Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/mCgN11UCbtwvADBtQiVJRCsVGjs.roa
File: mCgN11UCbtwvADBtQiVJRCsVGjs.roa (raw, json)
Hash identifier: OoMZng2huq+WSnaZVtsiFHutqhsqnCAJHv60SxWgZ7M=
Subject key identifier: 98:28:0D:D7:55:02:6E:DC:2F:00:30:6D:42:25:49:44:2B:15:1A:3B
Certificate issuer: /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial: 03EA90D1
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/mCgN11UCbtwvADBtQiVJRCsVGjs.roa
Signing time: Sat 01 Jan 2022 02:54:31 +0000
ROA not before: Sat 01 Jan 2022 02:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136038
IP address blocks: 185.202.103.0/24 maxlen: 24
185.202.100.0/24 maxlen: 24
185.202.102.0/24 maxlen: 24
185.202.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65704145 (0x3ea90d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Validity
Not Before: Jan 1 02:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98280dd755026edc2f00306d422549442b151a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:2a:54:fc:b6:29:d3:4e:a9:ca:e9:0f:90:
3b:8a:ae:3a:58:d0:45:f7:70:20:4f:70:12:84:d3:
14:de:c9:7d:7d:53:4f:b8:74:24:89:2c:6b:24:29:
3a:d3:e0:dc:91:38:a8:f5:61:84:a2:88:34:40:ac:
d3:3d:c0:da:65:6d:99:a4:f3:7f:ed:39:2d:8f:01:
f6:d7:12:6d:e4:5c:f6:0e:ac:f6:0b:b6:b0:05:f0:
d8:3f:b4:27:1f:63:d9:5c:ed:60:02:25:7d:4e:0b:
95:0a:8b:44:c0:ab:65:63:2e:3f:a8:fb:a0:67:e1:
31:01:36:e9:f2:35:a9:fd:f7:fe:dc:8a:51:ed:0e:
0a:29:1f:63:36:6e:75:4e:f2:90:c6:4c:34:65:15:
f5:bf:e2:fb:6a:35:f6:2b:d6:27:80:aa:d9:d4:37:
8a:8b:73:3d:c8:df:04:12:50:25:fc:9f:9e:4a:a3:
06:5d:66:3c:62:e4:ed:55:64:c6:96:15:2e:88:24:
27:19:5b:55:d3:f2:e1:82:ea:8e:4e:29:a1:c5:a0:
37:25:6e:19:35:aa:2b:44:4a:81:88:47:50:2a:07:
bb:b3:46:cd:47:19:fe:15:5f:58:49:01:7a:64:7f:
b3:68:03:a7:b7:1f:ff:df:5b:18:52:5f:67:2c:16:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:28:0D:D7:55:02:6E:DC:2F:00:30:6D:42:25:49:44:2B:15:1A:3B
X509v3 Authority Key Identifier:
keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/mCgN11UCbtwvADBtQiVJRCsVGjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/22
Signature Algorithm: sha256WithRSAEncryption
78:06:22:74:2d:3d:8b:0a:f4:34:9a:5c:ed:8d:16:e0:2b:b6:
d7:fc:e4:86:7f:7c:fd:0b:de:b5:e0:3d:5f:7e:7f:e0:de:f9:
97:70:ba:50:9f:9a:c6:f9:4d:af:7f:75:ae:60:67:fe:dc:d6:
21:7a:46:04:8c:ff:73:03:e3:97:ea:6e:ae:bf:9c:b4:25:d9:
49:14:5f:75:66:74:d4:95:2e:58:72:49:81:40:3d:38:bd:69:
a9:d8:86:db:cb:bd:d3:65:2c:e8:c7:b5:cd:f4:98:5b:fd:82:
b3:b9:e0:2d:7a:64:26:08:c0:b2:c6:4c:0a:74:86:ec:0a:dd:
39:45:3a:b2:08:d6:8b:38:06:ba:c4:f3:f9:b3:b4:a9:1d:32:
98:e5:84:b7:07:a1:87:81:35:87:09:77:e8:64:6e:a0:e9:2b:
59:30:86:64:d2:a6:49:6c:75:0f:c4:2e:10:6d:1b:39:be:24:
a4:db:aa:55:c4:bb:5a:95:c7:dc:93:5b:58:01:a1:70:c8:51:
5c:20:fe:45:af:e9:10:e6:fa:db:98:40:cc:6b:6d:77:46:9d:
df:94:37:ee:24:35:87:ba:44:54:ee:61:b9:ee:b2:ff:e2:58:
41:b5:c4:55:cf:e1:a4:be:d4:55:55:61:09:40:f1:b3:24:d4:
15:9a:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:06:06 2025 by rpki-client