Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/XDyBS6A6OsDC7vwILyJWlsRO8IY.roa
File: XDyBS6A6OsDC7vwILyJWlsRO8IY.roa (raw, json)
Hash identifier: /p8WM6W36eIMXxaxZTfMDdzBTcyWaH7xkiZ+UWrO0WM=
Subject key identifier: 5C:3C:81:4B:A0:3A:3A:C0:C2:EE:FC:08:2F:22:56:96:C4:4E:F0:86
Certificate issuer: /CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Certificate serial: 0182F282EBB7111B04945AB9D0B811B2018F
Authority key identifier: 6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/XDyBS6A6OsDC7vwILyJWlsRO8IY.roa
Signing time: Wed 31 Aug 2022 06:07:22 +0000
ROA not before: Wed 31 Aug 2022 06:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.151.178.0/24 maxlen: 24
185.151.177.0/24 maxlen: 24
185.151.176.0/24 maxlen: 24
185.151.179.0/24 maxlen: 24
185.151.176.0/22 maxlen: 22
185.126.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:82:eb:b7:11:1b:04:94:5a:b9:d0:b8:11:b2:01:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Validity
Not Before: Aug 31 06:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c3c814ba03a3ac0c2eefc082f225696c44ef086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:63:4a:b2:9e:0b:66:72:0e:b1:29:4b:2a:
35:1a:6d:2e:82:28:10:fa:63:b1:51:ba:0b:8b:84:
02:76:cf:3b:38:a5:52:a4:6d:60:ff:dc:16:72:b4:
61:21:a2:71:d1:c7:61:77:4e:e5:13:23:a9:36:41:
37:79:84:5f:49:c2:ec:6a:de:64:f8:10:9d:84:93:
f6:ff:88:67:83:04:c5:39:76:2f:a2:e9:05:59:7d:
de:23:04:aa:09:0d:34:42:da:31:9d:b2:2a:bb:87:
f1:a2:b4:13:05:49:04:b1:30:7f:ad:47:c8:09:e4:
bf:5d:57:8d:22:16:d7:24:bb:51:df:4d:93:e5:42:
08:2b:6a:e9:97:b2:0a:00:8f:e7:eb:69:10:95:5a:
5c:8b:e3:ee:b0:f2:e9:ff:76:ff:d6:d1:58:3f:c6:
9d:3f:58:7d:ea:4e:35:15:0e:33:ef:8c:aa:78:e2:
87:fb:73:e8:76:41:5a:1b:47:9a:6a:46:5a:03:bb:
b2:56:fe:c8:ef:3e:4d:5f:fa:0c:fe:fd:76:c5:0a:
d3:94:5e:d8:57:e4:b6:04:90:ba:ad:02:3d:df:24:
36:50:db:a7:26:7a:17:e0:be:63:1f:3e:9d:af:9d:
7c:71:12:72:e4:fc:4d:9a:79:8a:cc:bb:65:c0:c3:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:81:4B:A0:3A:3A:C0:C2:EE:FC:08:2F:22:56:96:C4:4E:F0:86
X509v3 Authority Key Identifier:
keyid:6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/XDyBS6A6OsDC7vwILyJWlsRO8IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.235.0/24
185.151.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:d7:38:0b:33:71:0d:2d:ee:9f:11:0b:90:53:89:af:2a:e4:
1d:90:59:e4:f4:07:04:b0:e4:63:c3:f0:1e:d4:b0:e1:ef:c5:
98:ce:d0:9e:8a:6f:78:a3:0c:29:d0:b8:b8:a2:20:c9:1a:de:
3a:eb:9d:64:6a:10:e9:c9:ea:93:ea:ae:31:3e:4e:35:b1:3b:
a0:3a:f8:1f:67:11:fc:c6:5f:d0:a2:00:ac:bb:f8:bd:81:27:
41:1f:59:5c:70:97:f1:6f:32:bc:0c:95:85:81:05:ee:94:e0:
59:2a:6b:b4:e4:9c:9b:24:23:90:14:4f:9e:7c:01:e4:1d:d9:
14:6f:50:ea:bd:55:c8:13:5b:a1:f9:07:85:04:1b:4d:69:d8:
92:6c:de:26:24:c0:ef:8b:58:da:e1:fd:a8:d4:90:93:15:67:
05:75:4f:c1:7a:28:0f:a9:be:59:94:98:54:ec:a4:1e:5a:a2:
40:94:c7:80:de:09:0d:4e:94:65:b5:f8:e7:c9:e7:80:4a:6c:
18:e3:3a:99:69:5a:d9:05:64:bb:6c:de:2d:d8:37:fa:19:8d:
48:e8:8a:0c:26:9f:43:15:2d:49:bc:6a:86:76:6d:7c:2d:ab:
b5:3a:4b:81:37:91:81:af:fc:e0:46:55:24:79:0a:71:46:67:
63:07:d1:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLyguu3ERsElFq50LgRsgGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmFmY2JiMjNhYjAxZTVhZGVjY2QxNjlhMzFlZmI3YzVj
M2M1MjIwHhcNMjIwODMxMDYwNzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzNjODE0YmEwM2EzYWMwYzJlZWZjMDgyZjIyNTY5NmM0NGVmMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpZjSrKeC2ZyDrEpSyo1Gm0ugigQ
+mOxUboLi4QCds87OKVSpG1g/9wWcrRhIaJx0cdhd07lEyOpNkE3eYRfScLsat5k
+BCdhJP2/4hngwTFOXYvoukFWX3eIwSqCQ00QtoxnbIqu4fxorQTBUkEsTB/rUfI
CeS/XVeNIhbXJLtR302T5UIIK2rpl7IKAI/n62kQlVpci+PusPLp/3b/1tFYP8ad
P1h96k41FQ4z74yqeOKH+3PodkFaG0eaakZaA7uyVv7I7z5NX/oM/v12xQrTlF7Y
V+S2BJC6rQI93yQ2UNunJnoX4L5jHz6dr518cRJy5PxNmnmKzLtlwMPKfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFw8gUugOjrAwu78CC8iVpbETvCGMB8GA1UdIwQY
MBaAFGq6/LsjqwHlrezNFpox77fFw8UiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJyOHV5T3JBZVd0N00wV21qSHZ0OFhEeFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wOWUxODAtNTQ2Zi00NGUzLWI3ODMt
ZWY4OGJkYjVjODUwLzEvWER5QlM2QTZPc0RDN3Z3SUx5Sldsc1JPOElZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wOWUxODAtNTQ2Zi00NGUzLWI3ODMtZWY4OGJkYjVjODUw
LzEvYXJyOHV5T3JBZVd0N00wV21qSHZ0OFhEeFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuX7rAwQC
uZewMA0GCSqGSIb3DQEBCwUAA4IBAQCN1zgLM3ENLe6fEQuQU4mvKuQdkFnk9AcE
sORjw/Ae1LDh78WYztCeim94owwp0Li4oiDJGt46651kahDpyeqT6q4xPk41sTug
OvgfZxH8xl/QogCsu/i9gSdBH1lccJfxbzK8DJWFgQXulOBZKmu05JybJCOQFE+e
fAHkHdkUb1DqvVXIE1uh+QeFBBtNadiSbN4mJMDvi1ja4f2o1JCTFWcFdU/BeigP
qb5ZlJhU7KQeWqJAlMeA3gkNTpRltfjnyeeASmwY4zqZaVrZBWS7bN4t2Df6GY1I
6IoMJp9DFS1JvGqGdm18Lau1OkuBN5GBr/zgRlUkeQpxRmdjB9Gs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:45 2024 by rpki-client on console-fra.rpki-client.org