Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/CNwr7ZB0dEijDubC_wbSLWhyOOM.roa
File: CNwr7ZB0dEijDubC_wbSLWhyOOM.roa (raw, json)
Hash identifier: xN/+E5ssc+vyE411P1Su72J02RiiZPIn172P0l1aMgk=
Subject key identifier: 08:DC:2B:ED:90:74:74:48:A3:0E:E6:C2:FF:06:D2:2D:68:72:38:E3
Certificate issuer: /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial: 0419E2BB
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/CNwr7ZB0dEijDubC_wbSLWhyOOM.roa
Signing time: Fri 21 Jan 2022 14:07:36 +0000
ROA not before: Fri 21 Jan 2022 14:07:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136526
IP address blocks: 185.202.100.0/24 maxlen: 24
185.202.103.0/24 maxlen: 24
185.202.102.0/24 maxlen: 24
185.202.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68805307 (0x419e2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Validity
Not Before: Jan 21 14:07:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08dc2bed90747448a30ee6c2ff06d22d687238e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:e2:bd:8a:93:a0:30:1c:4d:ca:48:6f:b7:
2e:1c:ce:99:04:64:2b:b1:1e:1a:b9:32:9a:60:3e:
27:a7:eb:5d:3f:01:d7:a5:30:7c:45:0e:ee:2a:52:
cd:45:44:12:cb:d2:70:7b:f6:ab:e4:07:39:41:47:
8d:22:ec:0f:8a:5e:07:74:6c:2f:72:b0:f5:52:76:
eb:bb:40:5e:2a:7f:76:25:87:11:fd:d7:c5:73:fa:
f9:c8:80:3a:ab:85:e7:75:d8:fe:08:60:fa:02:77:
90:9a:cd:30:2b:03:27:7e:21:43:3d:0c:3a:45:90:
7d:d6:cc:81:ac:08:34:ce:a4:dc:fd:91:08:d6:4a:
af:09:2f:b8:2c:02:ef:cc:3b:83:cd:bb:6e:f4:60:
f4:fc:76:11:30:18:9a:73:8f:ca:1a:fd:75:d3:4d:
d2:7c:6e:36:9c:81:e5:a4:3b:86:3b:c1:70:02:e5:
d9:82:89:cc:30:aa:18:a2:3f:c7:7f:b6:2f:16:32:
f0:39:3a:b9:13:51:d9:97:1e:8c:e9:7a:75:c8:68:
5d:45:d4:50:c7:7c:f1:79:b3:a3:e8:5b:77:b8:5b:
90:3a:95:9d:d1:97:2c:6c:9f:4c:45:17:a5:7e:46:
60:ee:af:4b:70:6a:57:bb:80:50:17:38:59:e3:d2:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:2B:ED:90:74:74:48:A3:0E:E6:C2:FF:06:D2:2D:68:72:38:E3
X509v3 Authority Key Identifier:
keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/CNwr7ZB0dEijDubC_wbSLWhyOOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:fe:9c:9d:92:68:2f:08:a1:4a:50:38:af:72:44:78:ad:f8:
49:55:f2:5d:7e:ac:57:68:90:1d:4a:df:62:71:3a:81:f2:11:
1f:7d:da:d6:a0:68:ce:06:65:56:f0:31:39:1c:cf:5a:f8:7f:
e1:00:66:b7:b3:32:c5:e1:2e:a1:d5:f8:cb:32:78:92:f9:63:
d9:7c:2d:3f:32:71:c3:c3:5d:bc:82:2b:f1:a7:61:85:fc:f2:
bf:cf:6f:47:09:f0:f8:4d:70:c3:a9:da:fe:f2:84:39:2a:09:
23:45:1d:6a:02:8b:17:f2:e1:2d:79:83:0d:84:32:a6:4b:d9:
1b:75:f3:bd:7d:a0:a7:6a:03:8d:68:81:d3:3c:32:bd:9d:46:
21:3d:f5:11:98:f6:f5:f2:e7:1f:dd:cf:cf:6e:94:ec:f7:56:
ae:20:db:17:ba:aa:cd:f9:d3:05:ea:b5:d4:3d:56:d1:81:91:
63:26:b2:ed:fc:a0:17:38:98:03:a4:00:2c:f5:80:59:8c:aa:
90:b8:e4:70:f1:24:00:76:8c:f3:70:04:fb:e9:1d:83:80:30:
b5:80:b5:20:cf:c0:bb:b7:f6:24:d1:8b:78:e5:06:4f:08:b7:
d5:8c:eb:9c:93:cc:ad:59:12:3b:8f:b4:e2:45:63:a4:87:14:
97:5f:b2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:46 2025 by rpki-client