Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/w9FsirNz5QW3GwJEsaLC0DN8J6Q.roa
File: w9FsirNz5QW3GwJEsaLC0DN8J6Q.roa (raw, json)
Hash identifier: MeqDo09DkO+5Ot7eRMT97C1mLYuHnACnfeIbXgwX4XU=
Subject key identifier: C3:D1:6C:8A:B3:73:E5:05:B7:1B:02:44:B1:A2:C2:D0:33:7C:27:A4
Certificate issuer: /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial: 0185362BFE1BA214AE3C41EDF6F03FA34DA9
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/w9FsirNz5QW3GwJEsaLC0DN8J6Q.roa
Signing time: Wed 21 Dec 2022 19:32:10 +0000
ROA not before: Wed 21 Dec 2022 19:32:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8038
IP address blocks: 185.102.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:2b:fe:1b:a2:14:ae:3c:41:ed:f6:f0:3f:a3:4d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Validity
Not Before: Dec 21 19:32:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3d16c8ab373e505b71b0244b1a2c2d0337c27a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:1d:20:84:29:70:cb:66:43:0e:49:3d:ab:
b3:69:95:1a:39:ef:a9:a7:61:da:9b:3b:1c:cc:de:
ed:39:cb:5f:b3:3c:f6:b7:6f:9f:ba:de:7f:4a:d7:
ce:f6:8c:e7:9f:0c:cd:86:8b:33:dc:7c:0b:1b:ab:
a1:7c:40:b6:ed:1f:0f:40:bd:08:74:57:50:24:7b:
6d:50:a3:5d:b6:08:0a:2a:0d:f9:9a:5e:13:28:a0:
20:19:cb:89:34:72:92:60:62:82:d1:9b:00:80:ce:
f4:7f:5c:45:30:24:7c:a2:6c:61:bb:7d:18:05:b2:
dc:67:ab:0c:54:22:37:be:db:fd:85:6f:0d:12:d3:
1f:34:b1:77:57:02:f5:d2:b2:9c:a2:ef:d0:13:45:
09:97:c3:18:56:2c:ee:5c:bf:2b:f8:d2:f4:4a:9d:
7d:9b:7d:db:86:69:96:96:38:6b:a4:6d:33:38:55:
c8:78:3e:32:4e:75:0a:1f:2d:2f:29:16:dc:46:ea:
d5:1b:a1:c1:eb:e8:c0:0c:be:cb:a2:92:84:5c:8b:
6c:75:9c:b4:f6:57:2e:68:85:dc:f2:03:7a:98:b1:
2e:3b:e3:8c:20:d1:58:36:16:eb:3f:4f:45:ef:45:
d8:f6:bd:0c:b0:4e:39:50:2e:ca:b3:39:b4:67:20:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D1:6C:8A:B3:73:E5:05:B7:1B:02:44:B1:A2:C2:D0:33:7C:27:A4
X509v3 Authority Key Identifier:
keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/w9FsirNz5QW3GwJEsaLC0DN8J6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ec:e6:e3:74:27:18:69:86:4a:4d:b0:de:11:9e:9d:e2:40:
aa:18:c3:ea:f2:40:c6:08:5e:29:a1:f1:e7:f2:e4:24:10:0c:
5d:b4:29:2b:22:4e:b2:72:ff:8c:9e:a9:85:54:6f:33:cb:1c:
6e:f4:ad:03:3b:c1:5e:6b:4f:f3:66:3a:d8:17:65:1b:55:d5:
58:5c:a3:0f:91:73:e9:a4:5a:62:44:46:9f:da:ea:7a:df:df:
6d:7f:c5:23:15:85:a5:6f:7e:bb:a7:79:f0:9f:f0:6b:90:ab:
77:70:f8:84:f5:51:eb:61:a5:af:80:85:29:c9:b6:67:ab:da:
ca:a2:01:0b:02:8f:2f:66:b8:fc:87:73:a2:45:f8:bf:b3:a3:
60:bb:a2:be:d5:ec:4e:b1:0d:b4:b1:fe:38:33:7a:65:5b:12:
a8:e1:ce:ce:92:d5:d0:54:9f:ee:4c:62:aa:c6:19:ab:81:3d:
5f:ef:77:d9:ab:b5:74:4d:24:55:dc:a1:12:23:78:01:e4:7e:
e6:5b:47:aa:89:86:5d:f8:dc:70:c5:90:dc:52:b3:6c:a0:1d:
89:1a:0a:96:01:f9:e3:fa:41:b2:75:7a:40:00:da:db:4d:04:
d0:e4:5b:0e:e3:02:e0:74:e7:18:db:e5:82:4f:69:9f:de:1d:
a6:95:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:53 2025 by rpki-client