Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/bKj0hpVqOcQmMTXQ25CJNOR_c1o.roa
File: bKj0hpVqOcQmMTXQ25CJNOR_c1o.roa (raw, json)
Hash identifier: M05LNRmicKhgqxKCsfT4JQxQwFfQ426ykL2eo+rf3sw=
Subject key identifier: 6C:A8:F4:86:95:6A:39:C4:26:31:35:D0:DB:90:89:34:E4:7F:73:5A
Certificate issuer: /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial: 018571D7C7EC7CF307B3A3FC7F036A070609
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/bKj0hpVqOcQmMTXQ25CJNOR_c1o.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205960
IP address blocks: 185.202.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c7:ec:7c:f3:07:b3:a3:fc:7f:03:6a:07:06:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ca8f486956a39c4263135d0db908934e47f735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:a6:3f:ea:a4:9a:3c:b6:bc:05:5a:19:08:
17:8c:52:20:02:f5:5b:10:90:b5:cd:11:6e:fb:88:
36:09:43:70:d5:4c:b3:bd:68:18:59:e4:4c:4e:f2:
a8:f2:97:a9:8d:ac:ae:00:b7:c0:e8:88:8f:73:fd:
e3:01:36:c4:fa:e9:dd:31:23:e7:c0:ce:b9:a9:42:
44:cd:1f:86:b1:42:2f:76:2e:17:50:de:c3:b5:0f:
58:92:28:bc:f5:fd:88:9d:c4:53:fb:fc:02:7b:30:
48:73:4b:98:87:cf:92:c8:45:9e:2d:f0:f0:4c:bc:
cb:12:ee:ee:0e:1c:70:35:58:b5:86:f9:9e:e0:e8:
64:f5:e7:fa:f6:52:c3:87:2a:1e:3e:6a:96:49:ef:
f8:7a:b1:41:74:17:24:29:b8:39:e5:1e:6b:4d:bf:
9a:ee:8f:22:3a:ac:2d:a8:4e:38:6f:fb:2c:d1:03:
6a:c8:c8:e4:f0:cc:d5:15:0e:ce:7a:0e:20:e1:a3:
b7:eb:72:e9:9c:54:82:ff:c4:fb:1d:62:1b:40:dc:
4b:c2:f0:e9:b4:4d:04:59:e8:f4:9b:0f:b9:7f:de:
84:8b:3d:d1:62:3d:6c:4e:6b:17:79:b5:e7:12:87:
69:ed:61:a9:e1:af:da:f8:38:88:af:3f:0f:5b:6e:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A8:F4:86:95:6A:39:C4:26:31:35:D0:DB:90:89:34:E4:7F:73:5A
X509v3 Authority Key Identifier:
keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/bKj0hpVqOcQmMTXQ25CJNOR_c1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.101.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ef:23:e0:79:37:46:47:cd:71:34:c4:4f:3c:db:8b:af:33:
8a:09:af:37:78:1d:25:a4:c7:f1:74:6e:cb:26:10:37:ea:88:
3f:88:83:fb:f0:76:b5:a0:68:44:ec:2b:da:83:1a:c7:0d:24:
c6:af:d0:3b:8e:97:7f:9c:d3:18:87:04:d5:f2:a2:b7:89:9a:
7c:65:43:09:e1:62:39:0c:06:89:b5:99:d4:8f:c3:91:f6:89:
3c:2b:e3:e3:ce:bd:1e:4a:74:b2:e4:a0:32:28:fe:cd:4c:d7:
20:64:a2:4b:4e:d8:f5:8b:97:b0:eb:18:77:a7:7c:97:0a:1f:
9f:19:b4:7a:b0:fb:90:fb:a6:97:ea:87:f4:8a:3c:c7:02:bb:
9e:b0:8b:f4:64:90:8f:fc:07:4d:68:3c:b4:4a:35:89:da:5a:
8d:87:b8:3f:33:af:ca:32:41:81:55:19:4d:e9:da:b2:27:6e:
12:47:10:6c:ef:5f:14:c1:e0:a2:ef:3c:19:fd:15:17:13:2f:
44:5b:8f:96:b1:e7:7a:32:7c:d2:3e:3a:73:8e:81:dd:a7:f3:
b3:7c:e6:70:fc:50:3b:21:c3:fa:65:70:7b:82:26:33:ae:ee:
67:fc:69:f5:d7:57:1e:26:69:37:30:13:bd:08:a2:09:fa:b0:
a4:4d:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org