Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/UJ9KlW5ZomHIXTSNecNMuea4D3Q.roa
File: UJ9KlW5ZomHIXTSNecNMuea4D3Q.roa (raw, json)
Hash identifier: YfYpVymBiN8ZnrvCrQhrq1hvVlLFhzWAhobqc+s0Bpk=
Subject key identifier: 50:9F:4A:95:6E:59:A2:61:C8:5D:34:8D:79:C3:4C:B9:E6:B8:0F:74
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 0975E2EB
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/UJ9KlW5ZomHIXTSNecNMuea4D3Q.roa
Signing time: Sat 01 Jan 2022 12:03:32 +0000
ROA not before: Sat 01 Jan 2022 12:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203377
IP address blocks: 185.136.204.0/24 maxlen: 24
185.136.205.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
2a0b:a280:7::/48 maxlen: 48
2a0b:a280:2::/48 maxlen: 48
2a09:f340:1::/48 maxlen: 48
2a0b:a280:8::/48 maxlen: 48
2a0b:a280:6::/48 maxlen: 48
2a0b:a280:1::/48 maxlen: 48
2a09:f340:5::/48 maxlen: 48
2a09:f340::/48 maxlen: 48
2a09:f340:3::/48 maxlen: 48
2a0b:a280:5::/48 maxlen: 48
2a0b:a280::/48 maxlen: 48
2a0b:a280:10::/48 maxlen: 48
2a09:f340:4::/48 maxlen: 48
2a0b:a280:3::/48 maxlen: 48
2a09:f340:2::/48 maxlen: 48
2a0b:a280:9::/48 maxlen: 48
2a0b:a280:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158720747 (0x975e2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Jan 1 12:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=509f4a956e59a261c85d348d79c34cb9e6b80f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f4:c8:47:ec:45:51:f9:81:d3:8f:77:04:94:
66:c9:a4:d3:ff:91:5d:64:a2:0d:68:f9:2e:cd:44:
e0:5f:5b:78:25:25:97:ec:83:ad:91:ed:af:49:a9:
eb:26:f9:2b:03:99:e4:1f:35:98:7b:09:82:2f:5f:
1a:aa:01:86:61:d9:f2:35:1a:6c:d9:ab:a6:1f:d6:
e6:2f:bc:b6:99:7e:b9:06:00:be:2a:61:24:e6:a6:
88:56:ec:4f:a9:1c:c7:8f:f0:b0:a1:af:48:e4:2d:
c6:f1:0f:a7:a1:ee:60:5e:ba:49:d1:0f:57:e7:a0:
51:41:b1:e2:94:40:2c:e8:1e:73:a8:dd:92:2f:3f:
44:b8:74:78:81:c2:9e:af:29:c8:08:e6:dd:b2:a9:
fd:fc:64:4e:ea:0d:18:6a:e2:21:f0:22:5a:04:27:
ae:ba:d5:62:3a:7d:64:4e:5f:5c:39:03:10:b6:0e:
88:98:43:55:3e:72:2c:cb:9e:4f:5c:1c:f5:7c:b9:
ba:d6:d0:a4:8e:cf:6f:72:b9:41:8d:9e:9d:75:7e:
c4:58:fb:c3:d9:7f:cc:0a:0a:d5:d8:2a:14:23:94:
bc:90:5f:4e:71:74:4b:d4:47:47:b8:59:73:18:92:
ff:54:dc:01:da:92:cd:27:54:ca:36:05:17:86:aa:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9F:4A:95:6E:59:A2:61:C8:5D:34:8D:79:C3:4C:B9:E6:B8:0F:74
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/UJ9KlW5ZomHIXTSNecNMuea4D3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.204.0/23
185.136.207.0/24
185.207.39.0/24
IPv6:
2a09:f340::-2a09:f340:5:ffff:ffff:ffff:ffff:ffff
2a0b:a280::-2a0b:a280:9:ffff:ffff:ffff:ffff:ffff
2a0b:a280:10::/48
Signature Algorithm: sha256WithRSAEncryption
97:a4:c4:57:9e:06:74:02:bd:10:3e:3b:4a:4e:28:02:e4:5a:
74:9b:99:b9:bc:4a:04:81:11:3e:4f:d8:bf:39:e8:d7:2a:b4:
20:f6:c6:7b:79:60:35:64:e0:78:72:87:01:7c:70:1f:81:2d:
41:57:5d:c9:aa:eb:09:6b:c3:a8:d0:76:e0:0f:0b:28:89:c8:
49:13:fc:e1:89:30:cb:c7:a6:63:56:55:81:95:53:de:fa:45:
56:b2:14:0d:14:db:e2:60:a8:b3:50:d6:e4:9e:1a:88:b5:2b:
80:d4:c4:48:df:93:bf:73:b6:79:33:9c:73:4e:4c:a1:a8:35:
f6:e5:30:cc:9f:b6:11:f3:f6:3d:98:e4:97:bf:21:6a:cb:ea:
d2:c8:d8:80:fc:f4:ff:b8:6f:80:27:39:df:62:b8:58:ab:0a:
f2:03:d5:e9:b1:c7:e8:80:da:47:f6:a3:65:cc:e0:8b:2b:d2:
cc:49:29:86:74:56:d7:b0:66:12:47:13:94:2b:ab:61:c7:07:
bf:40:c5:c3:79:e5:66:11:63:b0:cc:9a:7f:3e:2c:81:b3:94:
75:d3:2b:62:1a:e1:a8:d5:f6:fe:19:1f:1f:a0:29:25:ed:53:
e9:25:61:3c:ec:64:61:3f:80:39:b2:95:42:d1:af:ec:38:47:
ad:20:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org