Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/IpTKtaLOg9tVeIVhKmVTkQs4i2o.roa
File: IpTKtaLOg9tVeIVhKmVTkQs4i2o.roa (raw, json)
Hash identifier: VbuZsguuTPnxWeUZ4QFNKHLv3CYFduXXuw/gpL2Na/M=
Subject key identifier: 22:94:CA:B5:A2:CE:83:DB:55:78:85:61:2A:65:53:91:0B:38:8B:6A
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 0191B29BEDDA829C8D3ED19BA6D262746580
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/IpTKtaLOg9tVeIVhKmVTkQs4i2o.roa
Signing time: Mon 02 Sep 2024 12:00:49 +0000
ROA not before: Mon 02 Sep 2024 12:00:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134094
IP address blocks: 185.190.16.0/24 maxlen: 24
185.190.18.0/24 maxlen: 24
185.190.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:9b:ed:da:82:9c:8d:3e:d1:9b:a6:d2:62:74:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Sep 2 12:00:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2294cab5a2ce83db557885612a6553910b388b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:14:47:62:c6:35:ae:99:d3:bf:b0:8f:99:
bf:c9:f7:83:fc:d8:4b:6a:3b:3c:bb:bd:33:99:9b:
65:c8:2c:64:60:84:d6:09:53:3a:21:fa:07:12:7d:
70:0b:30:a0:d3:82:51:79:ac:f0:de:85:90:01:0c:
7e:5c:f5:a9:be:42:f0:6e:94:eb:a0:72:4d:45:81:
fd:a3:09:ae:94:47:fd:f2:76:a4:11:39:b6:26:9a:
7b:fc:db:12:4e:81:8d:38:03:31:ed:cc:6c:64:95:
b6:05:fe:78:74:e6:85:83:63:34:22:a7:91:3e:94:
59:a0:54:1c:53:71:8c:70:4f:fc:c3:f0:84:a9:5a:
02:63:a8:d3:e2:ac:e5:cd:c0:f5:ed:c5:aa:b6:3c:
dc:5a:fc:7d:a8:de:af:0a:1a:b4:47:e6:00:f0:df:
7d:ee:99:60:12:62:7f:e0:98:cf:14:ac:e4:b3:8f:
5f:63:88:56:67:fc:ee:35:e8:ae:5c:87:9e:c6:c9:
8a:72:5b:f9:28:9f:5e:d8:68:8e:e2:dd:38:b5:5e:
96:09:c4:30:03:91:da:14:30:ba:cd:7a:c6:9a:ed:
b6:3d:2a:c9:49:1c:6b:e0:89:7f:00:a7:f5:aa:b7:
ee:f2:e5:22:ab:f2:77:b0:17:8b:af:6a:20:3f:8a:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:CA:B5:A2:CE:83:DB:55:78:85:61:2A:65:53:91:0B:38:8B:6A
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/IpTKtaLOg9tVeIVhKmVTkQs4i2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.16.0/24
185.190.18.0/23
Signature Algorithm: sha256WithRSAEncryption
56:f6:c5:84:8a:89:dc:52:8f:33:d3:1b:c2:46:a9:27:8b:36:
38:18:b7:09:7f:aa:70:f5:87:89:59:fa:32:30:9a:97:74:65:
8b:b1:90:19:a8:3f:71:67:f3:37:6d:34:4c:c1:af:9e:6f:ef:
7c:9e:3f:c5:a5:5f:e6:e8:f4:90:f0:d8:de:4f:ef:1d:3b:96:
21:ab:56:94:cb:d4:c2:49:63:3e:37:c5:05:06:5a:93:69:08:
f6:3d:68:ca:fd:d9:af:ae:1e:27:09:1f:03:03:6f:18:7b:77:
ff:f5:c3:49:07:7a:64:87:d0:e1:9d:e0:7e:15:da:4d:be:9f:
d1:62:34:ef:ee:a0:fc:86:f3:c3:3d:11:24:70:3e:53:26:10:
a0:f4:60:7a:6c:e7:d0:66:91:80:60:45:28:4b:77:e5:44:7e:
af:c2:1a:ee:ff:ed:cd:3a:88:36:44:a4:92:5e:fa:e4:e1:4e:
2f:1f:83:12:1d:b7:5f:aa:e5:ee:89:f0:fe:5a:a3:02:f8:fb:
94:69:65:02:1d:49:0b:d2:2e:53:87:d5:d4:91:c7:cf:d3:1d:
00:5f:a9:de:b3:a3:8a:98:26:9a:19:e9:36:a1:37:52:e4:11:
98:f3:d3:2c:22:f6:5f:9a:0f:6a:07:f0:47:a0:51:62:3b:cf:
87:1a:83:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGym+3agpyNPtGbptJidGWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0M2I1MzIyYjhlYTM4YTdhMDQ0ZGNiMDY3MWE3NWRiYTEw
NDNkN2UwHhcNMjQwOTAyMTIwMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjk0Y2FiNWEyY2U4M2RiNTU3ODg1NjEyYTY1NTM5MTBiMzg4YjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzoUR2LGNa6Z07+wj5m/yfeD/NhL
ajs8u70zmZtlyCxkYITWCVM6IfoHEn1wCzCg04JReazw3oWQAQx+XPWpvkLwbpTr
oHJNRYH9owmulEf98nakETm2Jpp7/NsSToGNOAMx7cxsZJW2Bf54dOaFg2M0IqeR
PpRZoFQcU3GMcE/8w/CEqVoCY6jT4qzlzcD17cWqtjzcWvx9qN6vChq0R+YA8N99
7plgEmJ/4JjPFKzks49fY4hWZ/zuNeiuXIeexsmKclv5KJ9e2GiO4t04tV6WCcQw
A5HaFDC6zXrGmu22PSrJSRxr4Il/AKf1qrfu8uUiq/J3sBeLr2ogP4rxbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCKUyrWizoPbVXiFYSplU5ELOItqMB8GA1UdIwQY
MBaAFKQ7UyK46jinoETcsGcadduhBD1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAt
NzFlOTViMDRiM2VjLzEvSXBUS3RhTE9nOXRWZUlWaEttVlRrUXM0aTJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAtNzFlOTViMDRiM2Vj
LzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAub4QAwQB
ub4SMA0GCSqGSIb3DQEBCwUAA4IBAQBW9sWEioncUo8z0xvCRqknizY4GLcJf6pw
9YeJWfoyMJqXdGWLsZAZqD9xZ/M3bTRMwa+eb+98nj/FpV/m6PSQ8NjeT+8dO5Yh
q1aUy9TCSWM+N8UFBlqTaQj2PWjK/dmvrh4nCR8DA28Ye3f/9cNJB3pkh9DhneB+
FdpNvp/RYjTv7qD8hvPDPREkcD5TJhCg9GB6bOfQZpGAYEUoS3flRH6vwhru/+3N
Oog2RKSSXvrk4U4vH4MSHbdfquXuifD+WqMC+PuUaWUCHUkL0i5Th9XUkcfP0x0A
X6nes6OKmCaaGek2oTdS5BGY89MsIvZfmg9qB/BHoFFiO8+HGoMQ
-----END CERTIFICATE-----
Generated at Wed Sep 11 06:08:41 2024 by rpki-client on console.sobornost.net