Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/JffULBUfl34enOMeKHZ4exKVKt8.roa
File: JffULBUfl34enOMeKHZ4exKVKt8.roa (raw, json)
Hash identifier: vILfbZwME8GPd1HsIfPD/ddD5gbSSSCBYYB7w6q09h0=
Subject key identifier: 25:F7:D4:2C:15:1F:97:7E:1E:9C:E3:1E:28:76:78:7B:12:95:2A:DF
Certificate issuer: /CN=5780c0c438cc5dcb7a869d26b4ab83da447de28d
Certificate serial: 0187D75DD64008504D4DBB1D1E24ADACF4C2
Authority key identifier: 57:80:C0:C4:38:CC:5D:CB:7A:86:9D:26:B4:AB:83:DA:44:7D:E2:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4DAxDjMXct6hp0mtKuD2kR94o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/JffULBUfl34enOMeKHZ4exKVKt8.roa
Signing time: Mon 01 May 2023 12:51:03 +0000
ROA not before: Mon 01 May 2023 12:51:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57935
IP address blocks: 185.104.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:5d:d6:40:08:50:4d:4d:bb:1d:1e:24:ad:ac:f4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5780c0c438cc5dcb7a869d26b4ab83da447de28d
Validity
Not Before: May 1 12:51:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25f7d42c151f977e1e9ce31e2876787b12952adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:7b:9e:74:6b:31:1e:ba:63:56:61:48:2b:
a9:e5:1f:da:68:17:b4:a8:32:5f:6a:64:76:77:a0:
b2:c6:23:eb:98:61:03:f1:7d:69:91:9d:24:15:bd:
b2:92:2e:8a:6b:92:d2:68:19:99:d9:e2:3c:46:40:
b2:2e:a5:71:0b:f2:6c:c0:b1:24:18:5e:8d:b3:ee:
8c:50:cd:07:6f:2e:b7:7e:86:30:37:0e:ed:16:c4:
22:51:a1:83:45:c0:2c:88:61:1b:00:26:e5:79:ef:
2c:61:b5:98:2b:b4:81:e7:8c:9f:a0:a4:aa:06:30:
b4:1a:4a:ac:04:2c:d5:83:d2:1f:96:eb:f9:1b:44:
32:43:7f:22:ac:ab:58:4f:75:4a:7d:bc:d2:58:4f:
54:2a:e9:34:d8:87:7c:d6:e9:38:a7:1c:61:f6:a0:
1e:e1:64:82:79:70:9b:b2:81:42:85:5d:24:3b:77:
53:a7:00:8b:61:77:7f:27:7f:fb:bb:66:7f:87:6c:
3f:04:da:a2:18:75:b7:a4:25:82:ae:ee:09:b1:0e:
47:67:0c:20:b6:5a:5e:f3:53:ad:74:85:ee:aa:77:
3e:e4:d5:7d:15:c3:07:8c:9b:b7:a3:4d:ba:db:5f:
ad:b4:a5:ac:53:44:bc:73:13:cc:d1:a5:57:82:1e:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F7:D4:2C:15:1F:97:7E:1E:9C:E3:1E:28:76:78:7B:12:95:2A:DF
X509v3 Authority Key Identifier:
keyid:57:80:C0:C4:38:CC:5D:CB:7A:86:9D:26:B4:AB:83:DA:44:7D:E2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DAxDjMXct6hp0mtKuD2kR94o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/JffULBUfl34enOMeKHZ4exKVKt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/V4DAxDjMXct6hp0mtKuD2kR94o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.189.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b2:9f:ca:e9:5c:9e:8e:4f:83:dc:87:f3:74:e4:b4:2c:17:
50:b7:7e:55:1f:7a:cf:84:8d:8c:c7:d5:11:46:55:4f:2a:18:
9a:bb:d1:6e:ab:fe:cd:c5:1c:db:9f:5f:61:e7:e9:02:a3:15:
66:9f:c9:ce:f9:8c:60:11:d6:12:70:fb:c5:b5:60:7b:27:a5:
55:43:31:54:cf:fe:31:57:e5:bc:79:d5:55:b9:9f:45:39:ed:
eb:59:b3:17:5d:93:1a:97:5a:24:47:88:4b:00:4e:04:c5:bd:
c3:1c:56:90:ea:d2:c6:51:c8:0f:79:52:72:46:b6:06:78:c3:
bf:db:9c:29:d4:cd:32:e8:fc:8d:30:4b:7e:40:e9:ca:ec:81:
0d:35:4e:e0:d6:9b:d1:05:4d:cd:eb:09:ab:a6:b5:c2:a2:72:
7c:71:83:c5:d9:dc:ec:dc:63:63:94:76:40:92:c1:ab:3a:a0:
dc:34:97:e9:b0:91:14:2c:31:b9:67:a2:b6:36:ad:c9:67:65:
77:3b:c8:ef:0a:a3:e3:7f:82:08:b6:b1:f0:eb:70:1e:f4:5a:
ca:67:cf:a2:80:b0:12:6b:46:8c:fb:dc:e8:d2:38:b9:6e:82:
ff:2f:27:9d:41:bb:1b:dc:ee:7c:15:83:bb:df:fa:97:c1:ad:
60:68:9f:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfXXdZACFBNTbsdHiStrPTCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ODBjMGM0MzhjYzVkY2I3YTg2OWQyNmI0YWI4M2RhNDQ3
ZGUyOGQwHhcNMjMwNTAxMTI1MTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWY3ZDQyYzE1MWY5NzdlMWU5Y2UzMWUyODc2Nzg3YjEyOTUyYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRh7nnRrMR66Y1ZhSCup5R/aaBe0
qDJfamR2d6CyxiPrmGED8X1pkZ0kFb2yki6Ka5LSaBmZ2eI8RkCyLqVxC/JswLEk
GF6Ns+6MUM0Hby63foYwNw7tFsQiUaGDRcAsiGEbACblee8sYbWYK7SB54yfoKSq
BjC0GkqsBCzVg9Ifluv5G0QyQ38irKtYT3VKfbzSWE9UKuk02Id81uk4pxxh9qAe
4WSCeXCbsoFChV0kO3dTpwCLYXd/J3/7u2Z/h2w/BNqiGHW3pCWCru4JsQ5HZwwg
tlpe81OtdIXuqnc+5NV9FcMHjJu3o02621+ttKWsU0S8cxPM0aVXgh5zwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCX31CwVH5d+HpzjHih2eHsSlSrfMB8GA1UdIwQY
MBaAFFeAwMQ4zF3LeoadJrSrg9pEfeKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjREQXhEak1YY3Q2aHAwbXRLdUQya1I5NG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zOTI1ZGItNWIzYy00MGEyLWEzYTEt
MjMzZGI4MmNhZDljLzEvSmZmVUxCVWZsMzRlbk9NZUtIWjRleEtWS3Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zOTI1ZGItNWIzYy00MGEyLWEzYTEtMjMzZGI4MmNhZDlj
LzEvVjREQXhEak1YY3Q2aHAwbXRLdUQya1I5NG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWi9MA0G
CSqGSIb3DQEBCwUAA4IBAQA3sp/K6Vyejk+D3IfzdOS0LBdQt35VH3rPhI2Mx9UR
RlVPKhiau9Fuq/7NxRzbn19h5+kCoxVmn8nO+YxgEdYScPvFtWB7J6VVQzFUz/4x
V+W8edVVuZ9FOe3rWbMXXZMal1okR4hLAE4Exb3DHFaQ6tLGUcgPeVJyRrYGeMO/
25wp1M0y6PyNMEt+QOnK7IENNU7g1pvRBU3N6wmrprXConJ8cYPF2dzs3GNjlHZA
ksGrOqDcNJfpsJEULDG5Z6K2Nq3JZ2V3O8jvCqPjf4IItrHw63Ae9FrKZ8+igLAS
a0aM+9zo0ji5boL/LyedQbsb3O58FYO73/qXwa1gaJ+/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:57 2024 by rpki-client on console-ams.rpki-client.org