Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/BjrYMuydNrOfzhC5WfzSoCkv4bg.roa
File: BjrYMuydNrOfzhC5WfzSoCkv4bg.roa (raw, json)
Hash identifier: 2T2kzYGL29Sb66HIRmSzBtg3ZdaLNMBqL0oFgAna4tM=
Subject key identifier: 06:3A:D8:32:EC:9D:36:B3:9F:CE:10:B9:59:FC:D2:A0:29:2F:E1:B8
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 018783AFFD39B59F3E96ECC8342627E48303
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/BjrYMuydNrOfzhC5WfzSoCkv4bg.roa
Signing time: Sat 15 Apr 2023 06:52:41 +0000
ROA not before: Sat 15 Apr 2023 06:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 185.136.205.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:83:af:fd:39:b5:9f:3e:96:ec:c8:34:26:27:e4:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Apr 15 06:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=063ad832ec9d36b39fce10b959fcd2a0292fe1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a3:53:e9:66:9f:af:83:3d:17:88:37:73:57:
a9:10:6b:70:76:e8:f3:e6:bb:2f:04:ee:f1:d4:b2:
1e:af:eb:40:a9:ce:4a:18:d0:6a:07:03:41:f0:06:
de:be:9b:32:53:1a:54:79:b8:dd:1a:09:93:c3:39:
07:cd:d0:5a:80:b1:27:b3:c2:a4:b8:b5:ea:9c:9e:
81:28:9b:00:49:88:ba:e9:d0:5c:72:32:a2:c6:86:
2f:30:8d:d3:fa:87:a0:1f:cb:27:39:4f:eb:73:35:
1d:b5:f7:de:b7:4a:a9:31:ea:5f:00:32:20:27:f1:
ce:2f:8b:0f:85:d5:d7:9c:b6:00:99:04:6e:a9:46:
21:ac:4b:7e:44:48:3d:f2:a2:52:52:3b:73:56:fa:
15:dd:dd:88:81:35:91:18:b2:b6:3b:71:7b:e9:f2:
7f:e3:f1:c4:26:a8:2d:94:d5:78:7d:c9:d7:08:ea:
30:8f:8b:c3:c8:c2:bc:d6:8a:30:e0:be:7b:d0:60:
25:e4:9b:4e:9a:5c:50:81:ff:17:11:42:d8:8d:f1:
9b:80:c3:e1:6d:da:0f:b7:f8:fd:4b:73:33:83:22:
4a:a7:54:32:0a:07:1e:7e:6f:7c:0b:30:9d:17:1f:
9d:18:f1:be:dd:a8:3e:a2:74:13:41:2e:06:a7:bc:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3A:D8:32:EC:9D:36:B3:9F:CE:10:B9:59:FC:D2:A0:29:2F:E1:B8
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/BjrYMuydNrOfzhC5WfzSoCkv4bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9d:89:fe:9a:d3:21:70:c1:28:74:ab:d7:5e:9f:53:76:c6:
da:31:bc:62:ae:10:75:a4:4c:20:ea:a1:da:5c:4e:f6:ff:4c:
b1:8f:f6:ae:ca:98:c9:2d:f6:bf:50:ca:3a:0b:a6:b9:60:ba:
ae:c5:bc:f3:68:3f:cb:aa:84:31:0e:4e:6f:56:45:f6:a0:4b:
b9:33:7b:31:74:e1:ce:eb:ff:d0:c7:0d:c3:6c:da:76:b1:3e:
7e:26:a9:7c:ce:c7:42:df:20:ce:8c:9a:d6:63:db:6c:d4:23:
97:87:1b:a9:6b:e4:02:8b:92:d3:83:69:05:38:06:eb:d9:b6:
68:25:a7:51:b0:c4:79:d4:a5:d6:df:28:09:ef:32:f1:57:5d:
aa:0e:f4:fa:5b:91:2e:db:fc:03:fe:98:ae:2c:78:17:83:bf:
0f:e1:12:3c:75:85:b0:24:f6:0a:a7:ab:49:3a:9c:c6:19:22:
8f:77:d6:c4:d7:f6:28:b7:b2:e8:91:db:66:9f:8a:6a:3c:1b:
53:0d:8a:a9:34:1e:97:97:be:aa:2a:cf:a1:97:f3:13:37:5c:
83:02:d7:9b:d3:89:3d:5b:d0:e3:13:4c:ed:cf:c6:53:e3:31:
84:a1:e5:f0:b0:11:6e:2f:4d:ef:f0:02:dd:61:7b:55:7d:98:
6f:72:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org