Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/zDCL0Urbl8M4mPXFTXYLgALDDkQ.roa
File: zDCL0Urbl8M4mPXFTXYLgALDDkQ.roa (raw, json)
Hash identifier: 7MIIvEkBpR/VNvLWlrMhKH+RcDrTphxI3SJASmBAgms=
Subject key identifier: CC:30:8B:D1:4A:DB:97:C3:38:98:F5:C5:4D:76:0B:80:02:C3:0E:44
Certificate issuer: /CN=9a73ba8f7d987bd186dbd647eaee9620030974d7
Certificate serial: 04B7898E
Authority key identifier: 9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/zDCL0Urbl8M4mPXFTXYLgALDDkQ.roa
Signing time: Sat 01 Jan 2022 04:53:47 +0000
ROA not before: Sat 01 Jan 2022 04:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51487
IP address blocks: 185.138.93.0/24 maxlen: 24
185.138.92.0/24 maxlen: 24
185.138.95.0/24 maxlen: 24
185.138.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79137166 (0x4b7898e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a73ba8f7d987bd186dbd647eaee9620030974d7
Validity
Not Before: Jan 1 04:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc308bd14adb97c33898f5c54d760b8002c30e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:9e:2f:60:c5:e8:f8:70:3e:73:66:aa:45:
02:dc:13:72:67:e2:af:9a:f9:c3:68:52:90:89:d0:
4c:58:1e:e6:60:0c:fe:41:bd:e0:f1:8e:0d:fe:ce:
e2:09:3f:99:ea:d8:c2:73:1f:a4:73:a7:0c:f8:4b:
1e:56:28:2a:3f:1c:ae:60:28:19:e2:ba:8d:49:a1:
a2:46:74:4c:40:e6:58:d1:6c:47:9f:cb:ac:e0:09:
4e:25:e2:ff:3b:02:b1:25:7d:d9:65:dc:d5:5b:e3:
a4:3f:01:6a:ba:50:a1:14:dd:2a:5d:ff:3a:79:40:
5b:85:c2:ab:c5:1a:19:5b:fd:8c:b8:25:d3:42:59:
f4:cd:ed:b2:06:c6:98:c9:48:fd:0b:e2:4d:ee:0a:
a0:02:84:a9:82:bc:ec:cc:64:47:17:c7:20:bc:b7:
7e:3c:f5:dc:f9:7b:42:01:a2:83:e1:aa:91:c5:7b:
8a:9e:dd:8b:16:4e:6c:57:b2:17:92:0c:d8:66:55:
d4:2c:71:df:8f:12:90:6c:16:08:55:dd:3f:90:f9:
18:96:a0:99:4b:88:a3:92:1b:50:93:11:24:82:db:
10:33:6b:d6:bd:89:86:b5:e6:0d:93:9b:02:47:74:
cb:31:77:a4:6d:f4:8c:21:41:1b:ef:f2:8a:6e:93:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:8B:D1:4A:DB:97:C3:38:98:F5:C5:4D:76:0B:80:02:C3:0E:44
X509v3 Authority Key Identifier:
keyid:9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/zDCL0Urbl8M4mPXFTXYLgALDDkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/mnO6j32Ye9GG29ZH6u6WIAMJdNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.92.0/22
Signature Algorithm: sha256WithRSAEncryption
79:23:1e:bd:2a:fb:82:37:f3:86:e0:20:02:08:c5:82:44:97:
ce:fd:be:b7:08:3d:80:00:80:91:d6:f1:94:a8:3e:65:5b:b1:
19:bd:ab:15:6a:0a:2d:bc:aa:b1:1c:1d:f8:69:62:08:ee:ab:
d9:cc:21:36:40:a0:7a:87:7c:dc:a0:a2:50:1e:fe:87:11:6c:
96:0a:3a:69:1e:80:04:0d:a7:be:2b:5f:ba:dd:ec:71:7b:ba:
94:b5:f5:22:0e:98:08:c6:7e:32:76:0d:ab:23:20:65:02:de:
40:4d:83:72:db:40:b9:33:53:89:a3:8a:31:1e:1f:83:0e:73:
fb:21:b1:93:bf:2b:8b:e4:67:c7:f0:9c:32:bf:dc:f1:6d:ad:
98:55:95:64:b1:76:70:a1:bf:9e:26:17:cf:2d:5f:2f:85:e8:
99:f2:a6:f5:51:5b:0a:1e:e1:a6:97:51:f8:f3:25:88:34:86:
9a:9d:e6:f6:65:52:ca:c9:0d:21:8b:f0:e5:28:42:95:1b:72:
99:51:4c:d9:1c:71:e4:17:cf:14:e8:77:b8:ac:1a:2e:76:b8:
d4:46:78:36:a2:ba:23:e7:11:b1:0c:b2:8a:55:d0:a6:e9:64:
50:8d:5a:61:86:e8:54:6f:2f:55:cc:c6:88:6b:f1:d6:a8:88:
1d:10:f2:88
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBLeJjjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YTczYmE4ZjdkOTg3YmQxODZkYmQ2NDdlYWVlOTYyMDAzMDk3NGQ3MB4XDTIyMDEw
MTA0NTM0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2MzMDhiZDE0YWRi
OTdjMzM4OThmNWM1NGQ3NjBiODAwMmMzMGU0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANCdni9gxej4cD5zZqpFAtwTcmfir5r5w2hSkInQTFge5mAM
/kG94PGODf7O4gk/merYwnMfpHOnDPhLHlYoKj8crmAoGeK6jUmhokZ0TEDmWNFs
R5/LrOAJTiXi/zsCsSV92WXc1VvjpD8BarpQoRTdKl3/OnlAW4XCq8UaGVv9jLgl
00JZ9M3tsgbGmMlI/QviTe4KoAKEqYK87MxkRxfHILy3fjz13Pl7QgGig+GqkcV7
ip7dixZObFeyF5IM2GZV1Cxx348SkGwWCFXdP5D5GJagmUuIo5IbUJMRJILbEDNr
1r2JhrXmDZObAkd0yzF3pG30jCFBG+/yim6TSTcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTMMIvRStuXwziY9cVNdguAAsMORDAfBgNVHSMEGDAWgBSac7qPfZh70Ybb
1kfq7pYgAwl01zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21uTzZqMzJZZTlHRzI5Wkg2dTZXSUFNSmROYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvYjUyN2NkLTQ3MjEtNGM5NC1iZjA4LTdmZjY5YzgzOGViNi8x
L3pEQ0wwVXJibDhNNG1QWEZUWFlMZ0FMRERrUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
YjUyN2NkLTQ3MjEtNGM5NC1iZjA4LTdmZjY5YzgzOGViNi8xL21uTzZqMzJZZTlH
RzI5Wkg2dTZXSUFNSmROYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmKXDANBgkqhkiG9w0BAQsFAAOC
AQEAeSMevSr7gjfzhuAgAgjFgkSXzv2+twg9gACAkdbxlKg+ZVuxGb2rFWoKLbyq
sRwd+GliCO6r2cwhNkCgeod83KCiUB7+hxFslgo6aR6ABA2nvitfut3scXu6lLX1
Ig6YCMZ+MnYNqyMgZQLeQE2DcttAuTNTiaOKMR4fgw5z+yGxk78ri+Rnx/CcMr/c
8W2tmFWVZLF2cKG/niYXzy1fL4XomfKm9VFbCh7hppdR+PMliDSGmp3m9mVSyskN
IYvw5ShClRtymVFM2Rxx5BfPFOh3uKwaLna41EZ4NqK6I+cRsQyyilXQpulkUI1a
YYboVG8vVczGiGvx1qiIHRDyiA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net