Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/U1DYy6n7RAPuCPqGlrJOe-OJr3E.roa
File: U1DYy6n7RAPuCPqGlrJOe-OJr3E.roa (raw, json)
Hash identifier: xDUWMNy0bpPJFVPQyHt9GRjkrBanhPADHFk9UyTBNfg=
Subject key identifier: 53:50:D8:CB:A9:FB:44:03:EE:08:FA:86:96:B2:4E:7B:E3:89:AF:71
Certificate issuer: /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial: 01856FF02255A0B2335962C6C49C7BF3BA7C
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/U1DYy6n7RAPuCPqGlrJOe-OJr3E.roa
Signing time: Mon 02 Jan 2023 00:44:46 +0000
ROA not before: Mon 02 Jan 2023 00:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60064
IP address blocks: 185.102.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:22:55:a0:b2:33:59:62:c6:c4:9c:7b:f3:ba:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Validity
Not Before: Jan 2 00:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5350d8cba9fb4403ee08fa8696b24e7be389af71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:97:b6:53:00:a7:79:a9:25:20:3a:48:2e:
8b:6b:da:87:e1:5a:24:7c:46:9e:c1:c3:81:0b:31:
2d:a9:cb:45:87:15:a7:45:27:16:10:27:4e:1f:99:
d3:b1:79:2c:c5:08:eb:5b:f8:e6:5b:b7:4e:5c:88:
f6:c3:1b:4e:3b:c9:1b:3e:8e:fc:83:80:cd:99:f4:
8a:93:d9:3d:a1:46:64:d6:12:1e:b3:ee:2c:cd:2d:
e1:ca:d8:be:dd:32:0d:43:cd:a8:c5:a1:5e:47:5c:
8b:01:40:44:c5:5f:25:d6:74:f5:02:51:41:9e:7c:
28:70:0c:db:e1:70:6a:64:01:be:35:47:27:7f:c1:
82:2f:2c:9e:23:30:2d:ad:54:a1:ef:87:af:77:59:
28:be:18:5d:4c:c0:bd:8f:88:ce:b8:d4:c7:06:cf:
7a:65:1f:ed:38:42:f4:31:c2:1b:2c:ed:77:3d:ec:
7f:e9:dd:81:5b:fe:79:86:7e:9b:d8:f9:64:21:e9:
7e:82:92:c4:00:49:8e:9d:ce:1a:16:50:83:5c:18:
e6:a9:a1:3e:54:41:3f:0c:c5:be:27:43:0d:34:99:
ce:63:c6:b0:92:f6:a5:4f:63:72:46:4f:da:11:4d:
cf:f0:fc:f2:98:c2:2b:79:76:35:32:90:c8:c5:75:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:50:D8:CB:A9:FB:44:03:EE:08:FA:86:96:B2:4E:7B:E3:89:AF:71
X509v3 Authority Key Identifier:
keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/U1DYy6n7RAPuCPqGlrJOe-OJr3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.170.0/24
Signature Algorithm: sha256WithRSAEncryption
12:46:e3:f2:f2:b5:5d:95:2c:07:8c:d4:a2:cf:81:f3:fc:f4:
b0:31:80:f2:4f:da:73:0d:87:e3:60:36:e8:04:bd:71:3c:1c:
c9:33:99:cb:95:d6:98:d9:de:41:68:48:fc:61:6f:dd:25:19:
69:c2:85:43:20:05:97:57:1c:76:b4:f8:29:41:37:1d:e4:b2:
ce:8c:6f:c9:6a:5d:5d:04:1f:b4:28:e4:14:d2:e7:0b:4f:ee:
e7:b7:da:09:cc:c3:80:18:7d:99:73:ac:2c:8c:ef:73:42:d3:
40:c5:91:a4:b8:c1:cd:38:2b:44:01:9d:64:43:9e:5d:16:d3:
40:51:1c:cf:44:dc:92:42:5d:52:bf:ca:dc:09:4a:47:0b:44:
bf:23:be:1c:b0:50:5e:66:3d:39:02:71:eb:8d:c8:f2:66:cb:
9d:cf:23:6b:9e:af:6e:a4:0e:30:6c:9a:f3:99:7a:e0:44:7e:
ef:58:cd:45:ac:ba:76:28:12:2b:62:43:f7:89:de:6f:f1:8a:
fc:47:4e:b1:91:03:22:49:34:ab:ec:d6:6d:f0:46:5d:08:d8:
20:0f:fc:15:6f:b5:c7:e1:a4:91:11:d1:ae:9e:30:5b:92:cc:
54:87:4f:d0:f5:8e:76:29:a2:ba:68:d2:cc:71:0d:55:1b:fc:
ed:c2:13:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:02 2025 by rpki-client