Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/HCvdIvyEh0OV3g5NC51kHfN5_mE.roa
File: HCvdIvyEh0OV3g5NC51kHfN5_mE.roa (raw, json)
Hash identifier: NCYtFst8b+6szWYLZvyvSSfGUWt9ct6gKGTSOZ8JJ68=
Subject key identifier: 1C:2B:DD:22:FC:84:87:43:95:DE:0E:4D:0B:9D:64:1D:F3:79:FE:61
Certificate issuer: /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial: 018C1DEF278CAA9F15821C7FE5290451F7F8
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/HCvdIvyEh0OV3g5NC51kHfN5_mE.roa
Signing time: Thu 30 Nov 2023 01:54:21 +0000
ROA not before: Thu 30 Nov 2023 01:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 185.202.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1d:ef:27:8c:aa:9f:15:82:1c:7f:e5:29:04:51:f7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Validity
Not Before: Nov 30 01:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c2bdd22fc84874395de0e4d0b9d641df379fe61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:25:49:f6:85:22:69:65:4b:ce:fb:ab:16:
28:68:68:eb:4a:52:dd:75:b9:50:c0:c3:20:03:24:
30:67:6e:40:ca:0f:d7:cd:43:39:46:52:da:72:18:
b2:2b:99:e2:c6:5e:f2:17:c2:88:dd:70:ee:24:a7:
4d:11:ad:9e:70:61:eb:11:fe:b3:87:0e:b2:63:c3:
45:f9:7f:2a:fc:b2:1a:ce:4d:81:f4:ec:bd:87:f1:
8f:44:b1:ec:11:91:fd:39:20:23:83:f2:ff:70:82:
b9:67:bd:39:d1:29:ae:65:cc:f5:86:1e:a9:e1:d3:
fc:d8:28:66:87:11:0a:ef:89:eb:23:15:df:35:22:
85:c3:7a:eb:40:f9:9f:e2:fd:2f:d8:86:c2:ad:4b:
1f:3f:c4:26:b2:5d:56:88:e4:26:ed:20:57:12:83:
0d:09:76:52:8f:8d:23:a5:cc:7c:af:4a:71:b2:b4:
fd:62:e3:e6:9f:08:90:85:26:c9:78:ec:61:80:66:
95:38:49:a5:79:93:bf:df:ae:3d:be:82:33:f1:a7:
70:d5:c6:bb:48:39:0c:88:88:15:55:7a:76:53:f7:
9a:68:f7:09:4f:94:7f:a2:48:9a:42:e9:19:de:c7:
9f:53:10:9f:6f:63:40:8e:91:29:32:b1:09:38:9d:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2B:DD:22:FC:84:87:43:95:DE:0E:4D:0B:9D:64:1D:F3:79:FE:61
X509v3 Authority Key Identifier:
keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/HCvdIvyEh0OV3g5NC51kHfN5_mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2a:a9:a4:93:cf:7e:cd:e7:97:6a:fd:68:28:07:5b:15:09:
0b:81:d7:95:6e:c8:1d:9b:ed:75:69:e4:22:d7:13:bb:d9:80:
4d:c8:5a:2a:ae:09:dc:3a:85:d8:c2:e4:e1:a0:64:0f:07:b4:
bf:1d:b6:b9:00:58:f0:e2:5a:74:2b:a3:f4:3f:a5:ac:3c:08:
7f:eb:5a:9c:57:6e:0f:c9:a9:5e:74:f5:99:e3:00:bb:6a:b7:
ee:21:5e:26:ac:55:ee:58:3d:0d:4c:e7:55:04:5a:14:27:2a:
3a:c8:7f:4f:61:33:be:f5:4a:3a:d3:78:2c:be:2f:85:8b:f6:
b1:11:46:f8:b2:d7:96:05:07:5e:ec:8a:51:da:55:39:fc:3e:
8a:77:05:c6:57:3e:d8:ac:d3:7b:6c:2e:47:46:0f:cd:7d:d8:
35:fb:a3:cf:ba:6c:a6:8c:77:c7:17:0a:d5:77:a5:64:9b:3d:
e8:48:12:8a:dc:6e:4b:19:2b:4a:70:63:59:6c:13:c4:f2:cb:
5e:a8:be:53:73:5c:c1:47:8f:dc:56:85:65:91:b4:f9:7d:48:
63:0a:c0:a3:31:e7:1e:46:a5:08:4f:5e:f0:8a:89:27:1b:09:
15:a5:bf:df:0d:4b:23:26:4a:03:2a:14:b8:6f:a1:9a:4e:9a:
5b:55:9d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org