Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/mD90Esk5DXAIoOki8LTujnb_cUM.roa
File: mD90Esk5DXAIoOki8LTujnb_cUM.roa (raw, json)
Hash identifier: 5bB+hYXxbzMc4D+VmgpOW2gLjytwzdIpKYoymaaOHOw=
Subject key identifier: 98:3F:74:12:C9:39:0D:70:08:A0:E9:22:F0:B4:EE:8E:76:FF:71:43
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 07FD6760
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/mD90Esk5DXAIoOki8LTujnb_cUM.roa
Signing time: Sat 01 Jan 2022 07:02:35 +0000
ROA not before: Sat 01 Jan 2022 07:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201333
IP address blocks: 185.100.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134047584 (0x7fd6760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jan 1 07:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=983f7412c9390d7008a0e922f0b4ee8e76ff7143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:fa:0d:c2:2d:c2:9c:07:e2:e5:a4:56:03:
e0:ed:33:ee:4c:54:8e:d3:af:e2:21:dd:de:72:f4:
29:c7:54:ae:f5:de:56:e0:d9:04:5d:1a:3b:54:0a:
fc:a2:ed:88:4e:ab:61:6d:77:24:1c:f0:78:b6:24:
d1:eb:cb:a6:a0:dd:bb:b5:00:19:83:a4:ff:9f:3f:
0e:8b:a1:05:60:79:0c:37:ab:2d:07:91:93:87:59:
82:2e:02:e1:ff:50:d8:b9:9b:15:10:ea:66:8e:56:
c2:ac:5b:c1:d2:99:12:8a:72:23:51:5f:f3:0a:2d:
35:6e:d8:bc:b3:d6:93:02:69:03:01:a2:88:1e:9a:
34:d7:04:50:4e:3a:54:af:2c:34:60:92:a2:52:68:
e8:57:6a:a2:21:a5:cc:c7:76:07:8d:92:3c:96:67:
8b:bc:c7:66:7d:6d:f5:7b:32:ac:02:78:2f:09:8c:
bd:f1:16:d4:39:3e:a2:39:ba:1c:8f:c6:82:8c:c8:
db:6a:cb:e4:4e:c4:0d:a6:51:32:40:97:e8:58:d1:
76:31:8d:1d:e2:48:24:dc:26:0a:4a:b8:a0:c4:ba:
eb:6b:89:c1:e7:86:21:5f:48:1e:56:bb:03:f1:5d:
09:47:50:d8:7d:9e:23:91:0d:0a:eb:bb:11:d5:bc:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:74:12:C9:39:0D:70:08:A0:E9:22:F0:B4:EE:8E:76:FF:71:43
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/mD90Esk5DXAIoOki8LTujnb_cUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.16.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:7e:17:c6:9b:d0:a6:3a:53:16:1f:c6:85:d8:5f:9f:3b:55:
33:d1:22:cb:5a:67:2d:21:30:e9:75:57:c8:38:91:79:18:3f:
1c:a9:7d:81:33:7a:61:0f:b9:9b:7f:ae:cd:d9:24:f7:bf:88:
ab:de:bd:f5:21:e7:3f:2f:35:90:a5:3b:ee:38:97:76:b9:96:
b9:88:8a:08:10:82:2f:36:a8:87:00:40:4f:34:f9:18:01:d1:
b4:d2:f8:0b:c4:c5:27:69:c8:f2:24:9c:35:9a:a1:a0:09:8b:
b7:f3:c6:ba:90:ee:d9:a4:4a:d6:51:f8:90:85:1d:37:6b:5e:
a1:3a:22:f2:7b:d2:88:32:b5:45:ca:db:c6:b0:4c:ab:1c:c5:
3c:33:6a:f5:16:aa:69:be:b8:ee:bd:57:47:78:c4:3f:e3:9b:
54:ca:82:85:74:ea:71:b2:01:21:b7:18:9b:bc:df:c2:ee:9f:
df:2d:43:9d:90:52:37:ad:0b:03:b2:9a:8e:12:ae:01:20:3f:
20:f3:9b:92:93:99:e3:25:58:41:48:6a:cc:e4:79:98:15:00:
d4:14:ad:41:a1:7a:9b:10:77:57:de:4e:1d:0e:5d:27:3c:ec:
31:53:03:4a:f5:5e:65:3d:4b:e7:3a:de:db:c8:ff:a9:31:b8:
d6:b1:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:16 2025 by rpki-client