:84:
2c:df:e9:77:15:cc:c9:4c:7a:24:3d:06:2d:af:b3:
99:06:43:ae:78:b4:75:e3:6b:7b:c5:a0:34:f7:32:
4f:1e:2e:52:db:96:d7:5b:0d:7e:50:cf:ae:d9:83:
dd:94:c7:d5:bb:47:9f:8a:9f:82:97:c6:c8:88:32:
e1:a0:bf:a7:e1:f5:31:57:9b:82:11:c3:88:42:5c:
1d:97:40:37:e9:d0:78:e4:0b:03:84:11:48:e3:d2:
46:97:3e:8f:cb:f5:83:98:39:39:49:79:bd:12:f5:
61:9d:ca:fe:a6:07:8f:a5:2c:06:49:da:c9:23:8d:
8d:40:08:2a:1e:be:81:85:58:2b:97:41:d8:66:26:
84:1f:9e:2a:96:61:ff:24:fd:df:f5:6d:89:08:ea:
42:d1:d2:7d:c7:e3:18:c5:54:ef:41:e0:34:74:7e:
3c:63:4a:a5:bb:21:2c:9a:55:a9:75:d2:00:7c:dc:
4f:cf:69:94:06:bc:bc:e6:10:33:e1:78:4e:96:b9:
ff:24:88:57:0f:9d:e2:bb:ee:61:5a:38:b5:5d:db:
e7:5a:6c:8d:15:94:48:9d:05:4c:86:e8:59:76:b4:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:15:0A:1E:F1:55:62:B7:8B:F2:73:20:99:80:34:93:E4:8F:F7:E5
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/HxUKHvFVYreL8nMgmYA0k-SP9-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.140.0/22
91.215.68.0/22
Signature Algorithm: sha256WithRSAEncryption
81:a0:d6:00:5c:5a:64:d1:60:0f:1d:3d:53:d5:bb:24:92:75:
52:05:3f:e8:cc:61:9f:2e:c9:c1:eb:84:ca:e6:72:e5:82:cd:
e9:d4:aa:5d:7e:c1:5c:03:6d:94:8a:2c:76:6c:91:4f:45:35:
e4:70:8d:88:18:c4:eb:a9:34:92:47:99:0a:dd:6d:a1:d2:7f:
2f:39:83:9f:d6:73:44:72:e8:06:e9:d8:ec:de:23:2b:b7:a7:
c5:16:7c:b7:85:c2:56:ee:ec:9a:11:13:e0:5a:7b:38:cc:13:
c8:f2:6e:a0:eb:cf:5e:0f:3a:43:14:6b:f1:fd:e8:b1:fa:8b:
c8:ea:b5:ee:38:b3:44:e2:43:d2:87:61:37:97:04:20:37:e0:
e5:6d:ef:a2:97:a2:8e:71:9d:b0:89:18:05:2f:52:bd:3a:17:
58:13:d5:65:59:4a:24:25:bc:bf:b2:ab:59:80:73:5e:cf:cf:
7a:a3:5c:97:cd:6b:f2:e6:11:81:21:a9:73:b6:ac:37:d6:55:
34:31:8d:3b:2a:4c:40:98:a0:91:df:14:3d:c8:77:be:58:f5:
7d:77:78:40:ce:91:0d:6a:4a:b8:0e:9c:32:ee:cc:0e:2d:aa:
f6:ec:ea:bb:77:1c:a1:bd:af:da:d8:ad:db:09:a0:de:5a:6e:
0e:38:54:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZObKnBkyN/uTKK7Yh8j5Mh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNzBlZThkYzgzNzgwODY5NjAxODJlMzMwOTIyNjcxN2U4
M2U0MDcwHhcNMjQxMjA2MDg1MTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjE1MGExZWYxNTU2MmI3OGJmMjczMjA5OTgwMzQ5M2U0OGZmN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCHPdOQmJyQIh69xsBxukHMl1jaT
fPgAwX1n2YQs3+l3FczJTHokPQYtr7OZBkOueLR142t7xaA09zJPHi5S25bXWw1+
UM+u2YPdlMfVu0efip+Cl8bIiDLhoL+n4fUxV5uCEcOIQlwdl0A36dB45AsDhBFI
49JGlz6Py/WDmDk5SXm9EvVhncr+pgePpSwGSdrJI42NQAgqHr6BhVgrl0HYZiaE
H54qlmH/JP3f9W2JCOpC0dJ9x+MYxVTvQeA0dH48Y0qluyEsmlWpddIAfNxPz2mU
Bry85hAz4XhOlrn/JIhXD53iu+5hWji1XdvnWmyNFZRInQVMhuhZdrRNGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB8VCh7xVWK3i/JzIJmANJPkj/flMB8GA1UdIwQY
MBaAFMBw7o3IN4CGlgGC4zCSJnF+g+QHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODkt
NDVhN2I2OTc4NDkzLzEvSHhVS0h2RlZZcmVMOG5NZ21ZQTBrLVNQOS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODktNDVhN2I2OTc4NDkz
LzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8uMAwQC
W9dEMA0GCSqGSIb3DQEBCwUAA4IBAQCBoNYAXFpk0WAPHT1T1bskknVSBT/ozGGf
LsnB64TK5nLlgs3p1KpdfsFcA22Uiix2bJFPRTXkcI2IGMTrqTSSR5kK3W2h0n8v
OYOf1nNEcugG6djs3iMrt6fFFny3hcJW7uyaERPgWns4zBPI8m6g689eDzpDFGvx
/eix+ovI6rXuOLNE4kPSh2E3lwQgN+Dlbe+il6KOcZ2wiRgFL1K9OhdYE9VlWUok
Jby/sqtZgHNez896o1yXzWvy5hGBIalztqw31lU0MY07KkxAmKCR3xQ9yHe+WPV9
d3hAzpENakq4Dpwy7swOLar27Oq7dxyhva/a2K3bCaDeWm4OOFSH
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:11 2024 by rpki-client on console.sobornost.net