Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/hPuz1D2HnYM1gjvzUAzDpFOze7s.roa
File: hPuz1D2HnYM1gjvzUAzDpFOze7s.roa (raw, json)
Hash identifier: oix9IB3rVFu+E2V+cybf3TimyZBF2VdcpVVdBtPzrxQ=
Subject key identifier: 84:FB:B3:D4:3D:87:9D:83:35:82:3B:F3:50:0C:C3:A4:53:B3:7B:BB
Certificate issuer: /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial: 01856FF0242BCF7C56E580C6DCB029BCF464
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/hPuz1D2HnYM1gjvzUAzDpFOze7s.roa
Signing time: Mon 02 Jan 2023 00:44:46 +0000
ROA not before: Mon 02 Jan 2023 00:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211043
IP address blocks: 185.102.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:24:2b:cf:7c:56:e5:80:c6:dc:b0:29:bc:f4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Validity
Not Before: Jan 2 00:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84fbb3d43d879d8335823bf3500cc3a453b37bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:13:92:f2:80:64:47:b5:18:b5:06:c9:b4:
d9:86:b9:13:62:0d:7b:4f:e1:2b:b3:da:fe:36:ac:
55:a6:50:52:27:23:2b:ab:37:95:28:ce:3c:62:b6:
df:ef:af:85:1b:9e:39:9a:ce:82:aa:f1:dc:7e:57:
72:a0:ec:ba:35:84:82:1f:0b:0f:1e:58:b5:93:65:
97:11:f1:bc:18:b6:a7:f2:e4:20:0c:a0:40:56:cf:
cf:0d:8a:22:58:bc:9d:1d:a8:92:d6:3c:37:ff:3c:
0a:af:6b:8f:e6:20:eb:e7:7a:93:e1:e9:45:1d:28:
5b:7f:1b:89:16:04:af:18:18:9c:39:a4:7d:53:ee:
18:45:dd:8e:0b:77:db:2f:b4:70:a6:6b:ed:fe:38:
3f:15:3d:96:e8:fb:31:03:c4:3c:de:c8:88:81:e7:
75:d6:2b:de:db:1a:0e:45:aa:6e:48:35:c0:59:0a:
5c:8f:7d:ec:d2:16:92:f1:1e:eb:65:f9:a0:20:b2:
89:80:79:af:84:15:cf:f3:bd:04:de:67:63:bf:e2:
d8:2a:fd:26:82:af:a5:8d:ba:7c:44:b5:c6:b9:40:
1e:e5:1b:5b:a6:76:f2:5a:b2:7f:a7:ce:49:e9:c4:
d6:4e:b4:c8:b3:96:2e:1b:a8:b6:77:7c:e0:40:e2:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FB:B3:D4:3D:87:9D:83:35:82:3B:F3:50:0C:C3:A4:53:B3:7B:BB
X509v3 Authority Key Identifier:
keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/hPuz1D2HnYM1gjvzUAzDpFOze7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a8:ac:f9:0d:cf:5a:a1:aa:dd:0e:7a:5d:7d:70:61:f6:b1:
13:74:d2:1e:5a:ba:92:f1:3b:64:d5:d8:3e:00:c9:34:50:3b:
ae:22:07:ed:71:8e:4f:8e:c0:0b:ff:8c:7f:78:71:88:3d:88:
4d:e6:ea:8d:57:71:35:09:35:3a:79:f3:08:dd:3e:ab:31:ae:
9a:b3:b9:d7:cc:53:59:11:14:cd:82:a1:cb:0b:39:26:43:1d:
74:80:63:67:2e:1f:4c:d6:d6:39:03:8e:2c:9d:7b:68:a6:00:
e2:62:4f:38:65:a9:98:44:7b:5b:0c:9c:46:02:b0:56:7f:7b:
47:d5:bd:3b:3a:c9:29:0b:12:6f:04:84:8a:64:46:f7:52:bf:
3c:a7:9e:41:f2:8f:06:96:8d:0e:44:20:6b:f9:7d:77:08:21:
13:b7:b3:cb:b0:a0:db:f9:25:12:b6:e3:bc:2c:25:a1:13:c7:
ee:00:6d:3b:4e:52:4b:9f:4a:bc:5e:dc:ac:0b:6e:8a:75:b2:
8b:f6:03:ac:b1:37:d5:89:6c:c3:e0:ad:26:cb:fa:9c:47:bb:
0a:c9:ae:a2:df:f9:0d:18:f9:15:a4:ea:f4:cd:ed:b9:2e:42:
a5:ae:6a:5f:7c:31:aa:c8:5b:8a:8f:51:f6:bb:fd:72:fc:9b:
a5:57:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:04:05 2025 by rpki-client