Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/sVomTCgx6PxmOCUeUaDf6s34epk.roa
File: sVomTCgx6PxmOCUeUaDf6s34epk.roa (raw, json)
Hash identifier: jQ2WmHTim3dK49uLB1xXwouR2Jjn3s2T40V1stt3nNw=
Subject key identifier: B1:5A:26:4C:28:31:E8:FC:66:38:25:1E:51:A0:DF:EA:CD:F8:7A:99
Certificate issuer: /CN=8d29a41e6f507a37458a49643a7be5790758f726
Certificate serial: 0185708CE5A9310BFE9E3DDA062076BFC872
Authority key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/sVomTCgx6PxmOCUeUaDf6s34epk.roa
Signing time: Mon 02 Jan 2023 03:35:59 +0000
ROA not before: Mon 02 Jan 2023 03:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204479
IP address blocks: 185.107.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e5:a9:31:0b:fe:9e:3d:da:06:20:76:bf:c8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d29a41e6f507a37458a49643a7be5790758f726
Validity
Not Before: Jan 2 03:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b15a264c2831e8fc6638251e51a0dfeacdf87a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:23:c6:b8:a0:0b:79:ae:ee:4b:a2:3b:8b:
64:10:17:1d:a7:a8:42:8b:ac:4d:e5:bb:f3:1b:19:
6c:58:f5:12:d7:c6:af:e6:96:b6:42:fb:b3:cd:cd:
4d:24:61:1a:d3:d7:ce:c3:df:f3:cb:3e:c5:35:ae:
03:74:d6:fd:bb:96:ca:b7:dc:09:b9:84:98:9e:f8:
02:7f:d6:7c:59:fc:d8:f1:dd:32:50:67:43:2c:91:
54:b5:6b:94:21:2c:81:34:73:28:13:d3:cd:a5:02:
25:a6:bb:97:03:c7:bf:b0:a9:21:da:1f:50:6e:9c:
11:da:5b:32:9f:fd:5c:2c:6f:9b:56:28:19:3c:9a:
6b:b5:37:42:f1:4a:53:54:a0:ab:0e:90:af:3c:1f:
96:9d:b1:03:83:9f:d5:a2:b6:c3:94:f9:9c:40:d0:
45:6c:82:de:d3:bb:67:9e:9c:f0:50:e5:b1:cc:66:
a0:b1:58:21:f8:31:6e:f7:cc:8a:f2:d4:d2:03:78:
ef:89:20:56:2b:cc:1b:6f:37:f2:33:06:26:96:d6:
fe:ac:90:e7:2b:32:d0:98:cc:1c:75:37:00:b6:60:
20:e4:67:35:4e:0d:c5:21:db:b4:4d:b5:2c:57:8a:
e7:d9:25:bc:e6:4a:4f:ef:9e:81:f8:20:a1:75:3e:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5A:26:4C:28:31:E8:FC:66:38:25:1E:51:A0:DF:EA:CD:F8:7A:99
X509v3 Authority Key Identifier:
keyid:8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/sVomTCgx6PxmOCUeUaDf6s34epk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.67.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d8:38:04:ff:94:20:28:df:84:63:e8:26:6e:ab:a4:db:cf:
fc:90:4d:ba:17:0e:9d:ac:66:b6:2a:52:e1:99:31:50:34:c9:
36:1e:dc:3b:dd:da:5a:44:62:12:6f:b5:e5:8b:21:80:1f:30:
03:eb:fc:1b:fd:b2:f2:57:b3:77:3f:51:a5:c8:94:47:8a:42:
55:60:32:80:80:c9:10:b0:95:8c:e0:0c:1d:cc:b2:db:9d:e1:
9d:e2:23:08:1e:8a:b2:37:39:03:4a:9e:87:ac:09:d4:10:90:
45:0b:6c:84:fb:58:5f:d8:01:2f:13:8d:20:9c:70:f4:b6:1a:
a0:2f:2e:f5:33:25:a4:4c:aa:7d:31:3b:0b:ca:36:2c:e4:cf:
f6:86:98:4e:71:f0:7a:1f:9f:76:9f:ac:75:4b:56:d5:cc:ec:
31:4a:b3:94:62:f1:aa:f0:13:ac:4f:24:3f:8c:9b:55:e2:4d:
c8:98:99:7f:df:bd:2c:27:35:6d:0b:32:38:8a:9f:39:c0:af:
4b:57:47:6c:3c:6c:6a:ff:a5:c8:e7:5e:e7:3c:c3:35:47:ff:
70:ad:65:1b:a3:8d:67:eb:ec:f9:bd:fe:45:55:c9:e9:fc:63:
23:37:ca:57:cf:d9:76:23:32:11:2e:9e:0e:22:5d:35:f5:26:
79:58:13:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjOWpMQv+nj3aBiB2v8hyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjlhNDFlNmY1MDdhMzc0NThhNDk2NDNhN2JlNTc5MDc1
OGY3MjYwHhcNMjMwMTAyMDMzNTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTVhMjY0YzI4MzFlOGZjNjYzODI1MWU1MWEwZGZlYWNkZjg3YTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+YjxrigC3mu7kuiO4tkEBcdp6hC
i6xN5bvzGxlsWPUS18av5pa2Qvuzzc1NJGEa09fOw9/zyz7FNa4DdNb9u5bKt9wJ
uYSYnvgCf9Z8WfzY8d0yUGdDLJFUtWuUISyBNHMoE9PNpQIlpruXA8e/sKkh2h9Q
bpwR2lsyn/1cLG+bVigZPJprtTdC8UpTVKCrDpCvPB+WnbEDg5/VorbDlPmcQNBF
bILe07tnnpzwUOWxzGagsVgh+DFu98yK8tTSA3jviSBWK8wbbzfyMwYmltb+rJDn
KzLQmMwcdTcAtmAg5Gc1Tg3FIdu0TbUsV4rn2SW85kpP756B+CChdT4QKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLFaJkwoMej8ZjglHlGg3+rN+HqZMB8GA1UdIwQY
MBaAFI0ppB5vUHo3RYpJZDp75XkHWPcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNta0htOVFlamRGaWtsa09udmxlUWRZOXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNWI0NWQtNzc4MC00MzRiLWE5MTIt
ZWZiOWEwNGQzY2FhLzEvc1ZvbVRDZ3g2UHhtT0NVZVVhRGY2czM0ZXBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNWI0NWQtNzc4MC00MzRiLWE5MTItZWZiOWEwNGQzY2Fh
LzEvalNta0htOVFlamRGaWtsa09udmxlUWRZOXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWtDMA0G
CSqGSIb3DQEBCwUAA4IBAQAT2DgE/5QgKN+EY+gmbquk28/8kE26Fw6drGa2KlLh
mTFQNMk2Htw73dpaRGISb7XliyGAHzAD6/wb/bLyV7N3P1GlyJRHikJVYDKAgMkQ
sJWM4AwdzLLbneGd4iMIHoqyNzkDSp6HrAnUEJBFC2yE+1hf2AEvE40gnHD0thqg
Ly71MyWkTKp9MTsLyjYs5M/2hphOcfB6H592n6x1S1bVzOwxSrOUYvGq8BOsTyQ/
jJtV4k3ImJl/370sJzVtCzI4ip85wK9LV0dsPGxq/6XI517nPMM1R/9wrWUbo41n
6+z5vf5FVcnp/GMjN8pXz9l2IzIRLp4OIl019SZ5WBMM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:41 2024 by rpki-client on console-ams.rpki-client.org