Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/cP0m1CSgFtQam52XUb4x6UdAXvo.roa
File: cP0m1CSgFtQam52XUb4x6UdAXvo.roa (raw, json)
Hash identifier: E3MFoR6+8OCBmR1WLCwGEHfDAtVhLJCTIrH+s6/muXg=
Subject key identifier: 70:FD:26:D4:24:A0:16:D4:1A:9B:9D:97:51:BE:31:E9:47:40:5E:FA
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 0185965262F7C7AFAD5D0AC0973654BEA675
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/cP0m1CSgFtQam52XUb4x6UdAXvo.roa
Signing time: Mon 09 Jan 2023 11:37:39 +0000
ROA not before: Mon 09 Jan 2023 11:37:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 185.136.205.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:52:62:f7:c7:af:ad:5d:0a:c0:97:36:54:be:a6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Jan 9 11:37:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70fd26d424a016d41a9b9d9751be31e947405efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:27:0b:13:a7:7c:a3:93:40:7f:dc:c4:f9:
8c:fe:48:3f:1b:ac:dc:02:0d:e8:a5:fc:da:e9:8a:
17:cc:20:a5:57:72:35:92:ce:ac:71:db:1c:57:0c:
37:b5:d5:4c:d8:03:21:c4:9e:e7:64:09:3a:53:34:
d5:a2:78:21:d2:32:bf:08:83:2c:27:c5:bf:45:b4:
1f:62:6d:8e:4c:e4:f6:53:46:21:bf:d8:61:6e:2b:
88:9e:aa:07:91:7c:31:6c:be:28:b0:19:31:e7:b6:
1f:38:3f:04:77:85:4f:13:d1:93:9e:dd:1b:fa:92:
b1:e5:b8:f6:46:84:35:79:71:f2:03:a3:14:e3:7f:
f3:8f:8d:26:16:01:47:b8:72:c6:25:c4:2d:b5:91:
26:59:31:49:72:0b:44:aa:29:f5:f6:8a:59:ff:d3:
1b:10:61:4d:1c:1d:19:e8:11:12:58:97:53:11:b2:
b1:9c:77:4d:c1:e8:e3:0e:1f:42:82:45:63:a2:0e:
1d:85:41:c8:14:7c:d8:06:10:23:84:37:b1:52:fd:
1f:82:f8:30:25:32:66:63:f5:c5:01:89:24:79:41:
00:43:8e:4c:c5:5a:04:cc:1d:33:24:6e:1f:74:11:
52:c3:38:80:ac:e4:38:95:b7:d9:ef:28:4a:58:3e:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FD:26:D4:24:A0:16:D4:1A:9B:9D:97:51:BE:31:E9:47:40:5E:FA
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/cP0m1CSgFtQam52XUb4x6UdAXvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
00:86:76:1c:39:72:61:b1:06:a7:bf:b6:ca:71:fc:27:ef:d4:
c9:64:e1:ba:2b:08:31:ff:78:1f:c9:d4:da:64:b1:d9:c7:54:
cb:a7:5d:9d:5c:22:72:d7:e8:c7:ba:05:5b:49:8c:0d:fe:0e:
65:18:d1:7d:52:cb:44:31:88:bc:46:9d:7d:c9:47:be:b8:b0:
5f:62:36:fc:ac:b7:17:ea:70:0b:f7:bd:3b:f1:ed:94:3f:a9:
a3:1b:4a:88:ee:1f:d9:08:2a:dd:2c:36:64:41:cd:fc:ac:97:
88:d8:ae:65:7f:36:7b:3c:c1:3c:d6:e5:4c:44:32:a0:83:1e:
b0:5a:de:5d:03:f7:6d:29:46:6f:3e:e2:9e:04:19:2a:bf:d0:
73:1f:9d:74:dd:5e:5f:82:59:39:7c:16:d4:a6:50:89:8a:fa:
4f:c0:68:3d:fc:d8:6a:5a:0b:08:bb:a4:5c:ec:35:90:8f:4d:
c5:50:14:55:ca:7f:88:73:89:4e:43:4c:cc:46:1a:a1:1b:ea:
64:f1:66:e5:e8:ce:be:e3:4f:6d:3c:31:21:79:79:79:bd:c8:
40:e8:52:61:ed:3c:e4:f3:0d:19:71:83:ae:36:72:f2:73:7d:
18:af:90:06:2b:f0:37:6b:bf:0b:13:cb:58:da:96:3a:08:a7:
e8:e8:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org