Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/iVSpP9FuZzr1TrYIpPJJLBCED60.roa
File: iVSpP9FuZzr1TrYIpPJJLBCED60.roa (raw, json)
Hash identifier: V5bil5k4jTxFPvIZOvkf++wUM0Gwo90yiFZlfM8IWSM=
Subject key identifier: 89:54:A9:3F:D1:6E:67:3A:F5:4E:B6:08:A4:F2:49:2C:10:84:0F:AD
Certificate issuer: /CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
Certificate serial: 018CC56DFA1E55FD0C000E5AA57EB3900C14
Authority key identifier: 4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/iVSpP9FuZzr1TrYIpPJJLBCED60.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209097
IP address blocks: 185.115.204.0/24 maxlen: 24
2a12:f284::/32 maxlen: 32
2a12:f282::/32 maxlen: 32
2a12:f280::/32 maxlen: 32
2a12:f286::/31 maxlen: 31
2a12:f285::/32 maxlen: 32
2a12:f283::/32 maxlen: 32
2a12:f281::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fa:1e:55:fd:0c:00:0e:5a:a5:7e:b3:90:0c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8954a93fd16e673af54eb608a4f2492c10840fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:84:d6:41:01:0b:8b:76:e0:10:29:f5:cc:
3c:60:f6:38:18:06:a0:27:24:fc:20:51:eb:c3:38:
4a:c5:d3:88:c8:35:1d:bb:69:6a:f5:20:f0:64:4a:
03:73:aa:ee:32:93:80:8f:4a:4e:75:91:a0:83:2b:
3a:2e:03:57:43:ff:15:e7:47:63:c1:06:27:4a:37:
0b:54:7d:2e:38:a6:8b:86:b7:03:08:7d:93:bb:71:
78:7f:1a:24:e1:57:a9:bc:4c:a5:53:c0:0e:cd:f4:
b8:a8:8e:20:82:32:a6:e8:fa:f4:db:34:34:79:04:
4d:df:60:28:e6:2c:9d:29:7b:fe:f9:13:6d:2e:ff:
25:b6:58:41:24:f5:48:ba:63:ba:49:05:45:14:f3:
55:fa:8c:3e:4f:c0:17:a8:65:08:ff:30:60:45:5a:
ab:c1:34:ed:97:87:b6:ff:02:92:45:85:47:1a:ea:
aa:2f:2a:32:b8:55:6c:93:6e:e9:49:6f:13:21:fb:
17:92:7f:cb:c4:ea:28:20:df:54:a1:26:68:58:ec:
c9:42:62:96:3c:d2:c8:8e:c5:ce:6e:53:65:4e:62:
20:4f:2f:0d:41:99:22:23:14:17:4a:ec:8c:4f:cc:
ef:e6:d1:03:8d:df:79:4f:32:fb:70:1a:c7:75:d4:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:54:A9:3F:D1:6E:67:3A:F5:4E:B6:08:A4:F2:49:2C:10:84:0F:AD
X509v3 Authority Key Identifier:
keyid:4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/iVSpP9FuZzr1TrYIpPJJLBCED60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/TA2tG_GCFaL6gIaRp7xfnnAvmeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.204.0/24
IPv6:
2a12:f280::/29
Signature Algorithm: sha256WithRSAEncryption
5e:d1:4c:9f:2e:c6:dc:51:c8:8d:55:c9:2a:22:78:cc:f1:b9:
4e:28:83:50:7f:c4:ad:26:06:f8:c8:48:38:a9:89:a9:54:00:
3d:30:0f:d6:d4:2a:0c:1e:fc:8c:cc:cd:af:68:c7:e8:1b:d0:
7e:72:e3:5d:49:29:bf:5f:be:03:5d:4c:44:4f:67:f5:f1:aa:
d5:da:d4:68:e3:0a:50:cf:c4:63:d6:f6:a0:5d:1e:d2:76:92:
c3:8c:07:3f:7a:5f:00:70:33:c5:80:7a:08:6d:ae:fc:70:26:
8d:84:2c:12:d1:1c:a8:0c:2c:34:39:f3:2e:a1:5f:49:8f:bb:
a4:51:b7:da:d4:91:9f:a8:ca:61:8d:51:2d:6f:b9:4b:35:2d:
26:aa:c4:e3:b9:aa:af:be:01:ea:d1:4b:2e:86:09:1e:2c:86:
de:1e:fc:77:6c:8d:5e:ce:d2:0e:55:f5:80:1b:e7:f1:b5:aa:
7c:5b:12:cc:59:c4:1a:10:50:d4:3f:9a:a0:af:90:7e:fb:c9:
45:f9:4b:e9:8d:1d:b4:31:c9:05:b1:c3:88:b3:c5:16:c0:0e:
be:e9:42:21:ac:2b:d1:d2:d2:63:08:7b:c5:50:0c:26:22:14:
39:17:96:69:0a:0e:ac:44:ae:cf:42:51:26:d7:3d:98:67:85:
f1:a2:78:0f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFbfoeVf0MAA5apX6zkAwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMGRhZDFiZjE4MjE1YTJmYTgwODY5MWE3YmM1ZjllNzAy
Zjk5ZTIwHhcNMjQwMTAxMTQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTU0YTkzZmQxNmU2NzNhZjU0ZWI2MDhhNGYyNDkyYzEwODQwZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfSE1kEBC4t24BAp9cw8YPY4GAag
JyT8IFHrwzhKxdOIyDUdu2lq9SDwZEoDc6ruMpOAj0pOdZGggys6LgNXQ/8V50dj
wQYnSjcLVH0uOKaLhrcDCH2Tu3F4fxok4VepvEylU8AOzfS4qI4ggjKm6Pr02zQ0
eQRN32Ao5iydKXv++RNtLv8ltlhBJPVIumO6SQVFFPNV+ow+T8AXqGUI/zBgRVqr
wTTtl4e2/wKSRYVHGuqqLyoyuFVsk27pSW8TIfsXkn/LxOooIN9UoSZoWOzJQmKW
PNLIjsXOblNlTmIgTy8NQZkiIxQXSuyMT8zv5tEDjd95TzL7cBrHddT/dQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIlUqT/Rbmc69U62CKTySSwQhA+tMB8GA1UdIwQY
MBaAFEwNrRvxghWi+oCGkae8X55wL5niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEEydEdfR0NGYUw2Z0lhUnA3eGZubkF2bWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84ZjdhZTMtOGU1ZS00ZjA2LTk4MjQt
Yzg2OWQ3NjkxYjMyLzEvaVZTcFA5RnVaenIxVHJZSXBQSkpMQkNFRDYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi84ZjdhZTMtOGU1ZS00ZjA2LTk4MjQtYzg2OWQ3NjkxYjMy
LzEvVEEydEdfR0NGYUw2Z0lhUnA3eGZubkF2bWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXPMMA0E
AgACMAcDBQMqEvKAMA0GCSqGSIb3DQEBCwUAA4IBAQBe0UyfLsbcUciNVckqInjM
8blOKINQf8StJgb4yEg4qYmpVAA9MA/W1CoMHvyMzM2vaMfoG9B+cuNdSSm/X74D
XUxET2f18arV2tRo4wpQz8Rj1vagXR7SdpLDjAc/el8AcDPFgHoIba78cCaNhCwS
0RyoDCw0OfMuoV9Jj7ukUbfa1JGfqMphjVEtb7lLNS0mqsTjuaqvvgHq0Usuhgke
LIbeHvx3bI1eztIOVfWAG+fxtap8WxLMWcQaEFDUP5qgr5B++8lF+UvpjR20MckF
scOIs8UWwA6+6UIhrCvR0tJjCHvFUAwmIhQ5F5ZpCg6sRK7PQlEm1z2YZ4XxongP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:08 2024 by rpki-client on console-fra.rpki-client.org