Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/JlaanWVEykGviHvvuGQ0_3B5cUY.roa
File: JlaanWVEykGviHvvuGQ0_3B5cUY.roa (raw, json)
Hash identifier: IxM4W5yyeQG9seJ8KE6QH2sTKv0StyCtJw18xALt+Y0=
Subject key identifier: 26:56:9A:9D:65:44:CA:41:AF:88:7B:EF:B8:64:34:FF:70:79:71:46
Certificate issuer: /CN=03d17bc7ebebdcc9f1b3fdb55ad122e7062243e2
Certificate serial: 01857230EB9B44C91FFB0BA71FF09E6334A9
Authority key identifier: 03:D1:7B:C7:EB:EB:DC:C9:F1:B3:FD:B5:5A:D1:22:E7:06:22:43:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9F7x-vr3Mnxs_21WtEi5wYiQ-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/JlaanWVEykGviHvvuGQ0_3B5cUY.roa
Signing time: Mon 02 Jan 2023 11:14:46 +0000
ROA not before: Mon 02 Jan 2023 11:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 185.151.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:eb:9b:44:c9:1f:fb:0b:a7:1f:f0:9e:63:34:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d17bc7ebebdcc9f1b3fdb55ad122e7062243e2
Validity
Not Before: Jan 2 11:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26569a9d6544ca41af887befb86434ff70797146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:67:6f:38:28:c3:8c:7f:6f:96:2e:41:4c:
9d:3b:a5:46:c7:6a:91:4b:e1:74:c8:44:31:ff:79:
0c:d9:8b:de:d8:3b:ad:7a:0b:35:4e:a8:43:51:9b:
6d:d3:43:9c:ae:66:9e:2b:f5:0c:3d:60:67:37:49:
54:fd:85:4e:ca:b9:f5:5a:cf:15:b5:df:14:7f:ef:
cf:ba:f0:d5:f0:0d:60:fb:ae:ad:29:1d:63:45:15:
05:64:0b:6b:54:44:af:26:a5:27:bc:ea:86:e7:f0:
fa:4e:9f:20:f7:b2:51:33:2a:02:99:36:8d:b2:67:
2e:2b:99:c9:83:d4:45:12:aa:3d:7a:42:ab:e5:84:
21:8d:6c:8f:56:44:b5:a0:10:26:52:8d:93:7d:f3:
fc:65:6a:c4:02:34:b2:a9:c0:6d:d4:2c:74:0d:ce:
1a:98:9a:5d:16:b1:88:16:8a:00:7e:8a:ff:0b:22:
98:c1:9e:3d:93:a7:80:d4:da:54:7b:71:a4:2f:5d:
ba:b1:87:31:c2:4f:9f:7f:88:05:0f:39:1a:58:6a:
f0:ee:f6:4f:ca:97:af:dd:a1:d8:87:39:a1:90:cc:
23:e3:49:ec:cb:1d:73:89:6e:35:66:76:10:b3:53:
ad:75:68:b9:59:48:c3:a2:08:9b:37:59:78:86:d9:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:9A:9D:65:44:CA:41:AF:88:7B:EF:B8:64:34:FF:70:79:71:46
X509v3 Authority Key Identifier:
keyid:03:D1:7B:C7:EB:EB:DC:C9:F1:B3:FD:B5:5A:D1:22:E7:06:22:43:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9F7x-vr3Mnxs_21WtEi5wYiQ-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/JlaanWVEykGviHvvuGQ0_3B5cUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/A9F7x-vr3Mnxs_21WtEi5wYiQ-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.146.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0e:42:0d:d4:7c:52:f6:78:b2:42:5e:22:0a:bc:70:1b:2e:
e3:cd:b8:0c:ed:08:05:64:7a:ca:5c:e2:15:ed:a2:74:a6:f0:
09:c1:96:02:3c:ab:4d:6c:85:20:8a:c4:d3:66:8a:d8:b7:33:
4b:5e:06:2c:e8:58:95:c0:0f:a2:45:f1:ab:80:74:af:b3:d5:
69:8b:00:61:2d:09:69:8a:62:73:4c:c8:92:38:c1:c4:1b:80:
8c:b3:14:b0:ae:54:c0:cc:02:11:84:04:a4:ee:3a:5f:18:55:
b4:7b:3b:d8:bc:85:f3:4a:6c:13:f1:eb:b3:f6:bb:63:e7:1b:
09:d6:25:4d:e5:0f:ac:27:d4:8e:3e:eb:8c:c5:f9:0c:7b:fc:
63:7a:0b:b4:7e:fa:a8:6d:dd:89:38:e3:f9:9d:38:be:6b:ff:
39:7e:d5:a9:35:d1:2b:aa:cc:8b:c4:dc:7c:1e:29:45:b7:be:
d2:40:01:38:36:48:09:93:2b:07:64:39:0a:23:90:b3:4b:39:
c0:4c:ac:0c:4a:74:de:d8:70:ec:c8:7a:0b:9b:95:c6:0f:4c:
81:e0:8d:e0:b8:31:91:b7:ee:3b:c3:86:4c:a4:8f:89:d0:e7:
a7:07:f7:86:60:df:29:c2:b2:9d:c3:a7:dc:de:ce:d3:e0:8f:
aa:d4:78:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyMOubRMkf+wunH/CeYzSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDE3YmM3ZWJlYmRjYzlmMWIzZmRiNTVhZDEyMmU3MDYy
MjQzZTIwHhcNMjMwMTAyMTExNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjU2OWE5ZDY1NDRjYTQxYWY4ODdiZWZiODY0MzRmZjcwNzk3MTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzxnbzgow4x/b5YuQUydO6VGx2qR
S+F0yEQx/3kM2Yve2Dutegs1TqhDUZtt00OcrmaeK/UMPWBnN0lU/YVOyrn1Ws8V
td8Uf+/PuvDV8A1g+66tKR1jRRUFZAtrVESvJqUnvOqG5/D6Tp8g97JRMyoCmTaN
smcuK5nJg9RFEqo9ekKr5YQhjWyPVkS1oBAmUo2TffP8ZWrEAjSyqcBt1Cx0Dc4a
mJpdFrGIFooAfor/CyKYwZ49k6eA1NpUe3GkL126sYcxwk+ff4gFDzkaWGrw7vZP
ypev3aHYhzmhkMwj40nsyx1ziW41ZnYQs1OtdWi5WUjDogibN1l4htnWfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZWmp1lRMpBr4h777hkNP9weXFGMB8GA1UdIwQY
MBaAFAPRe8fr69zJ8bP9tVrRIucGIkPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlGN3gtdnIzTW54c18yMVd0RWk1d1lpUS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yMTU4MmYtNTExYS00YWYzLTgwMjgt
ZTJkODgzNzZkNDRkLzEvSmxhYW5XVkV5a0d2aUh2dnVHUTBfM0I1Y1VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yMTU4MmYtNTExYS00YWYzLTgwMjgtZTJkODgzNzZkNDRk
LzEvQTlGN3gtdnIzTW54c18yMVd0RWk1d1lpUS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZeSMA0G
CSqGSIb3DQEBCwUAA4IBAQAzDkIN1HxS9niyQl4iCrxwGy7jzbgM7QgFZHrKXOIV
7aJ0pvAJwZYCPKtNbIUgisTTZorYtzNLXgYs6FiVwA+iRfGrgHSvs9VpiwBhLQlp
imJzTMiSOMHEG4CMsxSwrlTAzAIRhASk7jpfGFW0ezvYvIXzSmwT8euz9rtj5xsJ
1iVN5Q+sJ9SOPuuMxfkMe/xjegu0fvqobd2JOOP5nTi+a/85ftWpNdErqsyLxNx8
HilFt77SQAE4NkgJkysHZDkKI5CzSznATKwMSnTe2HDsyHoLm5XGD0yB4I3guDGR
t+47w4ZMpI+J0OenB/eGYN8pwrKdw6fc3s7T4I+q1HjG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:13 2024 by rpki-client on console-fra.rpki-client.org