Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204136.roa
File: AS204136.roa (raw, json)
Hash identifier: n8cIqddnqzEXAzNdVAwtxzF+nfQ1M7DnV3GJEnWdSQU=
Subject key identifier: E9:83:68:CF:9F:AC:5A:03:43:0D:CE:E8:4B:53:7B:B7:97:63:03:D2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 623D11DE6F947D48EDAB58B25C54AF0ED1CE8545
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204136.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 204136
IP address blocks: 185.121.177.0/24 maxlen: 24
2a06:a005:8e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3d:11:de:6f:94:7d:48:ed:ab:58:b2:5c:54:af:0e:d1:ce:85:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=E98368CF9FAC5A03430DCEE84B537BB7976303D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:38:0b:ec:69:92:19:98:5e:e3:4b:d0:39:
4d:ca:bc:a8:fc:33:5a:d6:c8:22:46:9a:77:3f:95:
1b:33:72:ec:0f:33:45:de:cf:ce:9f:9c:f4:39:2b:
91:4e:6f:97:1d:8b:b6:d7:bb:c0:60:e7:36:ca:b9:
98:43:92:59:8e:44:be:02:5c:fb:35:13:4a:ae:e4:
03:05:4b:b3:48:d5:51:d0:40:38:21:35:6c:03:e0:
82:f3:a4:72:10:68:f3:b7:f6:7a:36:c5:f4:26:f6:
b7:62:2f:c8:e0:ba:e8:ff:1f:7b:54:42:ba:01:94:
48:d0:8e:be:c2:3c:15:10:92:10:cd:13:42:0a:c4:
8c:60:8d:d2:4a:32:8a:4a:9a:9d:2d:e4:f3:29:b8:
1a:c8:1e:16:09:68:0c:62:54:39:dd:c4:ce:05:a0:
4d:b2:17:3b:54:13:8d:f3:88:48:23:d3:15:e4:c5:
c7:06:3f:2a:6a:69:90:58:c6:2b:ee:45:22:bf:54:
1e:06:5b:db:d7:68:1a:c7:4a:82:6d:b2:f1:bb:18:
30:b9:4b:46:63:ae:47:c4:36:fa:93:25:a2:42:24:
e3:6d:59:2f:80:2a:0f:c7:5e:43:f7:7b:08:b8:98:
16:33:47:82:67:ec:af:a5:c1:e1:81:77:32:5f:67:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:83:68:CF:9F:AC:5A:03:43:0D:CE:E8:4B:53:7B:B7:97:63:03:D2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.177.0/24
IPv6:
2a06:a005:8e0::/44
Signature Algorithm: sha256WithRSAEncryption
99:47:d4:8e:ba:fe:c5:c9:23:29:46:a1:41:0b:a7:f3:98:d8:
82:f5:64:5a:17:3a:1a:a0:20:16:2a:b1:fa:5e:f0:b9:5d:fd:
68:2f:a1:6d:4a:84:0d:20:bd:89:ff:bb:f9:9c:c8:77:95:33:
e8:1f:b9:c1:45:48:5b:78:7f:64:51:02:20:05:cf:e5:9c:78:
53:76:70:54:d1:52:7f:06:f7:3c:8c:d1:bb:8b:cf:cf:1b:fe:
8a:2c:01:74:26:d6:ab:04:f9:35:da:36:30:76:e3:63:d8:10:
de:1e:7a:0a:53:79:9a:69:e2:34:08:fa:9a:ba:f0:61:5c:b7:
19:4c:b6:ab:6b:96:55:0a:7d:07:26:41:da:8e:e0:7e:99:9e:
8b:03:e2:9a:ba:ed:e6:9a:0e:1b:b1:73:4b:b8:74:ea:47:dc:
a8:61:11:c5:e1:73:63:9f:1c:fa:b0:c8:ac:4d:87:07:7c:1d:
bd:f3:89:14:a2:76:df:3b:6f:ed:bd:00:a6:bf:e9:45:98:b0:
3d:09:9a:e3:5f:ed:07:84:40:4e:c0:a0:ae:a8:41:54:c6:f5:
54:08:79:e9:84:9d:4b:f7:e9:bb:58:4b:c8:98:89:33:0c:72:
9a:d7:1c:96:ef:cf:85:22:f9:a3:6e:e6:25:b6:2b:4a:4d:25:
14:92:9b:3c
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUYj0R3m+UfUjtq1iyXFSvDtHOhUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjNaFw0yMzEyMzEyMzU5MjNaMDMxMTAvBgNV
BAMTKEU5ODM2OENGOUZBQzVBMDM0MzBEQ0VFODRCNTM3QkI3OTc2MzAzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQjgL7GmSGZhe40vQOU3KvKj8
M1rWyCJGmnc/lRszcuwPM0Xez86fnPQ5K5FOb5cdi7bXu8Bg5zbKuZhDklmORL4C
XPs1E0qu5AMFS7NI1VHQQDghNWwD4ILzpHIQaPO39no2xfQm9rdiL8jguuj/H3tU
QroBlEjQjr7CPBUQkhDNE0IKxIxgjdJKMopKmp0t5PMpuBrIHhYJaAxiVDndxM4F
oE2yFztUE43ziEgj0xXkxccGPypqaZBYxivuRSK/VB4GW9vXaBrHSoJtsvG7GDC5
S0ZjrkfENvqTJaJCJONtWS+AKg/HXkP3ewi4mBYzR4Jn7K+lweGBdzJfZxnfAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQU6YNoz5+sWgNDDc7oS1N7t5djA9IwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA0MTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXmx
MA8EAgACMAkDBwQqBqAFCOAwDQYJKoZIhvcNAQELBQADggEBAJlH1I66/sXJIylG
oUELp/OY2IL1ZFoXOhqgIBYqsfpe8Lld/WgvoW1KhA0gvYn/u/mcyHeVM+gfucFF
SFt4f2RRAiAFz+WceFN2cFTRUn8G9zyM0buLz88b/oosAXQm1qsE+TXaNjB242PY
EN4eegpTeZpp4jQI+pq68GFctxlMtqtrllUKfQcmQdqO4H6ZnosD4pq67eaaDhux
c0u4dOpH3KhhEcXhc2OfHPqwyKxNhwd8Hb3ziRSidt87b+29AKa/6UWYsD0JmuNf
7QeEQE7AoK6oQVTG9VQIeemEnUv36btYS8iYiTMMcprXHJbvz4Ui+aNu5iW2K0pN
JRSSmzw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org