Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/ColGLDPQ8GiCI6wWaC5PSqpRGZc.roa
File: ColGLDPQ8GiCI6wWaC5PSqpRGZc.roa (raw, json)
Hash identifier: sfqtM0RQDqb7AMFInBu4C24g8nhcc50qdGC6vXNlAHA=
Subject key identifier: 0A:89:46:2C:33:D0:F0:68:82:23:AC:16:68:2E:4F:4A:AA:51:19:97
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 0192D24D095D3062A36D141D1736EF52C278
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/ColGLDPQ8GiCI6wWaC5PSqpRGZc.roa
Signing time: Mon 28 Oct 2024 08:45:16 +0000
ROA not before: Mon 28 Oct 2024 08:45:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198032
IP address blocks: 91.240.2.0/24 maxlen: 24
185.198.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:4d:09:5d:30:62:a3:6d:14:1d:17:36:ef:52:c2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Oct 28 08:45:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a89462c33d0f0688223ac16682e4f4aaa511997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:d0:04:24:1d:8b:d4:2b:19:b3:47:cc:90:
84:ee:29:4c:f2:a0:ec:1d:e5:42:d0:b2:18:41:4a:
0c:19:03:55:be:a1:06:d3:d0:02:71:38:77:9e:9e:
d3:30:82:1a:13:16:ef:e9:2f:4c:8f:2d:2a:47:14:
71:94:3f:5a:57:7c:b1:14:64:93:11:9e:36:e3:c3:
dd:1e:33:bd:31:d0:ab:51:4d:80:1b:e9:c6:d1:86:
4d:37:1c:a4:9f:76:bb:cf:fa:2a:b0:1f:cc:a9:b1:
a2:88:20:50:6f:2b:d7:38:aa:46:00:5d:d5:11:f6:
3d:e6:9d:02:96:4c:4b:9b:4f:c6:ed:b6:12:aa:fd:
2e:0b:c7:4d:ca:eb:5c:4e:43:df:a3:0c:ec:5a:a2:
ae:02:14:cb:f9:a3:20:ce:0a:1f:9f:ed:7a:4b:93:
17:8a:4e:1c:ea:9f:24:e2:e3:42:61:99:2b:47:28:
4c:1c:80:1f:3f:11:dd:c8:23:87:e6:03:f5:cd:51:
60:5f:5b:13:22:e0:c2:96:89:62:df:fa:d7:3d:fd:
2b:b9:5a:44:2d:a9:be:d1:d2:bd:82:ed:51:f0:5b:
5c:29:e4:dd:65:3a:f7:6d:24:a9:37:39:1b:17:d5:
f8:e5:d4:dc:8d:51:c2:51:d3:5b:a1:b3:dd:66:5c:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:46:2C:33:D0:F0:68:82:23:AC:16:68:2E:4F:4A:AA:51:19:97
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/ColGLDPQ8GiCI6wWaC5PSqpRGZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.2.0/24
185.198.132.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0d:eb:02:18:a5:a6:bf:19:d9:8d:98:c2:4c:1b:6f:32:0e:
05:a1:1e:50:25:17:93:f7:09:6f:46:a7:c9:2f:35:37:e4:ac:
48:55:06:a8:63:73:a6:4f:32:24:2e:23:1d:b9:50:59:1e:6e:
24:13:15:9e:f2:a3:5b:12:dd:97:95:03:40:e1:2e:c3:1f:ed:
8c:f5:7a:31:06:fa:e3:5e:01:91:9c:e2:18:ba:8f:c7:7b:63:
02:00:b2:08:94:45:ac:3c:e4:a4:86:48:cc:eb:e0:14:df:2a:
96:b4:10:38:a7:a3:5d:79:58:37:e5:2a:07:96:b6:20:17:02:
0b:35:a6:b5:e0:c6:7b:93:5f:87:31:5d:b5:ae:27:fb:90:02:
95:56:6b:2c:78:5c:bb:77:0f:0a:d0:2f:af:ed:53:fc:ca:84:
db:32:a7:b3:2b:a7:89:17:b2:d0:50:01:36:99:fb:01:8a:06:
aa:d7:53:90:fd:7f:25:a7:0b:f1:18:25:e6:cc:dd:c3:ec:4c:
2d:8c:0a:c5:54:6a:6c:ab:57:85:be:c9:f7:8c:ef:eb:f3:d8:
da:56:8d:aa:27:51:cc:59:4b:7f:8a:02:52:24:96:60:4d:1e:
24:38:3c:f0:e4:36:99:be:3e:83:ed:21:a2:fb:52:a0:74:03:
06:dc:58:ed
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZLSTQldMGKjbRQdFzbvUsJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTY3MTJjY2ZhODc3YWJiNzYwY2I3N2UyNzA0MTc3NGNi
MDQ3MzkwHhcNMjQxMDI4MDg0NTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTg5NDYyYzMzZDBmMDY4ODIyM2FjMTY2ODJlNGY0YWFhNTExOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i3QBCQdi9QrGbNHzJCE7ilM8qDs
HeVC0LIYQUoMGQNVvqEG09ACcTh3np7TMIIaExbv6S9Mjy0qRxRxlD9aV3yxFGST
EZ4248PdHjO9MdCrUU2AG+nG0YZNNxykn3a7z/oqsB/MqbGiiCBQbyvXOKpGAF3V
EfY95p0ClkxLm0/G7bYSqv0uC8dNyutcTkPfowzsWqKuAhTL+aMgzgofn+16S5MX
ik4c6p8k4uNCYZkrRyhMHIAfPxHdyCOH5gP1zVFgX1sTIuDCloli3/rXPf0ruVpE
Lam+0dK9gu1R8FtcKeTdZTr3bSSpNzkbF9X45dTcjVHCUdNbobPdZlxaswIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAqJRiwz0PBogiOsFmguT0qqURmXMB8GA1UdIwQY
MBaAFFBWcSzPqHert2DLd+JwQXdMsEc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84ZDc5OGEtNzNkNy00NGJhLTk3ZGIt
Zjg0YjYwNTIxZGY1LzEvQ29sR0xEUFE4R2lDSTZ3V2FDNVBTcXBSR1pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84ZDc5OGEtNzNkNy00NGJhLTk3ZGItZjg0YjYwNTIxZGY1
LzEvVUZaeExNLW9kNnUzWU10MzRuQkJkMHl3UnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/ACAwQA
ucaEMA0GCSqGSIb3DQEBCwUAA4IBAQBhDesCGKWmvxnZjZjCTBtvMg4FoR5QJReT
9wlvRqfJLzU35KxIVQaoY3OmTzIkLiMduVBZHm4kExWe8qNbEt2XlQNA4S7DH+2M
9XoxBvrjXgGRnOIYuo/He2MCALIIlEWsPOSkhkjM6+AU3yqWtBA4p6NdeVg35SoH
lrYgFwILNaa14MZ7k1+HMV21rif7kAKVVmsseFy7dw8K0C+v7VP8yoTbMqezK6eJ
F7LQUAE2mfsBigaq11OQ/X8lpwvxGCXmzN3D7EwtjArFVGpsq1eFvsn3jO/r89ja
Vo2qJ1HMWUt/igJSJJZgTR4kODzw5DaZvj6D7SGi+1KgdAMG3Fjt
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:22 2024 by rpki-client on console.sobornost.net