Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/SS26R4RZkDWmcnqBMZsllfAV2kA.roa
File: SS26R4RZkDWmcnqBMZsllfAV2kA.roa (raw, json)
Hash identifier: WLzdW7IVGETCGT7RiI02uHB5TSsw8nqjBwILvYdfIbk=
Subject key identifier: 49:2D:BA:47:84:59:90:35:A6:72:7A:81:31:9B:25:95:F0:15:DA:40
Certificate issuer: /CN=75359e8fd9057727f6633a4afe230e30f7f02e0e
Certificate serial: 01856ED4AA12C2139135B721FE61880A5942
Authority key identifier: 75:35:9E:8F:D9:05:77:27:F6:63:3A:4A:FE:23:0E:30:F7:F0:2E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTWej9kFdyf2YzpK_iMOMPfwLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/SS26R4RZkDWmcnqBMZsllfAV2kA.roa
Signing time: Sun 01 Jan 2023 19:35:08 +0000
ROA not before: Sun 01 Jan 2023 19:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.84.26.0/24 maxlen: 24
80.75.213.0/24 maxlen: 24
80.75.208.0/24 maxlen: 24
193.37.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:aa:12:c2:13:91:35:b7:21:fe:61:88:0a:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75359e8fd9057727f6633a4afe230e30f7f02e0e
Validity
Not Before: Jan 1 19:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=492dba4784599035a6727a81319b2595f015da40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:7c:ce:d5:e4:31:5c:07:43:66:c6:8d:f1:
26:20:e6:d5:c5:15:28:1f:e4:ef:ba:7d:a5:a0:ce:
f1:dc:28:3a:0c:74:cc:59:a8:21:e0:c3:00:c6:03:
cd:4d:23:96:1a:4b:60:06:10:6e:8a:eb:ba:bb:b0:
75:47:7b:e1:ae:90:e8:3a:c6:83:28:f7:ee:4f:aa:
02:2a:e3:f3:5e:13:41:89:69:2b:1d:a5:38:fc:7f:
ea:b6:91:96:e6:8b:68:ab:f3:b0:8e:2e:18:49:00:
34:d5:69:de:5b:10:ac:e2:e6:6f:da:7b:38:bf:d5:
e9:ef:35:02:ff:12:ae:79:67:06:07:ec:79:e2:0e:
2e:6d:97:bd:d3:e8:12:38:98:0b:88:bf:20:06:2e:
a9:bb:1a:59:71:a7:9f:e0:76:77:2b:73:3f:ee:9b:
43:5e:e6:45:99:34:06:64:ae:82:86:8d:b4:c5:87:
d9:28:a5:25:bb:fc:09:f7:33:c8:f0:a5:90:be:7f:
ea:db:96:ba:e1:46:5f:a4:42:22:70:e5:3e:71:6d:
d8:5c:b6:cf:0d:e6:d2:f4:57:de:78:50:11:7b:e9:
e6:8b:44:60:24:d4:c9:e6:b2:76:92:e9:2f:68:16:
3f:96:1e:e6:d7:2e:20:f7:6a:2c:48:73:91:4c:63:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2D:BA:47:84:59:90:35:A6:72:7A:81:31:9B:25:95:F0:15:DA:40
X509v3 Authority Key Identifier:
keyid:75:35:9E:8F:D9:05:77:27:F6:63:3A:4A:FE:23:0E:30:F7:F0:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTWej9kFdyf2YzpK_iMOMPfwLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/SS26R4RZkDWmcnqBMZsllfAV2kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/dTWej9kFdyf2YzpK_iMOMPfwLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.208.0/24
80.75.213.0/24
193.37.39.0/24
193.84.26.0/24
Signature Algorithm: sha256WithRSAEncryption
31:43:91:7e:c2:01:a2:6b:87:8a:af:9a:1f:c6:f5:a0:76:a9:
d9:44:fc:03:71:43:21:fc:3d:e1:d3:56:34:8e:09:aa:57:b1:
3d:54:d3:f1:02:2e:9b:94:f9:fb:8b:36:58:34:2d:59:af:a9:
4f:67:36:86:c1:84:29:5a:53:d4:16:3b:1a:d2:da:1b:93:63:
be:c7:60:39:43:ca:b8:e0:b9:30:7f:6a:f0:57:42:02:1c:6d:
47:11:43:48:8c:0e:cd:d0:a2:18:31:d0:af:91:70:b4:b2:6e:
a5:a6:d3:e9:6f:7a:44:9a:e8:10:3d:5c:d6:27:af:08:41:46:
2f:ce:29:66:8c:fd:2a:db:41:53:e4:34:8e:45:19:fd:03:e1:
e1:dd:0c:4c:f6:14:19:d3:86:11:87:8b:44:c9:dc:01:50:71:
21:c8:1a:60:fa:a3:fa:2c:99:66:06:ae:78:03:90:86:e8:cb:
b9:25:38:c4:fe:3d:17:27:bb:94:d2:9e:7e:d2:2f:14:9a:83:
a8:be:57:c9:da:47:67:d8:a7:aa:bc:5b:68:51:11:8b:55:e4:
18:2b:ee:3c:cf:3b:90:7e:f3:d0:4c:41:d8:c8:ce:2d:b1:60:
9a:76:63:29:51:22:b3:e7:39:16:d5:fc:cb:38:57:ca:36:ab:
7f:45:d6:6c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVu1KoSwhORNbch/mGICllCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzU5ZThmZDkwNTc3MjdmNjYzM2E0YWZlMjMwZTMwZjdm
MDJlMGUwHhcNMjMwMTAxMTkzNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTJkYmE0Nzg0NTk5MDM1YTY3MjdhODEzMTliMjU5NWYwMTVkYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmN8ztXkMVwHQ2bGjfEmIObVxRUo
H+Tvun2loM7x3Cg6DHTMWagh4MMAxgPNTSOWGktgBhBuiuu6u7B1R3vhrpDoOsaD
KPfuT6oCKuPzXhNBiWkrHaU4/H/qtpGW5otoq/Owji4YSQA01WneWxCs4uZv2ns4
v9Xp7zUC/xKueWcGB+x54g4ubZe90+gSOJgLiL8gBi6puxpZcaef4HZ3K3M/7ptD
XuZFmTQGZK6Cho20xYfZKKUlu/wJ9zPI8KWQvn/q25a64UZfpEIicOU+cW3YXLbP
DebS9FfeeFARe+nmi0RgJNTJ5rJ2kukvaBY/lh7m1y4g92osSHORTGNKyQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEktukeEWZA1pnJ6gTGbJZXwFdpAMB8GA1UdIwQY
MBaAFHU1no/ZBXcn9mM6Sv4jDjD38C4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRXZWo5a0ZkeWYyWXpwS19pTU9NUGZ3TGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yN2FhZTItZmU5OS00YjE4LTkzNGIt
OTM4MGZlZDhkMDJmLzEvU1MyNlI0UlprRFdtY25xQk1ac2xsZkFWMmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yN2FhZTItZmU5OS00YjE4LTkzNGItOTM4MGZlZDhkMDJm
LzEvZFRXZWo5a0ZkeWYyWXpwS19pTU9NUGZ3TGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUEvQAwQA
UEvVAwQAwSUnAwQAwVQaMA0GCSqGSIb3DQEBCwUAA4IBAQAxQ5F+wgGia4eKr5of
xvWgdqnZRPwDcUMh/D3h01Y0jgmqV7E9VNPxAi6blPn7izZYNC1Zr6lPZzaGwYQp
WlPUFjsa0tobk2O+x2A5Q8q44Lkwf2rwV0ICHG1HEUNIjA7N0KIYMdCvkXC0sm6l
ptPpb3pEmugQPVzWJ68IQUYvzilmjP0q20FT5DSORRn9A+Hh3QxM9hQZ04YRh4tE
ydwBUHEhyBpg+qP6LJlmBq54A5CG6Mu5JTjE/j0XJ7uU0p5+0i8UmoOovlfJ2kdn
2KeqvFtoURGLVeQYK+48zzuQfvPQTEHYyM4tsWCadmMpUSKz5zkW1fzLOFfKNqt/
RdZs
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:07 2024 by rpki-client on console-ams.rpki-client.org