Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/pR6Z9Pa2I-I17z0-qFrXzAeidM8.roa
File: pR6Z9Pa2I-I17z0-qFrXzAeidM8.roa (raw, json)
Hash identifier: MHjlNX9NqiUaCjOpByszu+IS2cOPhS98fiMryiwSBRU=
Subject key identifier: A5:1E:99:F4:F6:B6:23:E2:35:EF:3D:3E:A8:5A:D7:CC:07:A2:74:CF
Certificate issuer: /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial: 01856FF02057EFE6C69DC0C74735C94184AF
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/pR6Z9Pa2I-I17z0-qFrXzAeidM8.roa
Signing time: Mon 02 Jan 2023 00:44:45 +0000
ROA not before: Mon 02 Jan 2023 00:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8038
IP address blocks: 185.102.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:20:57:ef:e6:c6:9d:c0:c7:47:35:c9:41:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Validity
Not Before: Jan 2 00:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a51e99f4f6b623e235ef3d3ea85ad7cc07a274cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:2f:3b:32:58:02:93:e6:2e:9a:8c:07:e8:
21:d4:4e:88:9c:65:1c:85:d9:c8:9c:52:5d:ee:aa:
8e:47:c9:38:d4:36:f8:65:2d:f4:00:cb:b1:b0:a0:
04:c5:05:6d:20:78:be:e1:30:7e:45:48:06:c9:bf:
75:81:83:e8:2d:56:57:49:04:d2:61:d8:f8:1d:b7:
fe:97:c9:93:3f:50:0b:a9:6b:83:4a:ce:74:8d:66:
ef:bf:20:de:7e:a1:0f:4d:9d:27:c6:25:08:03:e3:
61:f7:d7:02:a6:30:93:14:ab:49:62:9f:51:32:67:
7d:a7:82:92:c5:21:e4:33:e1:7f:be:ed:8a:e7:17:
22:07:06:e8:d8:53:f7:99:72:31:4b:a4:8c:3e:77:
91:c8:25:74:14:f0:5e:92:d7:f3:d1:11:96:e9:93:
78:bb:31:ca:24:2a:84:fc:53:44:a8:90:b3:cb:0e:
db:38:78:54:02:48:5f:a8:54:1e:36:a4:90:69:ad:
38:c1:b2:e6:b5:9c:53:a5:ba:a4:c2:32:0b:47:e2:
5c:70:b8:80:25:5d:cc:d0:62:92:4c:8d:43:7f:95:
6b:45:e8:de:7e:09:3f:1b:d2:69:a2:1d:85:e3:c2:
76:6c:40:46:35:53:78:73:82:e8:ab:09:4d:a1:c6:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1E:99:F4:F6:B6:23:E2:35:EF:3D:3E:A8:5A:D7:CC:07:A2:74:CF
X509v3 Authority Key Identifier:
keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/pR6Z9Pa2I-I17z0-qFrXzAeidM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:90:99:f2:62:15:2a:7f:38:ce:30:00:84:47:e7:13:a3:2d:
59:73:f6:3e:78:6e:50:cb:78:d3:0d:d2:d5:4a:c0:fc:4c:98:
de:ad:04:74:2d:cd:5f:00:9e:3f:65:08:21:27:e5:93:47:e7:
71:a2:ee:f9:74:7e:fd:39:3a:56:55:2d:59:8a:ba:50:71:64:
6e:f5:08:13:d3:df:0b:eb:6f:a5:b9:93:ff:04:2b:5f:0c:bd:
38:69:5d:c8:fb:ed:f2:a6:8d:e7:95:17:19:c4:9e:d7:10:41:
7b:eb:36:df:16:4b:93:ba:ca:77:12:7f:1b:ea:a7:c8:f3:18:
de:ce:1b:26:85:90:8c:06:53:01:bc:0f:ec:b0:a6:38:d3:35:
ae:77:99:d0:a0:12:cb:ca:6c:81:30:40:b7:98:1b:fd:aa:4b:
56:61:bc:d5:07:e0:7b:d1:21:3e:46:c5:e1:29:6b:11:a8:5b:
f4:2b:75:62:c0:d5:6b:96:34:e5:c3:4b:6e:d9:10:1f:ef:8b:
e5:98:fd:ab:90:bd:dd:36:c8:08:ca:5f:72:19:ff:1d:74:0d:
08:d7:b6:76:f4:46:37:ea:e2:6c:58:a8:67:90:0d:c4:a7:1d:
3f:1c:36:86:9f:e0:b5:9d:ef:5f:36:50:4e:ea:ee:3c:ef:30:
92:0f:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:04 2025 by rpki-client