Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/C7tu8ZOtkjYciV5CI0WYSn80A-U.roa
File: C7tu8ZOtkjYciV5CI0WYSn80A-U.roa (raw, json)
Hash identifier: PEvBAsRcz/L6NnP8CFPRNtj/y6m476pW4BnilJVb/pY=
Subject key identifier: 0B:BB:6E:F1:93:AD:92:36:1C:89:5E:42:23:45:98:4A:7F:34:03:E5
Certificate issuer: /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial: 018571D7C6A4364109FE1F02C4085DE0DC61
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/C7tu8ZOtkjYciV5CI0WYSn80A-U.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136038
IP address blocks: 185.202.103.0/24 maxlen: 24
185.202.102.0/24 maxlen: 24
185.202.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c6:a4:36:41:09:fe:1f:02:c4:08:5d:e0:dc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bbb6ef193ad92361c895e422345984a7f3403e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:4e:4c:28:6f:0b:a5:34:04:df:d2:6c:92:
61:15:d8:b0:d8:c2:f1:ce:9d:87:5f:a0:f9:8f:09:
ce:e5:36:ad:7c:ce:57:df:6b:19:00:d7:a1:e4:c5:
41:26:08:c2:b0:c0:6c:23:b2:2e:2f:07:ff:bc:10:
75:f9:62:2f:6c:f7:96:e7:b8:6b:e2:cb:db:42:99:
47:a0:0b:78:fd:c2:12:40:c0:71:ef:5f:5a:76:a1:
85:54:19:68:2a:a1:5f:ff:cf:30:7b:a2:ce:22:1a:
ec:ac:c8:ac:64:14:2b:d4:7c:a3:e8:e5:2f:d0:c9:
c7:f8:d9:b0:28:d8:70:16:be:87:a9:10:40:d2:a4:
6c:b7:51:cd:5c:58:8b:fc:d1:7f:b8:cf:2c:74:f4:
ce:98:dd:6a:1c:0f:54:6c:8e:c2:84:0a:69:40:b1:
16:98:c0:c1:6c:ce:09:19:f0:f4:58:5a:d7:85:28:
40:2c:6d:22:57:a5:85:d3:e4:78:a0:f3:60:42:ab:
62:ca:2e:da:6c:3e:4a:1c:04:dc:e2:18:57:34:d5:
76:76:c6:87:19:08:f8:c7:6c:63:59:74:95:d4:f3:
97:05:84:e3:6c:ac:1b:fc:1b:1a:42:aa:20:34:21:
9b:5c:41:fc:f9:e0:c1:75:46:ce:d1:e5:7d:62:78:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:6E:F1:93:AD:92:36:1C:89:5E:42:23:45:98:4A:7F:34:03:E5
X509v3 Authority Key Identifier:
keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/C7tu8ZOtkjYciV5CI0WYSn80A-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.101.0-185.202.103.255
Signature Algorithm: sha256WithRSAEncryption
9b:19:61:bd:7e:bc:62:33:86:dc:9a:1a:bb:3b:35:7d:b5:4d:
cd:40:1b:d9:82:58:8a:31:cb:e6:12:0e:84:c9:bd:8f:c8:f6:
08:4c:4d:35:b3:4a:3c:01:61:c0:db:3c:69:ef:07:ae:67:04:
42:dd:1a:94:a4:06:c5:02:ac:6c:58:84:ed:f8:1d:0f:c7:af:
35:61:89:b3:e4:14:2b:5f:a0:52:5c:be:eb:72:17:9b:c3:9b:
6b:0a:87:0f:4e:b4:d4:b7:52:c3:c9:fb:0e:60:96:15:47:3f:
26:9c:71:e1:45:40:2a:90:3c:2c:e5:f4:67:b9:70:be:74:cc:
fb:f2:40:3e:a2:9c:b1:d2:f8:5b:d0:90:21:85:37:9a:f1:83:
25:93:33:f5:13:2c:d0:5f:ca:eb:b1:52:13:17:86:6f:9c:f3:
2d:67:5d:9a:2f:e0:39:59:fa:7f:60:94:61:a9:e2:0e:ed:82:
1e:95:e6:58:a9:b9:ba:d6:06:dd:fd:4c:3b:ee:61:62:ee:05:
e1:da:0d:d8:25:83:e8:1a:2c:0d:16:2d:af:37:3b:21:29:9c:
67:ab:57:a4:04:80:9f:ae:07:11:e0:65:9d:49:e0:a2:99:38:
aa:49:5f:7e:06:5f:16:45:b0:0d:0c:e3:58:00:17:d7:7a:9f:
ad:4d:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org