Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/tghHYDmXfMowMysKDi4hPQ7YrY4.roa
File: tghHYDmXfMowMysKDi4hPQ7YrY4.roa (raw, json)
Hash identifier: TrU2SGqTqyZZKjDlNcPJ/rR5rCZqEtYf9UgRiw4JEdY=
Subject key identifier: B6:08:47:60:39:97:7C:CA:30:33:2B:0A:0E:2E:21:3D:0E:D8:AD:8E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01904A3AEEA37F0E7BB2442632DE3AEE6CB3
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/tghHYDmXfMowMysKDi4hPQ7YrY4.roa
Signing time: Mon 24 Jun 2024 12:31:34 +0000
ROA not before: Mon 24 Jun 2024 12:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 45.8.89.0/24 maxlen: 24
45.15.75.0/24 maxlen: 24
45.130.145.0/24 maxlen: 24
45.153.49.0/24 maxlen: 24
77.83.95.0/24 maxlen: 24
92.119.128.0/24 maxlen: 24
92.119.130.0/24 maxlen: 24
93.157.105.0/24 maxlen: 24
194.93.3.0/24 maxlen: 24
194.169.161.0/24 maxlen: 24
194.169.162.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:3a:ee:a3:7f:0e:7b:b2:44:26:32:de:3a:ee:6c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 24 12:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b608476039977cca30332b0a0e2e213d0ed8ad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:c5:d5:b0:47:a0:e5:ce:eb:5d:74:e9:f6:
aa:8d:c0:3a:ff:7a:bc:6e:24:c5:fc:b6:9b:57:4e:
de:b3:31:f1:ec:7f:1f:0e:c2:02:0b:56:9f:70:f9:
de:4e:0d:98:fc:4f:ae:27:fe:86:af:1c:7e:0b:20:
7b:a8:dd:bb:1f:6c:e2:2e:31:3b:ee:66:c6:af:c2:
24:f4:2a:78:55:1a:9b:58:6d:03:24:93:b2:ca:6d:
0d:3b:10:e2:90:49:ba:14:2f:f7:04:13:df:6e:76:
e6:e1:64:e7:cd:b9:b3:84:94:41:fa:8c:24:13:df:
0a:32:7b:cb:49:16:01:c6:69:23:13:61:e9:3c:93:
74:8d:cb:98:3c:9f:5d:1e:48:af:3a:90:bb:7b:46:
4a:60:d0:3a:27:cd:c2:42:81:91:e6:a2:bf:24:35:
c2:da:67:bd:fb:16:8d:97:e0:51:c7:81:c3:ea:f6:
48:26:60:fc:8c:4c:7f:97:f9:ad:79:ce:31:94:a0:
f1:c0:15:14:12:2b:fc:5e:a2:e2:4b:e1:a6:fe:f7:
d6:15:43:0d:3d:24:3f:8c:c1:38:f5:30:f1:f7:d9:
ff:f9:21:ed:77:c7:ac:52:e7:b4:4a:ec:66:f1:2f:
d7:89:34:bb:be:d1:81:c1:2d:ec:f1:68:50:44:fd:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:08:47:60:39:97:7C:CA:30:33:2B:0A:0E:2E:21:3D:0E:D8:AD:8E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/tghHYDmXfMowMysKDi4hPQ7YrY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.89.0/24
45.15.75.0/24
45.130.145.0/24
45.153.49.0/24
77.83.95.0/24
92.119.128.0/24
92.119.130.0/24
93.157.105.0/24
194.93.3.0/24
194.169.161.0-194.169.162.255
213.139.203.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4b:d8:d3:8e:31:92:ba:5e:02:70:77:5d:d8:81:a1:64:12:
38:cf:e8:1f:33:bf:f7:59:37:e6:06:31:15:6a:2d:57:28:1c:
ee:f3:4c:91:e5:a8:61:ad:89:1a:72:97:9d:a0:3c:d3:ed:66:
0e:9e:db:2a:32:2b:dd:5f:e2:a6:10:0a:e3:f0:bb:7e:42:79:
b0:38:00:30:54:69:81:94:83:71:6d:17:c7:da:6d:9a:ed:63:
32:3d:b2:82:f3:be:90:6c:6d:3c:0c:aa:35:1e:8c:c8:d4:e4:
07:b6:c1:6c:c0:0e:be:fc:33:3f:94:3f:a0:ba:be:21:05:96:
90:93:da:06:dd:95:da:8c:ce:47:00:0e:3a:0d:72:f9:ad:dd:
11:8a:93:48:77:34:40:d0:84:30:30:02:e0:35:27:a2:f7:8c:
c1:11:93:da:50:b5:9d:3a:b3:7e:fc:bc:cd:b8:44:8f:ee:d7:
7e:e3:f5:84:75:2f:c0:35:89:9c:3a:7a:9c:8f:6a:e1:cf:4b:
7c:e6:bb:3e:de:10:b8:c4:d4:05:62:eb:71:7a:ee:76:f8:f4:
a0:aa:61:fd:9c:09:59:a6:06:33:b6:93:69:38:99:47:09:1a:
59:50:03:b8:7c:cb:64:55:e4:9d:c4:29:84:31:2d:09:a2:95:
b8:42:b9:4e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZBKOu6jfw57skQmMt467myzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwNjI0MTIzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjA4NDc2MDM5OTc3Y2NhMzAzMzJiMGEwZTJlMjEzZDBlZDhhZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTbF1bBHoOXO61106faqjcA6/3q8
biTF/LabV07eszHx7H8fDsICC1afcPneTg2Y/E+uJ/6Grxx+CyB7qN27H2ziLjE7
7mbGr8Ik9Cp4VRqbWG0DJJOyym0NOxDikEm6FC/3BBPfbnbm4WTnzbmzhJRB+owk
E98KMnvLSRYBxmkjE2HpPJN0jcuYPJ9dHkivOpC7e0ZKYNA6J83CQoGR5qK/JDXC
2me9+xaNl+BRx4HD6vZIJmD8jEx/l/mtec4xlKDxwBUUEiv8XqLiS+Gm/vfWFUMN
PSQ/jME49TDx99n/+SHtd8esUue0Suxm8S/XiTS7vtGBwS3s8WhQRP3rrwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFLYIR2A5l3zKMDMrCg4uIT0O2K2OMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvdGdoSFlEbVhmTW93TXlzS0RpNGhQUTdZclk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQALQhZAwQA
LQ9LAwQALYKRAwQALZkxAwQATVNfAwQAXHeAAwQAXHeCAwQAXZ1pAwQAwl0DMAwD
BADCqaEDBADCqaIDBADVi8swDQYJKoZIhvcNAQELBQADggEBAEhL2NOOMZK6XgJw
d13YgaFkEjjP6B8zv/dZN+YGMRVqLVcoHO7zTJHlqGGtiRpyl52gPNPtZg6e2yoy
K91f4qYQCuPwu35CebA4ADBUaYGUg3FtF8fabZrtYzI9soLzvpBsbTwMqjUejMjU
5Ae2wWzADr78Mz+UP6C6viEFlpCT2gbdldqMzkcADjoNcvmt3RGKk0h3NEDQhDAw
AuA1J6L3jMERk9pQtZ06s378vM24RI/u137j9YR1L8A1iZw6epyPauHPS3zmuz7e
ELjE1AVi63F67nb49KCqYf2cCVmmBjO2k2k4mUcJGllQA7h8y2RV5J3EKYQxLQmi
lbhCuU4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:22 2025 by rpki-client