Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6a9a1e-ab6f-4ef5-ab1c-7f2e87882fff/1/PdOWNu4M_5PBSeUfifFkEmCPPy4.roa
File: PdOWNu4M_5PBSeUfifFkEmCPPy4.roa (raw, json)
Hash identifier: KRyFNUP7b6jREoti93C5xCwidphMdEuGb6bytwe1uYA=
Subject key identifier: 3D:D3:96:36:EE:0C:FF:93:C1:49:E5:1F:89:F1:64:12:60:8F:3F:2E
Certificate issuer: /CN=435805266756447b21252e98a178fc031b9723ca
Certificate serial: 0183C78B433CD0B42672580DE97DFEDE6B68
Authority key identifier: 43:58:05:26:67:56:44:7B:21:25:2E:98:A1:78:FC:03:1B:97:23:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1gFJmdWRHshJS6YoXj8AxuXI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6a9a1e-ab6f-4ef5-ab1c-7f2e87882fff/1/PdOWNu4M_5PBSeUfifFkEmCPPy4.roa
Signing time: Tue 11 Oct 2022 14:55:36 +0000
ROA not before: Tue 11 Oct 2022 14:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60385
IP address blocks: 185.18.251.0/24 maxlen: 24
185.18.248.0/24 maxlen: 24
185.18.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:8b:43:3c:d0:b4:26:72:58:0d:e9:7d:fe:de:6b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435805266756447b21252e98a178fc031b9723ca
Validity
Not Before: Oct 11 14:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dd39636ee0cff93c149e51f89f16412608f3f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:2d:6d:5f:67:78:20:31:bd:c0:0c:31:93:
2e:16:bd:87:86:c2:76:cf:82:f6:be:04:cd:17:dd:
d1:34:b8:be:8c:02:9e:46:8b:5c:97:f4:a5:bf:c8:
59:b9:bd:f7:81:06:41:ec:9b:cf:cf:fb:f6:d3:34:
cd:f4:03:ef:23:0e:46:68:3f:9f:20:a1:c6:de:e8:
69:01:48:56:1a:90:33:cd:e3:eb:55:0b:d8:bd:5a:
4a:0f:42:4f:cf:7b:c5:26:2c:e6:09:1a:da:6e:1d:
d3:66:43:5b:18:79:b1:bf:10:06:fd:75:89:fd:22:
a7:fd:de:54:97:15:cf:ed:a9:7e:57:e6:ac:47:c3:
b2:cf:c3:cf:f5:ec:67:18:b8:6c:90:1f:65:a0:18:
3d:b6:d2:05:3d:8e:de:71:0d:d1:06:d1:df:fa:f3:
b4:65:53:f7:c7:00:bb:fe:5a:98:7a:c5:8b:ec:64:
99:ff:e7:86:9c:4d:e3:ca:1f:75:c8:5d:c7:63:1b:
a9:ed:3e:05:b1:35:f1:4f:bc:2b:ca:13:55:85:93:
8e:b5:bb:a0:23:a5:af:ad:42:d5:d2:ff:c1:5a:87:
67:49:d4:17:43:1b:48:f0:d8:d5:73:64:20:f2:fc:
49:bb:57:10:e1:9f:9c:c6:26:51:ce:f9:cf:87:cf:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:96:36:EE:0C:FF:93:C1:49:E5:1F:89:F1:64:12:60:8F:3F:2E
X509v3 Authority Key Identifier:
keyid:43:58:05:26:67:56:44:7B:21:25:2E:98:A1:78:FC:03:1B:97:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1gFJmdWRHshJS6YoXj8AxuXI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6a9a1e-ab6f-4ef5-ab1c-7f2e87882fff/1/PdOWNu4M_5PBSeUfifFkEmCPPy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6a9a1e-ab6f-4ef5-ab1c-7f2e87882fff/1/Q1gFJmdWRHshJS6YoXj8AxuXI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.248.0/23
185.18.251.0/24
Signature Algorithm: sha256WithRSAEncryption
41:18:76:86:c1:51:d1:1e:c0:a2:dc:7d:f1:fc:23:42:f8:bc:
58:ac:61:0d:77:a3:ff:00:aa:0d:3e:af:86:72:41:53:06:bb:
72:de:b9:7c:6e:db:d0:f2:dd:28:0b:72:64:72:9e:59:40:00:
c9:1d:5b:90:b8:9e:2d:cf:c1:d9:60:0b:7d:d5:2c:9c:2f:6a:
6b:d6:82:62:28:f1:63:f9:36:66:ed:0f:3d:4d:65:a6:af:76:
71:81:37:b2:1b:ff:1e:9e:91:17:6a:86:2a:83:f7:ca:93:5d:
56:f6:80:9a:94:98:6a:8a:0e:1c:4c:3b:45:12:69:c8:9a:b2:
92:d8:04:2f:e5:9d:75:2e:b8:1c:75:2c:a4:6b:48:1a:01:2b:
40:55:f6:76:d5:40:f7:ae:f0:34:ed:59:7a:cd:b8:28:3e:93:
9b:ee:fc:6e:0c:db:0c:91:10:cb:a6:35:5e:24:f5:d0:36:77:
b8:49:a9:47:ae:8a:2a:b7:03:bd:e3:7d:42:ce:76:1d:f7:f2:
ab:24:47:13:10:d8:92:f4:00:47:c0:fc:c4:3b:17:f0:07:c6:
4e:1c:a7:6a:3d:27:a4:67:38:a5:b6:a8:39:2c:d8:7c:15:46:
e0:06:fd:86:e4:54:2e:4d:7c:9e:da:24:fd:d2:ed:9f:63:c8:
ff:d7:90:dd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPHi0M80LQmclgN6X3+3mtoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTgwNTI2Njc1NjQ0N2IyMTI1MmU5OGExNzhmYzAzMWI5
NzIzY2EwHhcNMjIxMDExMTQ1NTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGQzOTYzNmVlMGNmZjkzYzE0OWU1MWY4OWYxNjQxMjYwOGYzZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM0tbV9neCAxvcAMMZMuFr2HhsJ2
z4L2vgTNF93RNLi+jAKeRotcl/Slv8hZub33gQZB7JvPz/v20zTN9APvIw5GaD+f
IKHG3uhpAUhWGpAzzePrVQvYvVpKD0JPz3vFJizmCRrabh3TZkNbGHmxvxAG/XWJ
/SKn/d5UlxXP7al+V+asR8Oyz8PP9exnGLhskB9loBg9ttIFPY7ecQ3RBtHf+vO0
ZVP3xwC7/lqYesWL7GSZ/+eGnE3jyh91yF3HYxup7T4FsTXxT7wryhNVhZOOtbug
I6WvrULV0v/BWodnSdQXQxtI8NjVc2Qg8vxJu1cQ4Z+cxiZRzvnPh89iOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD3TljbuDP+TwUnlH4nxZBJgjz8uMB8GA1UdIwQY
MBaAFENYBSZnVkR7ISUumKF4/AMblyPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFnRkptZFdSSHNoSlM2WW9YajhBeHVYSThvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YTlhMWUtYWI2Zi00ZWY1LWFiMWMt
N2YyZTg3ODgyZmZmLzEvUGRPV051NE1fNVBCU2VVZmlmRmtFbUNQUHk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82YTlhMWUtYWI2Zi00ZWY1LWFiMWMtN2YyZTg3ODgyZmZm
LzEvUTFnRkptZFdSSHNoSlM2WW9YajhBeHVYSThvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuRL4AwQA
uRL7MA0GCSqGSIb3DQEBCwUAA4IBAQBBGHaGwVHRHsCi3H3x/CNC+LxYrGENd6P/
AKoNPq+GckFTBrty3rl8btvQ8t0oC3Jkcp5ZQADJHVuQuJ4tz8HZYAt91SycL2pr
1oJiKPFj+TZm7Q89TWWmr3ZxgTeyG/8enpEXaoYqg/fKk11W9oCalJhqig4cTDtF
EmnImrKS2AQv5Z11LrgcdSyka0gaAStAVfZ21UD3rvA07Vl6zbgoPpOb7vxuDNsM
kRDLpjVeJPXQNne4SalHrooqtwO9431CznYd9/KrJEcTENiS9ABHwPzEOxfwB8ZO
HKdqPSekZziltqg5LNh8FUbgBv2G5FQuTXye2iT90u2fY8j/15Dd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:21 2024 by rpki-client on console-fra.rpki-client.org