Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/1LmUwEt4P7NzK8feXN3O-SGaR-w.roa
File: 1LmUwEt4P7NzK8feXN3O-SGaR-w.roa (raw, json)
Hash identifier: FoAWRdjtdfxycJry+WQBelZe6kjvsNHRt9tWDgpTWqE=
Subject key identifier: D4:B9:94:C0:4B:78:3F:B3:73:2B:C7:DE:5C:DD:CE:F9:21:9A:47:EC
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 01851B0A41496D11024E242B6D364FB52E70
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/1LmUwEt4P7NzK8feXN3O-SGaR-w.roa
Signing time: Fri 16 Dec 2022 13:05:34 +0000
ROA not before: Fri 16 Dec 2022 13:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203377
IP address blocks: 185.136.205.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:0a:41:49:6d:11:02:4e:24:2b:6d:36:4f:b5:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Dec 16 13:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4b994c04b783fb3732bc7de5cddcef9219a47ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:57:20:e8:e4:c1:35:dd:ff:e8:33:75:60:
5a:eb:fa:8e:2a:d7:cc:2b:53:3b:56:49:0f:3f:10:
d7:c2:d2:a7:5b:4e:aa:e4:48:8c:24:01:71:67:32:
b5:a8:5b:d2:71:90:8a:d0:82:89:42:b7:d2:b7:22:
0a:c3:8c:68:20:6f:2b:19:20:dc:35:e0:ef:36:aa:
a7:20:7d:a7:f6:9e:71:2b:80:c4:3a:e1:32:88:e7:
4c:7e:ad:64:71:b8:62:10:eb:cd:c2:fc:1f:c2:2a:
2f:67:de:40:cf:a4:4e:81:38:7e:b2:d8:d4:5a:21:
7c:c1:33:12:37:4b:d4:f7:14:a8:ce:47:f0:aa:89:
08:0d:fb:50:f6:b4:65:82:50:dd:6d:ce:60:d0:57:
53:af:8a:b7:cd:70:fa:af:b5:8d:dd:24:4f:3c:f6:
f6:86:87:f6:89:4d:dc:f0:5a:b5:4b:79:ba:6d:63:
17:a5:6a:fe:1e:5b:eb:1a:9d:af:f0:33:6d:3f:ac:
65:80:b8:0c:fa:c7:20:81:58:01:ba:39:0c:52:ce:
b3:73:3d:b0:cc:f9:a7:f0:ef:56:5e:6c:f6:f7:8f:
6e:1d:2b:bc:53:14:32:bd:71:39:b7:73:07:a4:e1:
18:22:6f:05:41:fc:67:69:5e:13:5f:96:12:32:df:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:94:C0:4B:78:3F:B3:73:2B:C7:DE:5C:DD:CE:F9:21:9A:47:EC
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/1LmUwEt4P7NzK8feXN3O-SGaR-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0/24
185.136.207.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
93:80:cd:2e:e6:74:5d:02:cc:06:64:cf:72:f0:40:f2:af:e6:
a8:a7:e8:99:b3:ad:f3:27:b2:11:35:f0:02:1a:8a:33:c9:15:
dd:fc:20:c1:00:00:28:c1:2d:8a:01:51:9b:ce:59:0d:1b:bc:
47:16:d7:6c:5c:f2:73:f3:76:6f:b1:3c:c3:ca:33:d3:ea:cc:
4c:81:ae:75:14:fc:11:80:b9:f0:7d:0a:ae:62:66:8b:7a:55:
88:35:0a:eb:9f:f3:70:49:cf:5c:6b:14:35:c2:97:24:d3:fb:
9c:cc:8e:82:0e:87:6e:63:6e:4d:8d:2f:c3:37:8a:27:1c:1d:
ca:eb:7e:56:32:5f:cb:9c:13:93:2f:6a:06:c8:3f:62:b4:06:
b3:2b:b5:3d:98:d7:39:a3:64:23:c5:66:ca:e8:cf:36:39:57:
42:ad:a9:e8:5b:36:6d:be:fb:35:33:10:a7:c9:e9:fb:94:9c:
f0:e4:61:6b:55:f0:19:bd:ed:76:f4:91:71:44:ac:46:3f:59:
f1:c8:b6:f5:12:6d:a4:0f:55:8b:39:82:69:eb:26:9b:d2:49:
a5:09:7e:6b:9c:2b:90:3e:e1:d3:12:3a:1c:a6:c7:1a:27:15:
d8:07:6b:43:ed:08:6d:bd:68:1f:d4:f0:b7:5f:79:22:96:48:
58:c5:80:ee
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYUbCkFJbRECTiQrbTZPtS5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MDU5NGYyNjVmMGMzZWIwMGU3Y2ZjMjhmZWM4NTkwYzhh
NjMyYTUwHhcNMjIxMjE2MTMwNTM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGI5OTRjMDRiNzgzZmIzNzMyYmM3ZGU1Y2RkY2VmOTIxOWE0N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPxXIOjkwTXd/+gzdWBa6/qOKtfM
K1M7VkkPPxDXwtKnW06q5EiMJAFxZzK1qFvScZCK0IKJQrfStyIKw4xoIG8rGSDc
NeDvNqqnIH2n9p5xK4DEOuEyiOdMfq1kcbhiEOvNwvwfwiovZ95Az6ROgTh+stjU
WiF8wTMSN0vU9xSozkfwqokIDftQ9rRlglDdbc5g0FdTr4q3zXD6r7WN3SRPPPb2
hof2iU3c8Fq1S3m6bWMXpWr+HlvrGp2v8DNtP6xlgLgM+scggVgBujkMUs6zcz2w
zPmn8O9WXmz2949uHSu8UxQyvXE5t3MHpOEYIm8FQfxnaV4TX5YSMt8FOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNS5lMBLeD+zcyvH3lzdzvkhmkfsMB8GA1UdIwQY
MBaAFLcFlPJl8MPrAOfPwo/shZDIpjKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHdXVThtWHd3LXNBNThfQ2oteUZrTWltTXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMDc3YmEtMWRjNi00MTE3LWJjYjct
YWI0Y2RmMzE0NWM5LzEvMUxtVXdFdDRQN056SzhmZVhOM08tU0dhUi13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yMDc3YmEtMWRjNi00MTE3LWJjYjctYWI0Y2RmMzE0NWM5
LzEvdHdXVThtWHd3LXNBNThfQ2oteUZrTWltTXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuYjNAwQA
uYjPAwQAuc8nMA0GCSqGSIb3DQEBCwUAA4IBAQCTgM0u5nRdAswGZM9y8EDyr+ao
p+iZs63zJ7IRNfACGoozyRXd/CDBAAAowS2KAVGbzlkNG7xHFtdsXPJz83ZvsTzD
yjPT6sxMga51FPwRgLnwfQquYmaLelWINQrrn/NwSc9caxQ1wpck0/uczI6CDodu
Y25NjS/DN4onHB3K635WMl/LnBOTL2oGyD9itAazK7U9mNc5o2QjxWbK6M82OVdC
ranoWzZtvvs1MxCnyen7lJzw5GFrVfAZve129JFxRKxGP1nxyLb1Em2kD1WLOYJp
6yab0kmlCX5rnCuQPuHTEjocpscaJxXYB2tD7QhtvWgf1PC3X3kilkhYxYDu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org