Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/FMQo7Vg14LHz48iwy6bGRDFQU8c.roa
File: FMQo7Vg14LHz48iwy6bGRDFQU8c.roa (raw, json)
Hash identifier: RLHm8vQTpvt7hinVUzdW7QbvrT+qbaSIBFbTDmkdwUA=
Subject key identifier: 14:C4:28:ED:58:35:E0:B1:F3:E3:C8:B0:CB:A6:C6:44:31:50:53:C7
Certificate issuer: /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial: 018571D7C77CCB92EB0742BF973872E1D183
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/FMQo7Vg14LHz48iwy6bGRDFQU8c.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137427
IP address blocks: 185.202.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c7:7c:cb:92:eb:07:42:bf:97:38:72:e1:d1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14c428ed5835e0b1f3e3c8b0cba6c644315053c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:f2:5d:ad:a0:2d:5c:1f:98:6c:80:b8:42:
8d:24:3d:8d:04:aa:a9:10:a1:ba:0d:dc:84:47:91:
c3:8f:4e:2d:29:20:fe:22:c8:1a:96:cb:01:62:23:
80:2f:a3:82:cb:1e:21:d2:e0:77:a0:9b:99:ed:94:
99:ef:0f:1d:71:6e:cf:2e:83:06:06:92:68:b9:1f:
a3:81:aa:7a:d6:44:c8:1c:34:c7:57:6f:b8:ea:1e:
df:92:68:a2:33:d5:02:ed:df:23:76:d5:50:b6:26:
70:f9:8a:e8:70:79:28:5a:f4:9f:37:44:3c:e7:00:
30:bd:eb:ff:6a:39:0a:bb:ce:aa:18:f2:be:13:a2:
26:21:5c:9f:4d:34:32:c0:08:31:f5:6f:13:a9:63:
81:99:86:11:b5:51:82:36:22:f4:2b:f0:62:9d:70:
d8:bd:6b:e5:11:8e:d9:fe:c8:34:a0:5e:1e:cf:85:
27:dd:d2:07:6d:12:72:d6:79:26:56:9b:f5:fe:a8:
a4:35:01:5f:99:40:98:18:d0:66:6b:32:07:9c:06:
c1:ce:af:c5:f1:1a:d1:be:b3:14:79:28:17:11:d7:
f8:eb:ed:d9:8c:d0:81:81:da:88:35:c4:44:a5:be:
ee:08:77:7a:97:9b:7f:e4:c1:27:dd:c0:58:1d:f9:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:28:ED:58:35:E0:B1:F3:E3:C8:B0:CB:A6:C6:44:31:50:53:C7
X509v3 Authority Key Identifier:
keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/FMQo7Vg14LHz48iwy6bGRDFQU8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.101.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ff:5f:2b:a7:9a:9d:51:6c:17:70:7a:da:80:cb:b4:a1:44:
1c:e8:1f:69:84:9d:ff:6c:32:33:24:47:83:e2:68:c1:9d:4e:
9d:33:ef:c9:e8:ad:77:15:8b:93:6f:71:aa:46:ff:5b:75:07:
85:78:bf:81:82:3a:29:3c:5e:21:89:a7:ca:1a:2d:f8:63:9c:
88:54:ea:0d:8b:78:d3:17:59:c5:04:7d:53:d8:a0:4e:27:73:
cd:be:39:4a:a4:50:83:3f:0a:0e:1a:00:59:cf:91:46:d0:7d:
c5:77:4e:c0:49:32:80:a7:a5:00:a3:88:8b:b7:17:b3:84:06:
e4:21:67:59:af:43:7a:6d:bd:b1:54:be:09:0d:64:3c:37:8e:
03:37:8a:bf:30:00:c8:43:f8:b4:aa:73:4d:d7:bf:4e:29:8c:
a2:3d:46:f5:3f:28:ab:0c:e6:b4:54:32:f3:84:91:ae:d5:a1:
76:de:d9:34:e2:7a:b0:a5:83:8c:0a:cd:a5:1b:c9:b8:e8:1b:
7c:b4:43:37:9d:14:33:06:02:59:26:9a:d5:a9:1f:e2:cb:f5:
7d:1d:75:9c:69:d9:77:f8:e6:bc:5e:82:f0:05:d7:5e:5c:66:
15:fe:01:35:30:cd:4c:56:fa:96:d6:af:ee:74:1c:b0:57:4f:
7f:c5:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:16:04 2025 by rpki-client