Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/hrvAUNNsijj45EuUprdgVHVHwo0.roa
File: hrvAUNNsijj45EuUprdgVHVHwo0.roa (raw, json)
Hash identifier: 38YuOtL8+2xPr/i23Cy5u2LEZpzmUeBDWeOH9kBHtLE=
Subject key identifier: 86:BB:C0:50:D3:6C:8A:38:F8:E4:4B:94:A6:B7:60:54:75:47:C2:8D
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01907CE237907C025E23187E30A993505833
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/hrvAUNNsijj45EuUprdgVHVHwo0.roa
Signing time: Thu 04 Jul 2024 08:35:18 +0000
ROA not before: Thu 04 Jul 2024 08:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 89.47.197.0/24 maxlen: 24
89.47.201.0/24 maxlen: 24
89.47.202.0/24 maxlen: 24
92.114.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:e2:37:90:7c:02:5e:23:18:7e:30:a9:93:50:58:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jul 4 08:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86bbc050d36c8a38f8e44b94a6b760547547c28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:73:20:47:63:58:c8:f1:2a:03:8a:6a:a7:
d0:97:d9:f7:c9:9d:95:30:ac:42:df:7c:6f:04:af:
0a:d6:78:fe:9c:82:0b:2d:e0:e8:f4:b4:de:19:63:
ab:a9:c4:a6:2b:17:f2:fd:16:a5:eb:11:cd:e0:3c:
62:45:6b:a4:ac:07:ae:02:5b:12:d5:9f:af:76:a2:
17:86:ec:c3:94:7b:f6:18:92:9d:20:19:43:1b:12:
7c:56:3b:91:ad:d7:72:98:80:17:1d:db:75:31:42:
bc:b2:8d:4c:e5:e1:fb:79:5d:95:12:ff:1d:ae:01:
9b:c2:39:21:ae:19:e0:67:0b:0c:71:c9:3f:42:8b:
8f:79:29:a8:6b:45:d8:4a:6d:50:b8:3e:ed:c2:a2:
50:0e:36:69:70:6b:55:4f:44:11:40:d8:03:41:6e:
60:8d:32:82:23:4f:58:c9:c6:7d:4f:7a:68:31:54:
0c:5f:46:ec:6f:a9:a9:43:e1:b0:81:5b:91:c9:db:
2c:c8:2e:ca:97:45:1b:6f:d2:31:b9:64:73:7a:a5:
4b:12:c4:6b:b2:39:39:c4:12:19:41:20:af:86:0d:
67:fa:93:6d:cc:36:79:10:28:b4:13:49:86:d3:98:
a9:b0:bb:33:6a:34:aa:7f:e0:1c:c4:63:43:29:4f:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:C0:50:D3:6C:8A:38:F8:E4:4B:94:A6:B7:60:54:75:47:C2:8D
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/hrvAUNNsijj45EuUprdgVHVHwo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.197.0/24
89.47.201.0-89.47.202.255
92.114.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3a:6b:e2:46:7c:3d:c2:ed:1c:8b:c3:a5:35:cb:c9:27:ba:
ac:a6:0e:12:5c:1f:a0:77:ad:8b:92:b9:6c:19:31:42:ec:77:
e9:7f:df:f2:ba:e6:4a:3f:b2:a0:b9:f2:cc:b2:fd:8b:9b:31:
fc:ae:59:e6:51:fa:17:71:fa:fa:19:87:62:9e:ec:c0:12:22:
b0:f6:b0:35:7f:71:69:7a:83:27:ff:c1:c5:9f:cc:70:21:46:
ad:82:c7:0c:f3:1c:29:ee:33:ad:d5:65:42:02:b5:d3:4a:3b:
9a:5b:cc:c9:84:10:79:8c:54:d5:11:1f:35:42:aa:29:43:de:
94:5e:01:aa:24:ed:c0:e8:3f:e8:40:19:11:dd:73:40:4d:0f:
9c:18:d2:af:2b:70:44:24:13:19:64:da:18:ef:76:0b:c4:d5:
96:f4:85:28:4f:e9:02:5c:43:b7:b8:04:3d:00:c0:1a:c0:05:
6f:3c:dc:4d:a7:d1:06:82:19:a8:db:3b:35:48:3e:73:56:27:
c4:9d:a0:19:6f:af:a5:49:8a:00:02:00:7d:1e:36:56:86:93:
63:d9:73:dd:3f:b3:5d:0d:eb:28:1d:97:62:fd:38:e6:ca:1c:
15:47:ec:1d:ad:54:78:ed:12:bf:5d:e1:26:68:5c:92:08:8c:
c3:22:7e:63
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZB84jeQfAJeIxh+MKmTUFgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjQwNzA0MDgzNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmJiYzA1MGQzNmM4YTM4ZjhlNDRiOTRhNmI3NjA1NDc1NDdjMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZpzIEdjWMjxKgOKaqfQl9n3yZ2V
MKxC33xvBK8K1nj+nIILLeDo9LTeGWOrqcSmKxfy/Ral6xHN4DxiRWukrAeuAlsS
1Z+vdqIXhuzDlHv2GJKdIBlDGxJ8VjuRrddymIAXHdt1MUK8so1M5eH7eV2VEv8d
rgGbwjkhrhngZwsMcck/QouPeSmoa0XYSm1QuD7twqJQDjZpcGtVT0QRQNgDQW5g
jTKCI09YycZ9T3poMVQMX0bsb6mpQ+GwgVuRydssyC7Kl0Ubb9IxuWRzeqVLEsRr
sjk5xBIZQSCvhg1n+pNtzDZ5ECi0E0mG05ipsLszajSqf+AcxGNDKU+PJQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIa7wFDTbIo4+ORLlKa3YFR1R8KNMB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEvaHJ2QVVOTnNpamo0NUV1VXByZGdWSFZId28wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWS/FMAwD
BABZL8kDBABZL8oDBABccjIwDQYJKoZIhvcNAQELBQADggEBAB06a+JGfD3C7RyL
w6U1y8knuqymDhJcH6B3rYuSuWwZMULsd+l/3/K65ko/sqC58syy/YubMfyuWeZR
+hdx+voZh2Ke7MASIrD2sDV/cWl6gyf/wcWfzHAhRq2CxwzzHCnuM63VZUICtdNK
O5pbzMmEEHmMVNURHzVCqilD3pReAaok7cDoP+hAGRHdc0BND5wY0q8rcEQkExlk
2hjvdgvE1Zb0hShP6QJcQ7e4BD0AwBrABW883E2n0QaCGajbOzVIPnNWJ8SdoBlv
r6VJigACAH0eNlaGk2PZc90/s10N6ygdl2L9OObKHBVH7B2tVHjtEr9d4SZoXJII
jMMifmM=
-----END CERTIFICATE-----
Generated at Sat Jul 27 04:49:32 2024 by rpki-client on console.sobornost.net