Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/t_LEeJplrPj8V7Negn3gHLi69W8.roa
File: t_LEeJplrPj8V7Negn3gHLi69W8.roa (raw, json)
Hash identifier: 0r/vV3BwVUwvB+sfm4ZqSADzfb2YJ3DFNbOoV0QVJuk=
Subject key identifier: B7:F2:C4:78:9A:65:AC:F8:FC:57:B3:5E:82:7D:E0:1C:B8:BA:F5:6F
Certificate issuer: /CN=c07804766b2353985b9718088b5c679e0c3ea67f
Certificate serial: 0193D9E9B05FA9EC826AF607D36510FB712D
Authority key identifier: C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/t_LEeJplrPj8V7Negn3gHLi69W8.roa
Signing time: Wed 18 Dec 2024 13:16:31 +0000
ROA not before: Wed 18 Dec 2024 13:16:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58059
IP address blocks: 185.154.128.0/24 maxlen: 24
185.154.129.0/24 maxlen: 24
185.154.130.0/24 maxlen: 24
185.154.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:e9:b0:5f:a9:ec:82:6a:f6:07:d3:65:10:fb:71:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07804766b2353985b9718088b5c679e0c3ea67f
Validity
Not Before: Dec 18 13:16:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7f2c4789a65acf8fc57b35e827de01cb8baf56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:0c:4a:4b:9f:48:b5:d9:16:56:9f:ec:4f:
4c:4f:f6:a9:0e:1a:9c:96:40:9a:ff:9a:e7:df:50:
c7:4d:2b:48:e2:be:e4:55:31:86:ab:62:87:e5:fa:
f8:62:a2:b7:93:3a:48:e2:3b:4c:b2:da:90:be:e7:
f9:06:5e:a6:cd:23:56:9c:7f:5b:da:f3:57:7d:17:
f6:df:07:85:45:7d:76:36:78:a8:cc:a2:62:91:86:
16:5e:ab:08:35:55:7c:30:bb:65:55:fb:8f:a2:60:
36:d6:51:f9:9d:b9:96:d2:d1:a7:d4:43:9e:72:3e:
fa:1b:d4:25:e5:3a:29:0b:c9:72:13:18:5d:27:a4:
c3:8f:5d:57:2b:c5:fe:07:fd:77:66:d8:82:c5:25:
e2:e4:65:a8:f5:a7:2e:2e:a3:08:65:7b:44:e0:09:
4d:86:a8:6d:c4:6b:fe:22:7b:92:6e:1c:29:f0:d4:
c1:6b:df:91:cf:48:07:6e:29:50:07:cb:6f:3e:61:
8b:5c:35:b0:8b:36:0e:1d:b5:72:e0:d3:fa:64:12:
a7:c1:bb:1d:38:ed:9c:99:f4:8e:8e:60:94:cb:7d:
68:1c:0d:29:3f:21:bf:bb:07:68:db:1c:8f:6f:8e:
39:ab:f3:51:b6:c7:5a:bb:c0:6b:75:1d:83:12:88:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F2:C4:78:9A:65:AC:F8:FC:57:B3:5E:82:7D:E0:1C:B8:BA:F5:6F
X509v3 Authority Key Identifier:
keyid:C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/t_LEeJplrPj8V7Negn3gHLi69W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.128.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:df:82:8f:ef:1f:87:52:78:55:65:0c:05:bf:64:9c:87:ad:
d4:c3:37:ee:00:77:b6:0f:89:58:3e:2c:3f:28:0e:c3:13:35:
d9:c8:26:71:f6:63:0f:fa:92:22:cb:0e:97:a7:cd:25:c8:c1:
82:1a:7b:4f:93:11:fc:b2:65:a7:83:58:9d:87:7f:da:15:45:
9f:33:42:e4:cf:fb:67:bc:bc:e8:24:aa:d5:aa:3c:67:4b:57:
db:c6:4d:cc:eb:e4:52:5d:56:e0:67:95:92:9f:90:f1:cf:88:
41:ac:6a:e1:fc:b7:f7:d5:c0:4c:f0:63:f6:60:f4:12:c5:bd:
de:bc:c6:54:9d:21:c7:7e:86:c7:c0:a6:19:da:af:87:17:7c:
46:eb:1e:a5:69:d4:ec:23:96:92:5a:3a:f1:3d:ab:df:4c:58:
f2:d9:a4:de:32:99:21:50:37:d0:1f:bb:14:f0:1b:79:04:50:
a3:a0:37:ff:30:da:80:7b:b8:74:3e:f9:30:f9:31:69:10:dc:
9a:2f:24:a9:1f:2f:c3:c7:bb:30:5d:56:0e:b2:b8:bf:f5:30:
a2:b9:16:56:1f:ca:a6:d3:8e:72:2b:86:bd:2e:6b:55:ec:61:
bd:f2:e4:12:24:08:c3:bb:f1:c6:f7:80:4c:1e:e3:a4:b7:2c:
03:70:8e:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPZ6bBfqeyCavYH02UQ+3EtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNzgwNDc2NmIyMzUzOTg1Yjk3MTgwODhiNWM2NzllMGMz
ZWE2N2YwHhcNMjQxMjE4MTMxNjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2YyYzQ3ODlhNjVhY2Y4ZmM1N2IzNWU4MjdkZTAxY2I4YmFmNTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M0MSkufSLXZFlaf7E9MT/apDhqc
lkCa/5rn31DHTStI4r7kVTGGq2KH5fr4YqK3kzpI4jtMstqQvuf5Bl6mzSNWnH9b
2vNXfRf23weFRX12NniozKJikYYWXqsINVV8MLtlVfuPomA21lH5nbmW0tGn1EOe
cj76G9Ql5TopC8lyExhdJ6TDj11XK8X+B/13ZtiCxSXi5GWo9acuLqMIZXtE4AlN
hqhtxGv+InuSbhwp8NTBa9+Rz0gHbilQB8tvPmGLXDWwizYOHbVy4NP6ZBKnwbsd
OO2cmfSOjmCUy31oHA0pPyG/uwdo2xyPb445q/NRtsdau8BrdR2DEoij4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLfyxHiaZaz4/FezXoJ94By4uvVvMB8GA1UdIwQY
MBaAFMB4BHZrI1OYW5cYCItcZ54MPqZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0hnRWRtc2pVNWhibHhnSWkxeG5uZ3ctcG44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMjU2MGYtMWM0Yy00Y2EzLWE2M2It
MzA0ZmExODg5OGJmLzEvdF9MRWVKcGxyUGo4VjdOZWduM2dITGk2OVc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMjU2MGYtMWM0Yy00Y2EzLWE2M2ItMzA0ZmExODg5OGJm
LzEvd0hnRWRtc2pVNWhibHhnSWkxeG5uZ3ctcG44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZqAMA0G
CSqGSIb3DQEBCwUAA4IBAQCk34KP7x+HUnhVZQwFv2Sch63UwzfuAHe2D4lYPiw/
KA7DEzXZyCZx9mMP+pIiyw6Xp80lyMGCGntPkxH8smWng1idh3/aFUWfM0Lkz/tn
vLzoJKrVqjxnS1fbxk3M6+RSXVbgZ5WSn5Dxz4hBrGrh/Lf31cBM8GP2YPQSxb3e
vMZUnSHHfobHwKYZ2q+HF3xG6x6ladTsI5aSWjrxPavfTFjy2aTeMpkhUDfQH7sU
8Bt5BFCjoDf/MNqAe7h0Pvkw+TFpENyaLySpHy/Dx7swXVYOsri/9TCiuRZWH8qm
045yK4a9LmtV7GG98uQSJAjDu/HG94BMHuOktywDcI6L
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:08 2024 by rpki-client on console.sobornost.net