Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/U1NnlSEvaJ1oXeQ1WKq0fdqaFfw.roa
File: U1NnlSEvaJ1oXeQ1WKq0fdqaFfw.roa (raw, json)
Hash identifier: y+C4FlYn7TWU3jwrfwY/6lDEewb8W1pKEt9gKrqZyq0=
Subject key identifier: 53:53:67:95:21:2F:68:9D:68:5D:E4:35:58:AA:B4:7D:DA:9A:15:FC
Certificate issuer: /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial: 0187AEF89E23BE59C011C0F449F6998085F3
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/U1NnlSEvaJ1oXeQ1WKq0fdqaFfw.roa
Signing time: Sun 23 Apr 2023 16:35:41 +0000
ROA not before: Sun 23 Apr 2023 16:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 185.202.100.0/24 maxlen: 24
185.202.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ae:f8:9e:23:be:59:c0:11:c0:f4:49:f6:99:80:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Validity
Not Before: Apr 23 16:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53536795212f689d685de43558aab47dda9a15fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:de:92:94:34:44:69:76:48:13:9f:14:a7:
a7:be:f4:b2:7b:e4:75:3c:5e:d5:74:95:ae:84:aa:
ee:2f:3e:2f:20:40:d9:62:c5:f1:95:28:8b:5a:14:
30:0a:a2:93:e8:5a:86:f0:7a:bb:93:aa:c7:c7:d6:
e8:ac:2e:49:c4:a6:95:92:7f:f2:8a:9a:ca:dc:ad:
cf:ec:9c:7d:20:a6:a4:f5:d7:bc:17:b2:0a:98:36:
b5:ce:1e:45:8b:cd:71:90:de:8d:b3:72:37:42:11:
dc:80:8c:b8:2c:40:d1:c1:95:b8:ca:83:e0:3c:ba:
90:f1:d5:5e:fc:14:7c:6b:d3:b2:9f:b4:09:bf:59:
d7:42:2f:32:32:67:38:7a:fd:14:92:23:45:cc:78:
e9:ff:60:72:e2:cd:f9:c2:58:70:7a:f2:4e:cc:b0:
39:30:60:91:ef:a1:6a:f4:c7:d5:d9:0d:63:f4:11:
0f:df:43:c1:dd:e1:ea:49:db:b7:33:8c:24:8d:c6:
13:22:90:63:09:cc:d3:78:91:97:37:7a:72:63:35:
53:c6:bc:d5:b0:70:db:e0:65:50:f8:73:b6:4c:01:
ba:fe:9e:6a:ec:28:4a:d6:86:39:62:9f:57:de:66:
52:70:2e:82:fa:21:73:f7:48:93:b5:2c:0f:9c:fc:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:67:95:21:2F:68:9D:68:5D:E4:35:58:AA:B4:7D:DA:9A:15:FC
X509v3 Authority Key Identifier:
keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/U1NnlSEvaJ1oXeQ1WKq0fdqaFfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/24
185.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c6:8f:2b:6c:2f:f3:3d:d4:f9:c2:c7:1c:5d:71:10:7b:c5:
bb:f1:9d:de:50:fb:fe:10:61:ba:7c:28:95:4c:b5:24:d8:d7:
02:8a:68:fc:92:6b:da:9c:c8:c5:c9:84:e2:b4:56:67:ff:72:
ec:13:4e:66:d2:f7:de:67:c2:eb:ae:46:67:12:0f:da:01:a9:
bc:c6:03:11:b5:b7:ae:db:38:ad:78:4e:6f:d0:ce:47:cf:13:
9a:52:55:04:e7:43:25:83:13:fb:61:72:ac:4b:d2:21:c0:29:
85:19:12:89:6e:31:62:4b:2c:fe:20:51:ea:e9:32:8f:aa:7e:
07:19:e6:15:34:f9:d7:9a:b3:97:fa:73:e2:1d:68:26:f2:34:
7e:95:b9:fb:07:60:bb:76:25:a7:d0:1b:ac:fd:f3:61:e0:00:
27:ec:82:f1:64:74:86:c8:dd:0d:fc:9e:43:21:d4:0a:47:b0:
a2:85:42:46:97:01:42:ad:b0:91:2c:97:b8:44:b4:01:8f:db:
73:2e:ef:89:5a:52:2e:f0:2f:16:6f:29:ee:28:5d:03:c4:3f:
c9:98:bf:ab:3a:e0:8b:67:55:61:15:b3:ef:7f:52:6a:b8:d8:
a3:b3:4e:95:29:63:9e:4a:0e:ae:05:28:b9:2c:25:3e:0f:7d:
87:bb:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org