Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/CMjUuL8TYMqKn9OWPh1Nxw2sBeg.roa
File: CMjUuL8TYMqKn9OWPh1Nxw2sBeg.roa (raw, json)
Hash identifier: gmVDy/p9Ex1A4edn0Y8roiyENBnk0z9C2q/LEdyLJt8=
Subject key identifier: 08:C8:D4:B8:BF:13:60:CA:8A:9F:D3:96:3E:1D:4D:C7:0D:AC:05:E8
Certificate issuer: /CN=39b463372b9ddf448b3fc3eaed58441194782d06
Certificate serial: 0568C580
Authority key identifier: 39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/CMjUuL8TYMqKn9OWPh1Nxw2sBeg.roa
Signing time: Sat 01 Jan 2022 12:01:50 +0000
ROA not before: Sat 01 Jan 2022 12:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206077
IP address blocks: 185.253.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90752384 (0x568c580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b463372b9ddf448b3fc3eaed58441194782d06
Validity
Not Before: Jan 1 12:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08c8d4b8bf1360ca8a9fd3963e1d4dc70dac05e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:b2:4e:47:95:c5:42:09:9c:9c:1d:30:2f:
4f:25:2b:f1:78:4a:d1:db:ce:e3:c6:ae:45:95:eb:
1c:4f:27:02:c9:40:14:40:5a:1f:38:b4:ea:7d:8c:
d0:9a:a9:19:75:1c:1e:ee:c2:48:a7:a9:3f:ff:8d:
d9:bb:27:05:38:56:e3:43:8b:d8:35:51:7d:ff:c4:
75:fd:b7:df:73:24:b7:62:58:53:15:d7:55:74:6a:
51:b9:87:28:29:8f:09:c4:8a:a1:a6:3f:66:f3:45:
02:d2:1a:a9:ff:55:12:12:dc:a0:23:f0:64:e0:64:
ed:71:72:08:dc:e7:6b:62:04:86:b8:8c:86:8c:a1:
df:60:9a:63:f7:9a:77:d1:a1:ff:28:12:cf:3f:dd:
1b:5b:30:ad:0c:5a:6a:67:aa:75:8d:05:81:f5:92:
cb:6e:e1:35:d8:b6:88:77:f1:0e:09:bb:69:58:8b:
ce:f4:39:dd:85:d9:79:8a:a0:b1:e3:8d:42:22:5d:
cb:58:18:ad:92:86:79:00:90:77:89:8a:fb:bf:66:
db:b4:bc:7b:94:97:e4:b0:97:f5:cd:5a:d3:9c:37:
65:4c:7b:fe:36:2f:98:e9:79:be:c7:4d:33:eb:70:
88:68:b8:58:18:b6:18:b8:49:08:bd:84:7f:1b:43:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:D4:B8:BF:13:60:CA:8A:9F:D3:96:3E:1D:4D:C7:0D:AC:05:E8
X509v3 Authority Key Identifier:
keyid:39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/CMjUuL8TYMqKn9OWPh1Nxw2sBeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/ObRjNyud30SLP8Pq7VhEEZR4LQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.146.0/24
Signature Algorithm: sha256WithRSAEncryption
80:91:21:5a:c2:0a:54:b0:12:c0:b0:31:6c:7c:9e:34:e8:83:
71:77:ce:ee:05:07:6c:93:c7:8c:5b:09:8a:88:7e:44:4e:6b:
00:b5:26:38:c3:63:57:c8:14:33:c9:de:4d:f7:65:41:34:91:
88:52:ad:f3:0f:11:bd:25:30:52:26:da:9c:0a:79:ee:1d:64:
e8:39:b7:9a:f6:60:41:8b:80:05:18:6e:af:86:25:90:95:56:
22:3b:4d:7e:e5:f2:27:0b:63:f9:84:f7:f7:81:1e:74:9a:97:
f5:ae:d6:29:6d:58:bb:ed:52:b7:99:73:92:04:0e:cb:5d:bd:
90:f1:80:1b:d6:26:52:4c:1a:37:99:9c:1b:c9:18:f2:13:d9:
80:19:53:cc:b4:e4:14:f2:7f:29:8f:2d:33:f6:a7:c8:74:37:
c5:29:ec:5b:41:8a:df:79:d3:b6:5f:f4:18:83:b2:8c:ac:94:
5a:05:44:6f:a0:d5:cb:81:d3:ed:89:8e:ae:c9:cf:73:c2:9a:
96:77:99:7f:cb:31:d0:e7:a2:da:83:d0:6c:f1:fe:db:21:d3:
38:b8:5c:a9:fb:55:c9:3c:ec:fc:12:0d:85:7a:67:3b:52:52:
07:4f:35:e9:90:22:90:07:e6:e6:01:be:7b:02:12:ac:14:7e:
94:95:a8:16
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBWjFgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OWI0NjMzNzJiOWRkZjQ0OGIzZmMzZWFlZDU4NDQxMTk0NzgyZDA2MB4XDTIyMDEw
MTEyMDE1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhjOGQ0YjhiZjEz
NjBjYThhOWZkMzk2M2UxZDRkYzcwZGFjMDVlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMzEsk5HlcVCCZycHTAvTyUr8XhK0dvO48auRZXrHE8nAslA
FEBaHzi06n2M0JqpGXUcHu7CSKepP/+N2bsnBThW40OL2DVRff/Edf2333Mkt2JY
UxXXVXRqUbmHKCmPCcSKoaY/ZvNFAtIaqf9VEhLcoCPwZOBk7XFyCNzna2IEhriM
hoyh32CaY/ead9Gh/ygSzz/dG1swrQxaameqdY0FgfWSy27hNdi2iHfxDgm7aViL
zvQ53YXZeYqgseONQiJdy1gYrZKGeQCQd4mK+79m27S8e5SX5LCX9c1a05w3ZUx7
/jYvmOl5vsdNM+twiGi4WBi2GLhJCL2EfxtDrNkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQIyNS4vxNgyoqf05Y+HU3HDawF6DAfBgNVHSMEGDAWgBQ5tGM3K53fRIs/
w+rtWEQRlHgtBjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09iUmpOeXVkMzBTTFA4UHE3VmhFRVpSNExRWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvNDUwMTM4LWY0YjMtNDY4OS1iNGM5LTRmNzRkYmUxYjc2Ni8x
L0NNalV1TDhUWU1xS245T1dQaDFOeHcyc0JlZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
NDUwMTM4LWY0YjMtNDY4OS1iNGM5LTRmNzRkYmUxYjc2Ni8xL09iUmpOeXVkMzBT
TFA4UHE3VmhFRVpSNExRWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn9kjANBgkqhkiG9w0BAQsFAAOC
AQEAgJEhWsIKVLASwLAxbHyeNOiDcXfO7gUHbJPHjFsJioh+RE5rALUmOMNjV8gU
M8neTfdlQTSRiFKt8w8RvSUwUibanAp57h1k6Dm3mvZgQYuABRhur4YlkJVWIjtN
fuXyJwtj+YT394EedJqX9a7WKW1Yu+1St5lzkgQOy129kPGAG9YmUkwaN5mcG8kY
8hPZgBlTzLTkFPJ/KY8tM/anyHQ3xSnsW0GK33nTtl/0GIOyjKyUWgVEb6DVy4HT
7YmOrsnPc8KalneZf8sx0Oei2oPQbPH+2yHTOLhcqftVyTzs/BINhXpnO1JSB081
6ZAikAfm5gG+ewISrBR+lJWoFg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:33 2025 by rpki-client