Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/oy2y1mgnyt5SlFeAkS6yFrq_8HU.roa
File: oy2y1mgnyt5SlFeAkS6yFrq_8HU.roa (raw, json)
Hash identifier: nuKK8hHnccG/GBGwUUyOUcxY+mSHxX1a7OCx/Ui+/WI=
Subject key identifier: A3:2D:B2:D6:68:27:CA:DE:52:94:57:80:91:2E:B2:16:BA:BF:F0:75
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 0185728C68A0D75DDDF9F8CFCBB05CAC31B7
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/oy2y1mgnyt5SlFeAkS6yFrq_8HU.roa
Signing time: Mon 02 Jan 2023 12:54:42 +0000
ROA not before: Mon 02 Jan 2023 12:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 185.136.205.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:68:a0:d7:5d:dd:f9:f8:cf:cb:b0:5c:ac:31:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Jan 2 12:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a32db2d66827cade52945780912eb216babff075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:ea:d1:17:d7:ba:ac:dd:99:00:3e:db:5f:
74:ab:50:55:a9:db:a9:ff:11:f1:dd:d9:a9:af:4e:
c6:21:07:d6:b1:63:60:19:50:38:9c:3d:28:96:d2:
39:0c:08:fd:c5:9a:42:af:56:6e:24:95:b0:e2:d6:
b2:dc:d5:70:75:73:b4:2e:62:4e:c6:0a:5f:7b:37:
52:6d:15:4f:61:02:76:e2:0e:9d:47:b1:b7:31:df:
56:d8:25:ea:20:75:eb:8f:a2:78:5d:83:b2:09:2b:
fd:66:b8:0b:c2:9d:f2:23:19:ad:5f:fd:20:00:ed:
d0:fc:00:5b:ba:db:92:0a:9f:e6:6e:42:98:de:0f:
5f:ac:b9:b4:be:e2:ac:6b:1e:4a:66:95:c4:22:86:
4b:b0:55:0b:02:2f:e5:aa:de:6e:09:90:90:1f:c0:
fe:6d:dd:62:a5:80:c9:0f:86:7e:23:d0:cf:43:1b:
0f:22:1f:e3:55:b4:4d:a6:af:48:fe:0b:e1:23:8d:
cf:18:c0:0f:31:1a:56:7f:d7:45:d3:47:9b:5a:3c:
11:ea:a7:00:45:64:36:dd:32:22:f3:48:c1:89:57:
0b:25:72:3e:d8:21:94:72:48:b8:1f:64:19:68:bf:
51:c2:4c:bd:e3:06:9e:a5:bc:cc:db:66:77:dc:d0:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:B2:D6:68:27:CA:DE:52:94:57:80:91:2E:B2:16:BA:BF:F0:75
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/oy2y1mgnyt5SlFeAkS6yFrq_8HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0/24
185.136.207.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4c:da:20:4d:5a:05:6b:af:6f:ad:9b:ab:f6:f5:73:fa:34:
75:68:71:00:09:96:29:7e:51:14:f3:d3:70:31:29:81:85:ef:
a4:e8:a1:b9:f6:3e:af:9e:8e:ab:00:09:0f:3c:c6:82:5d:d7:
48:ae:14:1d:23:7b:45:fb:f0:42:52:05:ea:f1:e6:c1:f8:b3:
b5:2f:c5:f8:6a:07:65:b6:ce:d1:08:96:27:a1:06:47:b0:ee:
34:6a:00:7c:8d:b7:33:93:eb:68:0b:d6:a3:67:8d:e3:71:c8:
ad:bf:6b:de:da:85:31:7f:73:34:cc:c0:ba:4e:c3:67:04:83:
67:6a:02:27:23:b1:1a:2a:91:81:90:e4:7c:54:13:22:15:66:
22:75:cf:9f:cb:3b:d7:7c:ca:14:25:8d:f3:2f:a5:4a:cc:85:
a2:48:ce:76:f0:e6:e9:10:d7:6b:b6:82:05:6d:59:8f:bc:38:
81:6c:c1:6d:64:04:11:79:8a:de:a8:20:ca:3c:38:fd:31:8d:
70:82:db:d3:ac:12:f6:be:81:17:17:3a:05:03:18:90:e3:0c:
3e:3a:30:1e:d0:b0:db:60:bf:60:8e:fb:a6:f7:08:21:00:91:
39:8c:7c:08:99:fa:15:2e:20:63:cc:4a:0a:3f:0f:f1:32:44:
22:cc:65:38
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVyjGig113d+fjPy7BcrDG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MDU5NGYyNjVmMGMzZWIwMGU3Y2ZjMjhmZWM4NTkwYzhh
NjMyYTUwHhcNMjMwMTAyMTI1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzJkYjJkNjY4MjdjYWRlNTI5NDU3ODA5MTJlYjIxNmJhYmZmMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5zq0RfXuqzdmQA+2190q1BVqdup
/xHx3dmpr07GIQfWsWNgGVA4nD0oltI5DAj9xZpCr1ZuJJWw4tay3NVwdXO0LmJO
xgpfezdSbRVPYQJ24g6dR7G3Md9W2CXqIHXrj6J4XYOyCSv9ZrgLwp3yIxmtX/0g
AO3Q/ABbutuSCp/mbkKY3g9frLm0vuKsax5KZpXEIoZLsFULAi/lqt5uCZCQH8D+
bd1ipYDJD4Z+I9DPQxsPIh/jVbRNpq9I/gvhI43PGMAPMRpWf9dF00ebWjwR6qcA
RWQ23TIi80jBiVcLJXI+2CGUcki4H2QZaL9Rwky94waepbzM22Z33NCVgwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKMtstZoJ8reUpRXgJEusha6v/B1MB8GA1UdIwQY
MBaAFLcFlPJl8MPrAOfPwo/shZDIpjKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHdXVThtWHd3LXNBNThfQ2oteUZrTWltTXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMDc3YmEtMWRjNi00MTE3LWJjYjct
YWI0Y2RmMzE0NWM5LzEvb3kyeTFtZ255dDVTbEZlQWtTNnlGcnFfOEhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yMDc3YmEtMWRjNi00MTE3LWJjYjctYWI0Y2RmMzE0NWM5
LzEvdHdXVThtWHd3LXNBNThfQ2oteUZrTWltTXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuYjNAwQA
uYjPAwQAuc8nMA0GCSqGSIb3DQEBCwUAA4IBAQCFTNogTVoFa69vrZur9vVz+jR1
aHEACZYpflEU89NwMSmBhe+k6KG59j6vno6rAAkPPMaCXddIrhQdI3tF+/BCUgXq
8ebB+LO1L8X4agdlts7RCJYnoQZHsO40agB8jbczk+toC9ajZ43jccitv2ve2oUx
f3M0zMC6TsNnBINnagInI7EaKpGBkOR8VBMiFWYidc+fyzvXfMoUJY3zL6VKzIWi
SM528ObpENdrtoIFbVmPvDiBbMFtZAQReYreqCDKPDj9MY1wgtvTrBL2voEXFzoF
AxiQ4ww+OjAe0LDbYL9gjvum9wghAJE5jHwImfoVLiBjzEoKPw/xMkQizGU4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org