Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/l5n5TdE8nAsLDN4lAHMMjUN2kkE.roa
File: l5n5TdE8nAsLDN4lAHMMjUN2kkE.roa (raw, json)
Hash identifier: evsjM+YIH91j7OavdyvetTZZz9DoWCPrCEqAjSdyWXs=
Subject key identifier: 97:99:F9:4D:D1:3C:9C:0B:0B:0C:DE:25:00:73:0C:8D:43:76:92:41
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 018781157B3803D9D5B54674794DC0C8C0F9
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/l5n5TdE8nAsLDN4lAHMMjUN2kkE.roa
Signing time: Fri 14 Apr 2023 18:44:41 +0000
ROA not before: Fri 14 Apr 2023 18:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 185.136.205.0/24 maxlen: 24
185.136.206.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:81:15:7b:38:03:d9:d5:b5:46:74:79:4d:c0:c8:c0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Apr 14 18:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9799f94dd13c9c0b0b0cde2500730c8d43769241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:de:9d:2f:8c:3d:b2:94:a1:99:d5:d7:22:
f0:b5:2b:85:56:12:11:ee:8c:74:fb:80:e8:a3:ad:
13:4f:6e:65:7f:f0:b1:6c:ba:9d:39:34:0d:38:88:
3a:dc:fd:1d:e5:16:22:29:6a:8f:99:32:a4:70:a7:
86:2d:6b:dd:13:d9:f5:c3:24:9c:90:94:35:ae:db:
9f:7f:f7:ff:45:43:65:82:fc:2c:1d:45:a3:d7:20:
8f:a0:b3:e8:93:69:ec:d0:96:1f:91:8a:66:8d:03:
4d:e1:ab:fe:0f:a2:c5:a9:62:45:95:a3:ca:55:90:
8e:6a:43:05:a9:b1:e2:64:36:26:76:8c:d4:30:36:
2e:77:bb:87:e5:12:66:4b:c0:ea:4a:c9:6e:30:e5:
fb:fe:47:1c:c4:6f:ce:b3:48:1f:98:67:4c:f1:0d:
05:cc:6b:7a:bb:8b:2f:d6:b6:29:e2:9f:b3:68:88:
2b:36:1c:50:8b:ff:0d:a5:03:2e:0c:39:71:c1:06:
f2:a5:c5:69:5d:15:76:72:18:cd:c4:36:58:41:18:
da:c7:42:a2:6f:90:d3:a9:ee:6d:ba:a0:be:b5:c3:
69:2d:d4:fa:08:1c:a8:4f:1c:b3:fd:34:85:c1:41:
a3:2a:f0:3b:5d:b5:10:6d:a9:78:d2:31:98:7d:36:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:F9:4D:D1:3C:9C:0B:0B:0C:DE:25:00:73:0C:8D:43:76:92:41
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/l5n5TdE8nAsLDN4lAHMMjUN2kkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0-185.136.206.255
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
26:84:67:50:5d:53:c4:53:8d:10:04:10:b3:66:c0:51:c1:75:
a8:b7:83:47:bc:cc:b2:56:64:71:12:9e:50:17:99:67:14:62:
69:c3:a0:89:29:00:8b:f4:50:95:55:49:34:52:41:21:9e:39:
c5:8b:e7:20:c4:49:72:34:2e:03:ee:86:76:c6:d5:d0:bf:c1:
28:35:04:a3:b7:f3:bc:ff:08:05:2b:91:12:a3:7c:6d:6e:f0:
71:d8:9a:59:b2:de:e0:46:d2:a0:75:a2:cd:95:b9:bb:2f:6f:
2a:80:df:58:22:ef:5b:3c:8e:43:b5:7a:0c:a8:1e:07:1d:51:
eb:4e:90:a1:48:fd:56:68:93:d9:35:28:6e:1a:7b:f9:ed:e6:
4a:3d:38:57:c1:97:d8:5e:de:ee:67:64:8d:c0:d9:e2:61:90:
73:fa:1f:c6:ab:ec:37:e1:ca:8b:9c:1a:3a:56:a5:f3:3d:ff:
15:57:b3:a6:d0:6c:d1:79:7a:d6:8d:06:77:8b:d0:1b:0a:db:
29:f9:54:51:14:8d:cb:ce:14:aa:eb:68:aa:36:88:fd:68:bb:
3d:29:46:4e:01:28:41:5b:db:62:0d:c8:a7:4d:25:22:47:64:
2b:01:37:2c:bc:65:61:54:68:22:83:a9:48:4c:5a:cc:06:1b:
f8:8d:61:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org