Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/LDJB44a0kCCuAWh90yoKZIbrrWc.roa
File: LDJB44a0kCCuAWh90yoKZIbrrWc.roa (raw, json)
Hash identifier: V8S8tOy2N6I5amQZfQuJsqlCm16RRoJE6QmjaDsoh3g=
Subject key identifier: 2C:32:41:E3:86:B4:90:20:AE:01:68:7D:D3:2A:0A:64:86:EB:AD:67
Certificate issuer: /CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Certificate serial: 05586873
Authority key identifier: 0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/LDJB44a0kCCuAWh90yoKZIbrrWc.roa
Signing time: Tue 17 May 2022 17:17:28 +0000
ROA not before: Tue 17 May 2022 17:17:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207059
IP address blocks: 185.167.77.0/24 maxlen: 24
185.167.78.0/24 maxlen: 24
185.167.76.0/24 maxlen: 24
185.167.79.128/25 maxlen: 25
185.167.79.0/25 maxlen: 25
185.167.79.0/24 maxlen: 24
2a0b:4e00::/48 maxlen: 48
2a0b:4e00:3::/48 maxlen: 48
2a0b:4e00:1::/48 maxlen: 48
2a0b:4e00:4::/48 maxlen: 48
2a0b:4e00::/29 maxlen: 48
2a0b:4e00:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89679987 (0x5586873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Validity
Not Before: May 17 17:17:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c3241e386b49020ae01687dd32a0a6486ebad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:42:9b:59:f9:ca:bd:26:06:a7:bf:07:18:
7f:da:90:2b:f5:a5:07:44:cf:5c:78:28:de:f4:00:
ea:af:9a:7d:09:d8:28:76:af:14:80:73:db:bd:7e:
91:d4:74:a9:57:f4:e0:c3:c3:d7:e7:7e:2b:4c:50:
8c:06:51:f8:ba:40:c8:2e:de:4c:e6:63:d3:54:0a:
db:23:ff:84:71:fa:78:15:86:6f:2c:dc:ff:32:b6:
46:b4:5e:85:a4:4b:44:9b:f5:ae:df:f0:fd:2c:e5:
53:26:82:5d:81:fe:df:e5:54:63:44:ad:c5:2c:d1:
9b:1e:7a:43:a5:61:1b:9c:aa:4c:c4:59:a4:af:b1:
5b:a2:f1:42:cf:a8:35:bb:2f:08:94:92:70:7b:bb:
c3:f7:d0:36:be:93:5b:dc:7a:41:ab:25:92:b4:03:
98:a8:dd:be:62:81:4c:74:bd:4f:ad:17:3c:c3:d4:
62:f4:62:f8:c5:16:1a:ee:ec:b5:07:10:8c:87:ce:
22:a2:af:4f:a0:b5:10:3c:45:aa:22:28:b6:6d:7d:
ca:c7:bd:8b:29:74:b3:ba:21:1e:4a:10:bb:b0:5d:
90:6f:57:22:99:3c:3c:be:ef:bb:54:3a:c4:8d:41:
83:ec:e4:6b:de:21:f5:79:1e:3b:a6:ff:1f:e1:fb:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:32:41:E3:86:B4:90:20:AE:01:68:7D:D3:2A:0A:64:86:EB:AD:67
X509v3 Authority Key Identifier:
keyid:0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/LDJB44a0kCCuAWh90yoKZIbrrWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.76.0/22
IPv6:
2a0b:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
26:51:09:5a:60:27:f7:d3:3d:5c:80:b0:0e:25:72:fa:77:b3:
16:0e:33:63:54:f7:55:42:af:8e:fa:c0:2b:10:09:b2:37:4f:
df:65:f0:af:f2:72:f0:0d:82:15:fc:b1:03:9e:7f:2c:2d:15:
02:51:90:17:5c:d4:a8:71:65:27:dd:b2:40:5b:e7:6d:54:59:
5b:45:08:92:26:b6:5d:a7:57:c7:eb:99:90:eb:42:23:48:27:
e3:53:ef:7e:91:93:f8:ea:6b:39:32:76:42:31:24:2b:72:6e:
2a:d2:e7:6a:35:3c:f0:0f:a9:d3:85:c8:f3:ca:b3:69:e8:a4:
96:1c:c5:a2:bb:81:fc:d4:f9:68:74:de:6d:32:52:38:1b:12:
07:9f:f0:b1:7d:ca:0f:63:6a:02:63:d2:51:a6:13:a8:74:30:
2c:84:4d:05:df:f9:8d:ff:ef:34:0a:62:1b:f8:a3:f8:03:f3:
c7:d4:4c:e8:bf:23:85:d4:e6:6e:29:3a:c9:71:bb:61:a2:b0:
21:37:7e:3d:e9:95:eb:ff:f5:04:a7:8e:d2:82:6c:91:68:1c:
22:59:9e:05:56:40:5b:03:9d:5e:40:ff:6e:ca:64:86:9b:2d:
78:68:ba:0c:48:e2:8a:c8:17:1f:a2:45:7f:85:80:1c:7a:a9:
96:d8:95:b0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBVhoczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YjFjNDY3ZWI5NDA4YjExZDA2ZjFmNjdlNWE5Y2M0MjNjMzlhYzJmMB4XDTIyMDUx
NzE3MTcyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmMzMjQxZTM4NmI0
OTAyMGFlMDE2ODdkZDMyYTBhNjQ4NmViYWQ2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANBDQptZ+cq9JganvwcYf9qQK/WlB0TPXHgo3vQA6q+afQnY
KHavFIBz271+kdR0qVf04MPD1+d+K0xQjAZR+LpAyC7eTOZj01QK2yP/hHH6eBWG
byzc/zK2RrRehaRLRJv1rt/w/SzlUyaCXYH+3+VUY0StxSzRmx56Q6VhG5yqTMRZ
pK+xW6LxQs+oNbsvCJSScHu7w/fQNr6TW9x6QaslkrQDmKjdvmKBTHS9T60XPMPU
YvRi+MUWGu7stQcQjIfOIqKvT6C1EDxFqiIotm19yse9iyl0s7ohHkoQu7BdkG9X
Ipk8PL7vu1Q6xI1Bg+zka94h9XkeO6b/H+H7h/ECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQsMkHjhrSQIK4BaH3TKgpkhuutZzAfBgNVHSMEGDAWgBQLHEZ+uUCLEdBv
H2flqcxCPDmsLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0N4eEdmcmxBaXhIUWJ4OW41YW5NUWp3NXJDOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjIvNDViZWI0LTlkNTUtNDI2Mi05OWMxLWU4YTU3ODQ3MzRiYi8x
L0xESkI0NGEwa0NDdUFXaDkweW9LWklicnJXYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIv
NDViZWI0LTlkNTUtNDI2Mi05OWMxLWU4YTU3ODQ3MzRiYi8xL0N4eEdmcmxBaXhI
UWJ4OW41YW5NUWp3NXJDOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmnTDANBAIAAjAHAwUDKgtOADAN
BgkqhkiG9w0BAQsFAAOCAQEAJlEJWmAn99M9XICwDiVy+nezFg4zY1T3VUKvjvrA
KxAJsjdP32Xwr/Jy8A2CFfyxA55/LC0VAlGQF1zUqHFlJ92yQFvnbVRZW0UIkia2
XadXx+uZkOtCI0gn41PvfpGT+OprOTJ2QjEkK3JuKtLnajU88A+p04XI88qzaeik
lhzForuB/NT5aHTebTJSOBsSB5/wsX3KD2NqAmPSUaYTqHQwLIRNBd/5jf/vNApi
G/ij+APzx9RM6L8jhdTmbik6yXG7YaKwITd+PemV6//1BKeO0oJskWgcIlmeBVZA
WwOdXkD/bspkhpsteGi6DEjiisgXH6JFf4WAHHqpltiVsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:16 2024 by rpki-client on console-ams.rpki-client.org