Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/TO4FbAg8xxDDqv-O_xlox_1F-oE.roa
File: TO4FbAg8xxDDqv-O_xlox_1F-oE.roa (raw, json)
Hash identifier: P6mUV83txgndejcAxyktaEeEgmVivYZ1tKbDvbe9WvI=
Subject key identifier: 4C:EE:05:6C:08:3C:C7:10:C3:AA:FF:8E:FF:19:68:C7:FD:45:FA:81
Certificate issuer: /CN=97743d346356469b4b6939463c96df2b8a39065c
Certificate serial: 01856F4B4F9D2FCBECB0E5E7C43EF372A938
Authority key identifier: 97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/TO4FbAg8xxDDqv-O_xlox_1F-oE.roa
Signing time: Sun 01 Jan 2023 21:44:44 +0000
ROA not before: Sun 01 Jan 2023 21:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204386
IP address blocks: 185.251.26.0/24 maxlen: 24
2a10:acc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:4f:9d:2f:cb:ec:b0:e5:e7:c4:3e:f3:72:a9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97743d346356469b4b6939463c96df2b8a39065c
Validity
Not Before: Jan 1 21:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cee056c083cc710c3aaff8eff1968c7fd45fa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:7a:9f:af:d8:5e:e0:02:e7:82:2e:2d:f4:
1b:d0:30:8c:38:22:94:c9:39:69:fb:5a:16:ea:ff:
8b:75:39:76:3d:2a:37:9e:4c:09:43:ff:80:0d:85:
6e:d4:66:3c:87:64:d8:fa:5d:72:0f:73:25:9e:bb:
27:db:17:ce:57:1e:8e:44:ea:6a:5d:89:3d:95:28:
1b:75:08:aa:1e:66:4b:e3:31:1e:7b:f8:ab:6c:8f:
2b:d2:ce:e1:2e:aa:1c:9e:8a:bd:6d:11:e3:3f:14:
d4:9e:07:8f:5e:a3:e8:25:04:97:83:97:e8:6a:0b:
8e:4b:c6:b8:f4:1f:d9:7c:a6:10:51:d3:0c:c7:d9:
7c:4b:cb:10:1f:dd:e8:d3:71:97:d5:8a:f4:11:ec:
24:05:60:4a:8c:4c:c3:c7:aa:d8:1b:2c:51:69:f8:
3e:a6:e3:53:22:4e:10:fe:0d:03:01:35:41:67:d7:
48:16:08:fa:c0:8f:60:7b:b0:22:14:6f:7f:20:44:
e5:d0:51:73:77:50:df:b1:df:b1:89:3f:c4:7b:a4:
43:a1:a1:a9:a9:e1:e9:8c:cb:6c:1e:b5:51:b1:85:
9c:8e:7c:25:89:d6:5d:be:39:25:54:37:b9:2b:58:
8d:fa:e8:49:15:10:3b:a0:73:2b:89:0a:2e:80:ba:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EE:05:6C:08:3C:C7:10:C3:AA:FF:8E:FF:19:68:C7:FD:45:FA:81
X509v3 Authority Key Identifier:
keyid:97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/TO4FbAg8xxDDqv-O_xlox_1F-oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.26.0/24
IPv6:
2a10:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:aa:f9:e6:80:73:1e:16:92:f0:f8:c1:36:76:4b:bf:e4:ec:
f5:ed:1e:4c:4b:c7:65:4c:de:c1:37:e6:81:eb:44:5f:f4:03:
2c:c2:3f:2f:0c:60:91:e4:d7:3d:4f:b0:56:55:0a:01:f8:e2:
80:8c:18:44:df:ae:37:29:48:a3:a2:02:df:b6:61:31:ef:99:
7d:51:a1:91:85:ec:6a:36:75:87:30:e9:24:a6:c9:2a:fb:fe:
64:24:b7:53:d6:d8:c5:c4:5d:ce:c7:f2:ab:22:17:67:8b:e0:
7a:f0:22:3c:79:2d:38:66:47:e1:c8:03:84:6d:03:8e:e5:02:
1d:25:af:e0:c2:05:0c:e1:69:91:dc:21:3a:e4:a5:84:a8:96:
f3:c2:42:e8:e8:2a:8a:5e:a5:8e:d1:02:80:4f:da:25:49:fc:
f8:da:6e:9f:a7:96:e6:29:70:9d:dd:48:b2:0c:af:8a:10:82:
d6:2a:05:68:93:94:db:d8:d0:16:12:ed:14:39:57:19:14:8f:
aa:f1:83:f6:de:70:02:90:18:46:e9:3d:ed:cc:f4:cd:00:65:
82:f2:df:78:a9:0c:88:e4:ca:90:f8:02:04:d5:e5:fa:54:44:
92:23:71:98:20:66:da:c8:6b:a7:ab:70:90:c4:21:97:d9:e4:
c7:c8:ea:27
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvS0+dL8vssOXnxD7zcqk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NzQzZDM0NjM1NjQ2OWI0YjY5Mzk0NjNjOTZkZjJiOGEz
OTA2NWMwHhcNMjMwMTAxMjE0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2VlMDU2YzA4M2NjNzEwYzNhYWZmOGVmZjE5NjhjN2ZkNDVmYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bd6n6/YXuAC54IuLfQb0DCMOCKU
yTlp+1oW6v+LdTl2PSo3nkwJQ/+ADYVu1GY8h2TY+l1yD3Mlnrsn2xfOVx6OROpq
XYk9lSgbdQiqHmZL4zEee/irbI8r0s7hLqocnoq9bRHjPxTUngePXqPoJQSXg5fo
aguOS8a49B/ZfKYQUdMMx9l8S8sQH93o03GX1Yr0EewkBWBKjEzDx6rYGyxRafg+
puNTIk4Q/g0DATVBZ9dIFgj6wI9ge7AiFG9/IETl0FFzd1Dfsd+xiT/Ee6RDoaGp
qeHpjMtsHrVRsYWcjnwlidZdvjklVDe5K1iN+uhJFRA7oHMriQougLrXiwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEzuBWwIPMcQw6r/jv8ZaMf9RfqBMB8GA1UdIwQY
MBaAFJd0PTRjVkabS2k5RjyW3yuKOQZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNROU5HTldScHRMYVRsR1BKYmZLNG81Qmx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82MTAzODItN2I4OS00ZjcwLWE3Nzct
NzFhZTVmYzEyNmJmLzEvVE80RmJBZzh4eEREcXYtT194bG94XzFGLW9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82MTAzODItN2I4OS00ZjcwLWE3NzctNzFhZTVmYzEyNmJm
LzEvbDNROU5HTldScHRMYVRsR1BKYmZLNG81Qmx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufsaMA0E
AgACMAcDBQMqEKzAMA0GCSqGSIb3DQEBCwUAA4IBAQAaqvnmgHMeFpLw+ME2dku/
5Oz17R5MS8dlTN7BN+aB60Rf9AMswj8vDGCR5Nc9T7BWVQoB+OKAjBhE3643KUij
ogLftmEx75l9UaGRhexqNnWHMOkkpskq+/5kJLdT1tjFxF3Ox/KrIhdni+B68CI8
eS04ZkfhyAOEbQOO5QIdJa/gwgUM4WmR3CE65KWEqJbzwkLo6CqKXqWO0QKAT9ol
Sfz42m6fp5bmKXCd3UiyDK+KEILWKgVok5Tb2NAWEu0UOVcZFI+q8YP23nACkBhG
6T3tzPTNAGWC8t94qQyI5MqQ+AIE1eX6VESSI3GYIGbayGunq3CQxCGX2eTHyOon
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:15 2024 by rpki-client on console-ams.rpki-client.org