Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/b2WTWYv4PsrqxtT3Grj60usaiSI.roa
File: b2WTWYv4PsrqxtT3Grj60usaiSI.roa (raw, json)
Hash identifier: s1/2v1+XrsNzYphurL6cdH57mHmsY3fmKHldJHT4TRs=
Subject key identifier: 6F:65:93:59:8B:F8:3E:CA:EA:C6:D4:F7:1A:B8:FA:D2:EB:1A:89:22
Certificate issuer: /CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Certificate serial: 018CC2DAFECB3227AF79BE58EE1FAC36EBFB
Authority key identifier: C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/b2WTWYv4PsrqxtT3Grj60usaiSI.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 185.81.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fe:cb:32:27:af:79:be:58:ee:1f:ac:36:eb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f6593598bf83ecaeac6d4f71ab8fad2eb1a8922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:b1:a2:e6:be:fb:c9:58:a0:65:11:7d:80:
e5:24:24:60:46:ce:ce:7d:cc:5d:89:85:15:fc:d3:
37:74:be:ad:22:6e:d8:1b:b4:75:8a:ea:d6:4c:af:
c7:04:cd:6c:8a:d2:9e:42:c6:fb:e7:8d:d5:de:f4:
b4:9c:77:fc:00:69:27:25:a3:f7:27:8a:64:32:a1:
01:8e:42:11:33:f9:f7:df:cd:aa:e2:44:23:e6:48:
3f:24:84:a9:04:e8:2c:81:47:37:d4:7e:f6:8f:8b:
00:19:91:1e:42:54:a5:ff:4e:83:a6:2f:2b:56:a3:
e3:cd:47:45:d5:2c:3d:97:e7:9f:b8:eb:e3:f1:bc:
1c:3e:21:59:c8:7a:6b:c4:57:f3:1a:46:a7:c6:19:
ad:7d:4b:ee:98:fc:73:2c:95:73:f0:05:ad:7c:01:
81:65:00:78:e2:08:eb:f2:70:21:3a:7a:b9:4f:75:
10:fc:dd:9d:d9:4a:82:83:02:3b:fa:e8:ee:85:43:
a6:d2:e5:5b:f8:1d:a7:0c:e1:e4:a6:7c:cf:2c:2d:
1b:37:ec:28:06:4e:f9:93:31:a4:55:f4:b2:71:79:
cb:9c:42:22:a5:cc:7c:f3:d0:8c:c7:ba:cf:35:bf:
5c:16:9d:2c:33:57:3f:dc:45:7d:0b:f5:12:75:6e:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:65:93:59:8B:F8:3E:CA:EA:C6:D4:F7:1A:B8:FA:D2:EB:1A:89:22
X509v3 Authority Key Identifier:
keyid:C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/b2WTWYv4PsrqxtT3Grj60usaiSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e0:7e:82:b4:ef:c6:0a:18:64:0b:fd:03:93:de:60:cf:83:
13:f9:ed:ad:46:56:11:9f:77:9d:d5:62:b2:dc:27:3f:d4:17:
84:96:72:62:7b:93:a3:8b:61:f9:db:04:21:cc:da:b0:7c:d4:
08:94:82:06:d7:24:91:4b:cf:c5:01:ad:7d:8a:96:67:e4:85:
a8:b8:21:e5:fc:0b:6a:ca:cc:01:6b:af:6c:77:12:7f:56:cf:
40:be:8a:bb:85:78:80:49:03:d5:36:b3:ab:ba:a1:3a:73:0a:
cf:39:05:bc:a9:d4:4e:e2:cd:32:a3:16:ee:df:1b:60:47:12:
b9:a4:7c:6c:e8:b0:45:63:5f:aa:ff:cd:a5:de:c9:60:39:bd:
66:29:34:9a:1c:40:c5:0b:a1:53:1f:e5:2f:3a:a0:90:64:50:
3f:d8:a5:81:35:62:22:5c:0e:68:47:80:e4:67:a9:f1:ce:12:
66:ba:a8:26:e7:ac:f0:01:64:17:ca:de:2e:45:82:63:5a:38:
9c:ed:1e:09:a8:80:88:45:c8:30:71:f6:03:f7:42:f9:ac:61:
29:ef:e3:18:31:73:f7:82:44:2d:82:f6:bb:36:66:b2:f9:41:
bb:c6:ab:d4:f8:a1:f6:c2:66:c5:8b:07:c5:76:d0:84:6c:ee:
cf:44:ee:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2v7LMieveb5Y7h+sNuv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjA0OGU5ZDIyZDY3MWVlNzJlYjM3M2FlMzU2YmQ1YWQ3
ZDY2NGYwHhcNMjQwMTAxMDIyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjY1OTM1OThiZjgzZWNhZWFjNmQ0ZjcxYWI4ZmFkMmViMWE4OTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8qxoua++8lYoGURfYDlJCRgRs7O
fcxdiYUV/NM3dL6tIm7YG7R1iurWTK/HBM1sitKeQsb7543V3vS0nHf8AGknJaP3
J4pkMqEBjkIRM/n3382q4kQj5kg/JISpBOgsgUc31H72j4sAGZEeQlSl/06Dpi8r
VqPjzUdF1Sw9l+efuOvj8bwcPiFZyHprxFfzGkanxhmtfUvumPxzLJVz8AWtfAGB
ZQB44gjr8nAhOnq5T3UQ/N2d2UqCgwI7+ujuhUOm0uVb+B2nDOHkpnzPLC0bN+wo
Bk75kzGkVfSycXnLnEIipcx889CMx7rPNb9cFp0sM1c/3EV9C/USdW5M+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9lk1mL+D7K6sbU9xq4+tLrGokiMB8GA1UdIwQY
MBaAFMZgSOnSLWce5y6zc641a9WtfWZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1CSTZkSXRaeDduTHJOenJqVnIxYTE5Wms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84YjY4MTctOWIwNC00ZmEyLTg4YWUt
NGViODllZTAyZjMzLzEvYjJXVFdZdjRQc3JxeHRUM0dyajYwdXNhaVNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC84YjY4MTctOWIwNC00ZmEyLTg4YWUtNGViODllZTAyZjMz
LzEveG1CSTZkSXRaeDduTHJOenJqVnIxYTE5Wms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVFEMA0G
CSqGSIb3DQEBCwUAA4IBAQCz4H6CtO/GChhkC/0Dk95gz4MT+e2tRlYRn3ed1WKy
3Cc/1BeElnJie5Oji2H52wQhzNqwfNQIlIIG1ySRS8/FAa19ipZn5IWouCHl/Atq
yswBa69sdxJ/Vs9Avoq7hXiASQPVNrOruqE6cwrPOQW8qdRO4s0yoxbu3xtgRxK5
pHxs6LBFY1+q/82l3slgOb1mKTSaHEDFC6FTH+UvOqCQZFA/2KWBNWIiXA5oR4Dk
Z6nxzhJmuqgm56zwAWQXyt4uRYJjWjic7R4JqICIRcgwcfYD90L5rGEp7+MYMXP3
gkQtgva7Nmay+UG7xqvU+KH2wmbFiwfFdtCEbO7PRO4A
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:47 2024 by rpki-client on console-fra.rpki-client.org