Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/tALkTjfkXd8GZQFjMOZdh7GaBc4.roa
File: tALkTjfkXd8GZQFjMOZdh7GaBc4.roa (raw, json)
Hash identifier: xwOO8F0LoQN5tzEZmGkCSAwoxRBkf2EBUZ9pSmNI3c8=
Subject key identifier: B4:02:E4:4E:37:E4:5D:DF:06:65:01:63:30:E6:5D:87:B1:9A:05:CE
Certificate issuer: /CN=7b252f12db2406b429f5700eb38e8fdd0b1201df
Certificate serial: 018CC5DBE885346522C6582A2D9B373FCCCB
Authority key identifier: 7B:25:2F:12:DB:24:06:B4:29:F5:70:0E:B3:8E:8F:DD:0B:12:01:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyUvEtskBrQp9XAOs46P3QsSAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/tALkTjfkXd8GZQFjMOZdh7GaBc4.roa
Signing time: Mon 01 Jan 2024 16:29:32 +0000
ROA not before: Mon 01 Jan 2024 16:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210135
IP address blocks: 185.201.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e8:85:34:65:22:c6:58:2a:2d:9b:37:3f:cc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b252f12db2406b429f5700eb38e8fdd0b1201df
Validity
Not Before: Jan 1 16:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b402e44e37e45ddf0665016330e65d87b19a05ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:b0:fe:c2:b3:43:b2:69:15:98:ce:14:dc:
64:99:32:da:be:06:70:f1:d6:55:49:3c:dc:8f:8c:
be:42:10:24:2b:9c:c3:81:1b:6b:df:d8:98:76:78:
89:1d:cc:e2:b4:cc:60:be:33:9a:a4:fc:0f:3d:e3:
66:16:34:a0:de:51:07:d5:da:ee:63:66:ca:1c:13:
de:88:da:40:a3:5e:63:df:4c:ab:36:bc:ed:85:db:
a6:48:fa:43:c1:20:2c:54:ab:23:26:5f:96:ac:d2:
7a:e4:63:55:88:fc:88:ef:f8:c2:cc:c1:af:52:fe:
23:8c:9e:a8:cf:22:fd:86:89:ae:56:db:7f:22:03:
73:24:76:97:2d:06:4b:8b:b4:e0:73:56:6a:79:fb:
9c:e3:5d:0c:df:3d:db:24:c9:da:9a:d4:e3:f8:4a:
ed:58:d1:8f:94:48:3d:89:b4:99:95:e7:79:68:29:
63:c8:b6:e9:1f:f3:b4:09:c8:35:c2:8f:b4:f4:94:
50:bf:45:1f:3e:20:8c:c3:55:bb:5c:0b:ea:f3:7e:
45:10:de:c9:ad:45:80:e0:78:24:89:a8:f8:fd:93:
73:e0:d5:3a:04:29:b4:35:e2:27:9f:a2:5d:08:c2:
12:a4:05:6d:bd:b3:90:d4:a0:04:58:9c:97:41:c5:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:02:E4:4E:37:E4:5D:DF:06:65:01:63:30:E6:5D:87:B1:9A:05:CE
X509v3 Authority Key Identifier:
keyid:7B:25:2F:12:DB:24:06:B4:29:F5:70:0E:B3:8E:8F:DD:0B:12:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyUvEtskBrQp9XAOs46P3QsSAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/tALkTjfkXd8GZQFjMOZdh7GaBc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d8557b-8e82-4722-8146-77215a650875/1/eyUvEtskBrQp9XAOs46P3QsSAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f9:2a:ac:a0:b0:93:aa:07:a4:9d:0c:75:22:b9:e2:24:95:
14:8c:d6:df:82:97:9e:7a:6c:ea:f6:76:07:81:51:22:5f:39:
6d:4c:79:ea:8c:cd:d5:e1:45:88:39:6f:b1:2f:0e:6f:7b:41:
77:f1:87:2c:1e:20:6b:9e:b0:7b:79:77:c0:7d:92:fa:bd:cc:
aa:4a:81:3f:ac:80:cb:e0:d6:83:07:2b:f6:d6:45:b1:48:e8:
a5:56:93:c4:dd:9b:81:0e:6a:32:a6:fb:cf:e4:ee:9f:b2:91:
ad:19:75:64:f6:f6:c5:5e:03:4e:99:16:56:f2:e2:04:b1:c9:
6a:b8:c7:cf:ed:41:51:90:ed:bf:85:59:bc:56:85:f7:55:ad:
4b:f3:12:06:85:b4:4f:01:bd:de:ae:03:cf:ac:14:ff:bc:92:
d0:b0:1a:24:e2:d6:e9:38:e1:a5:68:c9:3f:08:20:a9:3d:21:
d6:da:41:e4:f1:d2:9c:65:a0:78:5e:ce:8f:ca:1c:7a:ed:69:
41:50:17:f6:50:67:a8:df:6f:8b:e6:1f:33:a4:f3:cf:0b:52:
50:9f:2f:19:b8:6c:7f:db:43:ce:40:43:7e:82:28:2b:29:71:
73:2a:87:6e:e8:a8:4b:a1:a9:69:61:07:fd:01:2d:32:43:09:
48:a3:53:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF2+iFNGUixlgqLZs3P8zLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjUyZjEyZGIyNDA2YjQyOWY1NzAwZWIzOGU4ZmRkMGIx
MjAxZGYwHhcNMjQwMTAxMTYyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDAyZTQ0ZTM3ZTQ1ZGRmMDY2NTAxNjMzMGU2NWQ4N2IxOWEwNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhOw/sKzQ7JpFZjOFNxkmTLavgZw
8dZVSTzcj4y+QhAkK5zDgRtr39iYdniJHczitMxgvjOapPwPPeNmFjSg3lEH1dru
Y2bKHBPeiNpAo15j30yrNrzthdumSPpDwSAsVKsjJl+WrNJ65GNViPyI7/jCzMGv
Uv4jjJ6ozyL9homuVtt/IgNzJHaXLQZLi7Tgc1Zqefuc410M3z3bJMnamtTj+Ert
WNGPlEg9ibSZled5aCljyLbpH/O0Ccg1wo+09JRQv0UfPiCMw1W7XAvq835FEN7J
rUWA4Hgkiaj4/ZNz4NU6BCm0NeInn6JdCMISpAVtvbOQ1KAEWJyXQcV0vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLQC5E435F3fBmUBYzDmXYexmgXOMB8GA1UdIwQY
MBaAFHslLxLbJAa0KfVwDrOOj90LEgHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlVdkV0c2tCclFwOVhBT3M0NlAzUXNTQWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kODU1N2ItOGU4Mi00NzIyLTgxNDYt
NzcyMTVhNjUwODc1LzEvdEFMa1RqZmtYZDhHWlFGak1PWmRoN0dhQmM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kODU1N2ItOGU4Mi00NzIyLTgxNDYtNzcyMTVhNjUwODc1
LzEvZXlVdkV0c2tCclFwOVhBT3M0NlAzUXNTQWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuckeMA0G
CSqGSIb3DQEBCwUAA4IBAQAK+SqsoLCTqgeknQx1IrniJJUUjNbfgpeeemzq9nYH
gVEiXzltTHnqjM3V4UWIOW+xLw5ve0F38YcsHiBrnrB7eXfAfZL6vcyqSoE/rIDL
4NaDByv21kWxSOilVpPE3ZuBDmoypvvP5O6fspGtGXVk9vbFXgNOmRZW8uIEsclq
uMfP7UFRkO2/hVm8VoX3Va1L8xIGhbRPAb3ergPPrBT/vJLQsBok4tbpOOGlaMk/
CCCpPSHW2kHk8dKcZaB4Xs6Pyhx67WlBUBf2UGeo32+L5h8zpPPPC1JQny8ZuGx/
20POQEN+gigrKXFzKodu6KhLoalpYQf9AS0yQwlIo1O1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:05 2024 by rpki-client on console-ams.rpki-client.org