Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/GwwrlvjLeytA8M8MBIUJrskYdXY.roa
File: GwwrlvjLeytA8M8MBIUJrskYdXY.roa (raw, json)
Hash identifier: ++RPC+0wipQQH/KQShH5/99xTt9/fHKfpy3o/bNOqHM=
Subject key identifier: 1B:0C:2B:96:F8:CB:7B:2B:40:F0:CF:0C:04:85:09:AE:C9:18:75:76
Certificate issuer: /CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Certificate serial: 018CC26CFEA673F90384D2F4FED80FA1D702
Authority key identifier: FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/GwwrlvjLeytA8M8MBIUJrskYdXY.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204995
IP address blocks: 185.184.9.0/24 maxlen: 24
185.184.8.0/24 maxlen: 24
185.184.11.0/24 maxlen: 24
2a0b:2180:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fe:a6:73:f9:03:84:d2:f4:fe:d8:0f:a1:d7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b0c2b96f8cb7b2b40f0cf0c048509aec9187576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:c2:57:68:11:d5:b8:cf:8e:c0:15:a6:07:
dd:1b:a0:98:16:38:95:5b:56:e1:21:31:ad:7c:f0:
09:ca:de:a8:a6:90:66:9c:58:87:bf:fb:d3:46:ee:
1a:5d:e0:2c:77:8f:c4:25:c7:90:99:6a:28:51:e5:
8b:c4:2b:dc:0e:c4:fa:00:3a:d9:c8:29:57:ae:7c:
75:24:da:3f:f2:1d:6c:83:d4:9b:8a:3a:64:f9:a6:
a1:b1:83:94:e7:20:ba:90:30:4e:bc:f0:d1:56:18:
64:b9:70:11:07:cf:15:5b:61:b3:e0:05:a4:22:53:
99:2d:9c:9f:84:2c:a3:dd:6d:59:87:06:45:f7:eb:
04:23:27:ce:5f:c1:a0:a5:5c:5e:9b:c6:b3:d9:83:
2a:b9:ae:e2:bf:19:7a:05:7b:44:1a:53:fb:bb:52:
5d:73:9f:a3:1b:ae:91:dd:79:d5:20:0d:5d:51:4e:
5d:1e:fd:a1:bd:6b:aa:3a:59:8c:3c:e2:6e:7f:cd:
27:8a:bc:c6:16:fe:71:92:4c:02:d4:d5:f9:22:11:
a9:e3:70:73:06:18:f9:20:9f:5c:ff:10:f1:39:f6:
56:16:10:64:d5:29:0c:51:6a:65:29:07:a4:24:92:
f6:a8:a8:bb:59:44:17:f2:ac:16:94:08:a4:e3:07:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0C:2B:96:F8:CB:7B:2B:40:F0:CF:0C:04:85:09:AE:C9:18:75:76
X509v3 Authority Key Identifier:
keyid:FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/GwwrlvjLeytA8M8MBIUJrskYdXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/_4Nu2M0puBuEIaHauSCQXi7XYYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.8.0/23
185.184.11.0/24
IPv6:
2a0b:2180:1::/48
Signature Algorithm: sha256WithRSAEncryption
1f:95:f9:f1:60:72:b1:46:64:b4:d4:d1:d5:d7:b3:98:22:27:
5e:73:61:41:7c:01:01:00:63:c4:23:5f:b2:4e:b6:70:fe:46:
4b:d6:6e:7f:40:44:23:87:0d:21:89:74:ed:13:23:93:e5:05:
ce:87:79:77:8e:f8:c9:bd:a5:33:77:2f:78:0c:8d:21:08:a6:
a7:1c:0b:ad:5f:8e:fc:c8:af:14:69:1c:f4:fa:f4:3c:22:74:
ca:9f:5b:4e:4a:7d:96:4b:f1:1e:b1:a5:c7:29:5a:8d:a0:93:
3d:e8:8c:2f:e0:fa:a9:5f:64:de:32:f1:8a:53:70:24:6b:0e:
17:47:18:2d:9d:a3:d1:77:34:4a:45:2c:44:27:c3:a9:c3:ca:
6f:0f:c0:c8:fe:1f:40:ed:d6:38:ea:ba:a8:e1:24:61:c2:97:
14:ed:fa:38:d8:5b:d8:a6:0f:cd:61:da:03:ec:47:ba:7c:28:
18:96:90:97:05:4f:ff:c1:b3:6f:1e:62:a6:d5:30:33:13:6e:
f2:91:a5:ff:eb:6a:71:6a:0d:41:21:8e:9f:01:86:a4:21:56:
fa:51:cc:ca:76:72:2d:e7:c6:20:b7:95:98:8a:17:97:91:cd:
f8:00:28:15:b3:4e:28:1a:66:e6:3b:11:b1:28:9d:c1:3d:d0:
90:ec:3f:f6
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzCbP6mc/kDhNL0/tgPodcCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODM2ZWQ4Y2QyOWI4MWI4NDIxYTFkYWI5MjA5MDVlMmVk
NzYxODQwHhcNMjQwMTAxMDAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjBjMmI5NmY4Y2I3YjJiNDBmMGNmMGMwNDg1MDlhZWM5MTg3NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9nCV2gR1bjPjsAVpgfdG6CYFjiV
W1bhITGtfPAJyt6oppBmnFiHv/vTRu4aXeAsd4/EJceQmWooUeWLxCvcDsT6ADrZ
yClXrnx1JNo/8h1sg9Sbijpk+aahsYOU5yC6kDBOvPDRVhhkuXARB88VW2Gz4AWk
IlOZLZyfhCyj3W1ZhwZF9+sEIyfOX8GgpVxem8az2YMqua7ivxl6BXtEGlP7u1Jd
c5+jG66R3XnVIA1dUU5dHv2hvWuqOlmMPOJuf80nirzGFv5xkkwC1NX5IhGp43Bz
Bhj5IJ9c/xDxOfZWFhBk1SkMUWplKQekJJL2qKi7WUQX8qwWlAik4weVgQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFBsMK5b4y3srQPDPDASFCa7JGHV2MB8GA1UdIwQY
MBaAFP+DbtjNKbgbhCGh2rkgkF4u12GEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzROdTJNMHB1QnVFSWFIYXVTQ1FYaTdYWVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81N2Q1ODEtMzk5NC00ZDgzLWExYjAt
OTY4NDcwYjY1MGY0LzEvR3d3cmx2akxleXRBOE04TUJJVUpyc2tZZFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81N2Q1ODEtMzk5NC00ZDgzLWExYjAtOTY4NDcwYjY1MGY0
LzEvXzROdTJNMHB1QnVFSWFIYXVTQ1FYaTdYWVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBubgIAwQA
ubgLMA8EAgACMAkDBwAqCyGAAAEwDQYJKoZIhvcNAQELBQADggEBAB+V+fFgcrFG
ZLTU0dXXs5giJ15zYUF8AQEAY8QjX7JOtnD+RkvWbn9ARCOHDSGJdO0TI5PlBc6H
eXeO+Mm9pTN3L3gMjSEIpqccC61fjvzIrxRpHPT69DwidMqfW05KfZZL8R6xpccp
Wo2gkz3ojC/g+qlfZN4y8YpTcCRrDhdHGC2do9F3NEpFLEQnw6nDym8PwMj+H0Dt
1jjquqjhJGHClxTt+jjYW9imD81h2gPsR7p8KBiWkJcFT//Bs28eYqbVMDMTbvKR
pf/ranFqDUEhjp8BhqQhVvpRzMp2ci3nxiC3lZiKF5eRzfgAKBWzTigaZuY7EbEo
ncE90JDsP/Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org