Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/vgmI_i8FJsz0iO6097U3u1IEIHE.roa
File: vgmI_i8FJsz0iO6097U3u1IEIHE.roa (raw, json)
Hash identifier: bJtbIOwKVYJczRij80kqvKY/Kd0SJqSUeLakavNJWFI=
Subject key identifier: BE:09:88:FE:2F:05:26:CC:F4:88:EE:B4:F7:B5:37:BB:52:04:20:71
Certificate issuer: /CN=39b463372b9ddf448b3fc3eaed58441194782d06
Certificate serial: 01857067605B6A37CCB900DE3475F81CD506
Authority key identifier: 39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/vgmI_i8FJsz0iO6097U3u1IEIHE.roa
Signing time: Mon 02 Jan 2023 02:55:01 +0000
ROA not before: Mon 02 Jan 2023 02:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206077
IP address blocks: 185.253.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:60:5b:6a:37:cc:b9:00:de:34:75:f8:1c:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b463372b9ddf448b3fc3eaed58441194782d06
Validity
Not Before: Jan 2 02:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be0988fe2f0526ccf488eeb4f7b537bb52042071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:12:83:b1:56:0d:8f:51:74:4d:e3:20:cf:
69:73:9a:e4:6a:fc:3c:bb:f3:65:e8:65:5a:bd:b4:
6f:fb:0f:b4:7c:3c:28:af:47:c5:61:0c:8c:df:a5:
85:26:ce:62:e9:70:01:9e:11:86:a3:57:62:d6:2b:
7d:a1:a4:01:c5:f5:ad:9f:7c:7d:88:88:88:fd:a1:
01:23:8a:c9:76:75:d2:1e:9e:31:a8:9c:70:e2:bd:
2c:73:c7:45:96:81:ce:77:ed:17:01:f4:97:89:c8:
9e:3c:02:45:11:81:fa:a7:ba:dd:3e:86:2e:be:1c:
36:a0:f6:ac:0c:1f:ac:80:a4:1a:43:02:0a:63:90:
ee:8a:80:b6:cf:b6:de:40:94:32:51:ee:5f:03:57:
6a:58:00:32:d0:de:03:a8:65:d1:86:d4:14:df:da:
09:a9:61:13:93:09:c9:53:04:ca:55:44:a3:2d:27:
cf:6f:3c:09:c4:b6:50:be:28:98:57:94:4c:23:a5:
bf:b2:4d:06:fc:bd:ad:d9:cb:be:9d:02:06:02:af:
99:46:cf:a8:4b:e1:86:73:f0:cc:24:1f:f4:33:36:
18:0e:67:de:0b:74:e5:11:f9:da:24:42:54:cf:a1:
f6:b9:00:3d:61:3e:3e:42:2e:8d:70:c1:58:ac:43:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:09:88:FE:2F:05:26:CC:F4:88:EE:B4:F7:B5:37:BB:52:04:20:71
X509v3 Authority Key Identifier:
keyid:39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/vgmI_i8FJsz0iO6097U3u1IEIHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/ObRjNyud30SLP8Pq7VhEEZR4LQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.146.0/24
Signature Algorithm: sha256WithRSAEncryption
43:92:53:be:5d:f4:6c:04:b1:28:76:03:17:75:fc:ae:fd:29:
b9:bf:dc:22:2e:f2:fa:33:58:b9:0c:ca:e0:51:d9:9c:38:36:
41:07:94:b7:8e:38:d9:05:bc:2a:90:c3:b7:65:c0:ce:67:7b:
e3:55:59:c7:92:ad:7f:d2:19:04:b8:0e:d4:2b:8d:1c:86:66:
9b:24:39:62:e2:13:97:f1:5e:16:df:48:fc:c3:ff:9f:7e:23:
30:3f:1e:02:e1:d0:8c:db:47:b9:f6:1b:94:82:a0:ac:71:53:
8a:e5:34:6b:48:9a:5f:ed:86:0b:7f:7f:6b:65:ff:b5:25:da:
ca:1d:58:2c:ef:f4:12:bf:95:3c:cc:16:19:4c:37:5a:3f:48:
7e:ab:67:68:a3:7b:dc:95:42:c4:99:be:80:9f:38:fd:b0:7e:
71:47:88:69:2b:1f:df:69:72:21:dd:cd:67:8f:96:88:12:19:
a7:16:d1:dc:9d:5c:7d:c2:78:a6:12:50:cb:73:d4:72:ec:1a:
20:5d:ca:a9:f2:a1:37:6f:04:6e:9f:f8:a9:09:0b:cb:39:64:
4e:57:4d:6c:0b:d7:08:86:ac:f0:a9:dc:3e:4b:7d:28:9c:5e:
62:cc:19:61:1d:f7:d2:b6:d4:75:5d:a6:c2:85:62:85:67:2f:
20:9b:b9:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ2BbajfMuQDeNHX4HNUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YjQ2MzM3MmI5ZGRmNDQ4YjNmYzNlYWVkNTg0NDExOTQ3
ODJkMDYwHhcNMjMwMTAyMDI1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTA5ODhmZTJmMDUyNmNjZjQ4OGVlYjRmN2I1MzdiYjUyMDQyMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJoSg7FWDY9RdE3jIM9pc5rkavw8
u/Nl6GVavbRv+w+0fDwor0fFYQyM36WFJs5i6XABnhGGo1di1it9oaQBxfWtn3x9
iIiI/aEBI4rJdnXSHp4xqJxw4r0sc8dFloHOd+0XAfSXiciePAJFEYH6p7rdPoYu
vhw2oPasDB+sgKQaQwIKY5DuioC2z7beQJQyUe5fA1dqWAAy0N4DqGXRhtQU39oJ
qWETkwnJUwTKVUSjLSfPbzwJxLZQviiYV5RMI6W/sk0G/L2t2cu+nQIGAq+ZRs+o
S+GGc/DMJB/0MzYYDmfeC3TlEfnaJEJUz6H2uQA9YT4+Qi6NcMFYrEOE6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL4JiP4vBSbM9IjutPe1N7tSBCBxMB8GA1UdIwQY
MBaAFDm0Yzcrnd9Eiz/D6u1YRBGUeC0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2JSak55dWQzMFNMUDhQcTdWaEVFWlI0TFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NTAxMzgtZjRiMy00Njg5LWI0Yzkt
NGY3NGRiZTFiNzY2LzEvdmdtSV9pOEZKc3owaU82MDk3VTN1MUlFSUhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NTAxMzgtZjRiMy00Njg5LWI0YzktNGY3NGRiZTFiNzY2
LzEvT2JSak55dWQzMFNMUDhQcTdWaEVFWlI0TFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf2SMA0G
CSqGSIb3DQEBCwUAA4IBAQBDklO+XfRsBLEodgMXdfyu/Sm5v9wiLvL6M1i5DMrg
UdmcODZBB5S3jjjZBbwqkMO3ZcDOZ3vjVVnHkq1/0hkEuA7UK40chmabJDli4hOX
8V4W30j8w/+ffiMwPx4C4dCM20e59huUgqCscVOK5TRrSJpf7YYLf39rZf+1JdrK
HVgs7/QSv5U8zBYZTDdaP0h+q2doo3vclULEmb6Anzj9sH5xR4hpKx/faXIh3c1n
j5aIEhmnFtHcnVx9wnimElDLc9Ry7BogXcqp8qE3bwRun/ipCQvLOWROV01sC9cI
hqzwqdw+S30onF5izBlhHffSttR1XabChWKFZy8gm7kh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:27 2024 by rpki-client on console-fra.rpki-client.org