Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/ph_JIzmYnSfQuMhwiqdlJlSTF1E.roa
File: ph_JIzmYnSfQuMhwiqdlJlSTF1E.roa (raw, json)
Hash identifier: I9uV4c0wPhVixTjY9ILDYGccUTiRCdxQZhbLt7G/+D8=
Subject key identifier: A6:1F:C9:23:39:98:9D:27:D0:B8:C8:70:8A:A7:65:26:54:93:17:51
Certificate issuer: /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial: 018CC7274AA002B72E7F970F0D2F93256708
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/ph_JIzmYnSfQuMhwiqdlJlSTF1E.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203377
IP address blocks: 185.136.205.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4a:a0:02:b7:2e:7f:97:0f:0d:2f:93:25:67:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a61fc92339989d27d0b8c8708aa7652654931751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:b9:0a:8f:18:3d:c4:db:83:3e:60:34:be:
00:d2:c2:1a:f3:76:7b:d8:e0:41:ba:4d:43:13:37:
52:6d:b9:17:93:cc:7b:8f:15:67:01:ab:88:b4:8a:
7e:4f:cd:e3:0d:73:5d:d8:a1:3a:9f:27:a1:4c:6d:
70:ff:0b:c4:20:07:29:0a:6d:f1:10:44:05:64:58:
8a:bf:c0:1a:c5:10:4d:61:1d:cf:2a:a8:f0:dc:b9:
a0:66:a4:75:c0:36:de:6f:99:4d:71:96:eb:1a:a1:
39:ce:d1:9e:b4:7e:c1:06:86:d3:ce:4f:a7:af:25:
c1:47:4b:e8:2c:2f:54:fa:10:a5:fa:69:74:2a:4b:
fb:bf:de:44:da:3a:6b:8a:b6:00:8e:e5:c9:28:a9:
57:10:d4:9e:5d:bf:81:01:a3:ec:a0:2f:56:6d:19:
48:0a:7a:e5:f7:14:85:40:cd:85:39:55:7f:5a:3b:
73:8d:af:41:ff:02:1e:db:36:34:10:25:e9:57:53:
f4:8a:37:1c:e2:ae:da:94:58:0a:80:15:8c:21:73:
3f:a2:f6:e7:68:96:c5:3c:90:61:20:06:b5:7f:84:
a2:cf:74:fa:1e:e3:e8:27:23:61:09:5d:40:58:c7:
86:44:69:ee:18:a0:66:40:07:12:f3:73:68:59:d5:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:C9:23:39:98:9D:27:D0:B8:C8:70:8A:A7:65:26:54:93:17:51
X509v3 Authority Key Identifier:
keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/ph_JIzmYnSfQuMhwiqdlJlSTF1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:50:e2:fa:00:96:a1:c3:48:2c:0d:29:cf:cf:bf:88:0e:87:
0f:9a:42:0b:a8:2d:3f:f2:68:e3:ee:bf:fb:42:d4:de:a5:c8:
a4:a1:70:27:2e:99:7a:05:f5:11:20:7d:07:33:b2:cf:c0:07:
a8:63:2c:ea:c0:ae:8f:1f:c3:8c:88:e4:95:8e:06:36:25:8e:
61:97:63:58:4e:a9:9c:d8:be:4c:da:02:40:b4:a2:8a:da:b7:
f6:67:b2:5e:81:d6:45:7f:77:a2:d5:75:4f:68:eb:56:5c:89:
e7:3d:f9:b1:e8:1f:7a:0b:66:87:d6:a0:0c:69:bc:c5:f4:e9:
1a:8e:50:30:1c:3b:8f:25:c2:99:82:0c:ae:c7:fe:f9:7c:02:
b3:1e:37:1b:b7:16:f3:83:0f:7a:47:1f:a2:33:8f:04:f5:e7:
be:aa:bb:4f:68:55:f6:44:41:f8:65:d4:94:52:2a:be:a3:cd:
fc:98:ab:13:da:03:66:1d:f2:5c:88:23:bd:17:39:79:ce:a3:
7a:88:2d:ac:34:a1:d5:0b:43:d5:d6:46:1e:f1:1b:83:f8:6e:
7c:e7:02:70:0d:1f:75:01:26:4b:15:b3:25:41:dd:a9:21:d9:
fe:ce:35:89:7d:0a:a0:c4:88:bd:ca:ae:ba:d3:3f:98:46:ed:
bb:a6:94:b3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJ0qgArcuf5cPDS+TJWcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTg4OTM0YTBiMGQ2NDhkYWY5NGRkOWU2MjlkM2RkMjJl
ZDVhYmYwHhcNMjQwMTAxMjIzMTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjFmYzkyMzM5OTg5ZDI3ZDBiOGM4NzA4YWE3NjUyNjU0OTMxNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXu5Co8YPcTbgz5gNL4A0sIa83Z7
2OBBuk1DEzdSbbkXk8x7jxVnAauItIp+T83jDXNd2KE6nyehTG1w/wvEIAcpCm3x
EEQFZFiKv8AaxRBNYR3PKqjw3LmgZqR1wDbeb5lNcZbrGqE5ztGetH7BBobTzk+n
ryXBR0voLC9U+hCl+ml0Kkv7v95E2jprirYAjuXJKKlXENSeXb+BAaPsoC9WbRlI
Cnrl9xSFQM2FOVV/Wjtzja9B/wIe2zY0ECXpV1P0ijcc4q7alFgKgBWMIXM/ovbn
aJbFPJBhIAa1f4Siz3T6HuPoJyNhCV1AWMeGRGnuGKBmQAcS83NoWdVUxQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKYfySM5mJ0n0LjIcIqnZSZUkxdRMB8GA1UdIwQY
MBaAFHNYiTSgsNZI2vlN2eYp090i7Vq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFpSk5LQ3cxa2phLVUzWjVpblQzU0x0V3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lMzQ5NGQtZTdhYS00ZDIxLWE4YWQt
N2Q0YzBiN2Q3ODYxLzEvcGhfSkl6bVluU2ZRdU1od2lxZGxKbFNURjFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lMzQ5NGQtZTdhYS00ZDIxLWE4YWQtN2Q0YzBiN2Q3ODYx
LzEvYzFpSk5LQ3cxa2phLVUzWjVpblQzU0x0V3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYjNAwQA
uc8nMA0GCSqGSIb3DQEBCwUAA4IBAQCeUOL6AJahw0gsDSnPz7+IDocPmkILqC0/
8mjj7r/7QtTepcikoXAnLpl6BfURIH0HM7LPwAeoYyzqwK6PH8OMiOSVjgY2JY5h
l2NYTqmc2L5M2gJAtKKK2rf2Z7JegdZFf3ei1XVPaOtWXInnPfmx6B96C2aH1qAM
abzF9OkajlAwHDuPJcKZggyux/75fAKzHjcbtxbzgw96Rx+iM48E9ee+qrtPaFX2
REH4ZdSUUiq+o838mKsT2gNmHfJciCO9Fzl5zqN6iC2sNKHVC0PV1kYe8RuD+G58
5wJwDR91ASZLFbMlQd2pIdn+zjWJfQqgxIi9yq660z+YRu27ppSz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org