Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/Fe58dIwNNO96byVBBrEMwaFk2s8.roa
File: Fe58dIwNNO96byVBBrEMwaFk2s8.roa (raw, json)
Hash identifier: q3KM9a1frEhToJyidYCXJwgLSG02diQ2tU2YSmjSuj0=
Subject key identifier: 15:EE:7C:74:8C:0D:34:EF:7A:6F:25:41:06:B1:0C:C1:A1:64:DA:CF
Certificate issuer: /CN=d8a8e9af2ca43e2712bfb2c9796ec4c0ba658521
Certificate serial: 0183C5F3DACED1FF35662E628149DC88B96F
Authority key identifier: D8:A8:E9:AF:2C:A4:3E:27:12:BF:B2:C9:79:6E:C4:C0:BA:65:85:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KjpryykPicSv7LJeW7EwLplhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/Fe58dIwNNO96byVBBrEMwaFk2s8.roa
Signing time: Tue 11 Oct 2022 07:30:36 +0000
ROA not before: Tue 11 Oct 2022 07:30:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211043
IP address blocks: 185.102.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:f3:da:ce:d1:ff:35:66:2e:62:81:49:dc:88:b9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a8e9af2ca43e2712bfb2c9796ec4c0ba658521
Validity
Not Before: Oct 11 07:30:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15ee7c748c0d34ef7a6f254106b10cc1a164dacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:01:2f:d6:8c:33:9a:0f:c0:82:6e:c6:fc:
6d:93:d7:94:72:5b:52:6b:d4:bf:a9:f5:36:5b:f0:
30:f6:07:f6:c8:ef:e1:37:5f:1b:c7:4a:7d:3f:69:
38:44:c8:50:c8:93:bc:cc:12:a4:ca:17:a2:4b:15:
81:c1:4a:8b:14:be:e9:5f:16:7b:50:f8:85:5c:cd:
5d:d1:6b:f8:52:ab:fd:26:a8:be:51:06:b4:e3:b4:
7e:29:89:8d:6b:5b:99:d4:0e:31:ae:94:d8:af:7d:
f9:bc:f9:8d:c4:16:b4:dd:a5:92:e9:80:03:f9:98:
e8:b0:6f:1c:47:52:34:14:0e:94:12:54:eb:a7:0e:
25:ca:9f:19:2a:19:03:e3:fa:fc:c2:be:04:19:27:
5c:09:da:34:b3:52:65:f9:94:c7:aa:81:74:24:15:
01:ad:19:52:ef:01:12:a4:54:3f:ed:dd:b8:e0:69:
12:1b:80:ff:2b:e9:e6:cf:be:f9:d0:80:59:ca:39:
a4:4a:1b:3c:6e:87:40:54:7f:99:25:32:65:ae:fa:
22:ce:ec:aa:2e:c6:87:61:88:ff:07:e1:1f:13:36:
3b:87:dd:04:04:ae:e3:2a:23:99:f5:77:90:f2:8f:
2f:1d:63:57:7b:68:8a:2b:00:fd:de:df:fa:9f:84:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:7C:74:8C:0D:34:EF:7A:6F:25:41:06:B1:0C:C1:A1:64:DA:CF
X509v3 Authority Key Identifier:
keyid:D8:A8:E9:AF:2C:A4:3E:27:12:BF:B2:C9:79:6E:C4:C0:BA:65:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KjpryykPicSv7LJeW7EwLplhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/Fe58dIwNNO96byVBBrEMwaFk2s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/2KjpryykPicSv7LJeW7EwLplhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.171.0/24
Signature Algorithm: sha256WithRSAEncryption
64:69:0b:1d:29:84:07:7e:2f:35:fb:61:74:1f:9b:bc:cc:d6:
55:5e:68:00:5d:bb:68:61:ae:60:b5:8d:19:ac:de:25:92:6b:
97:4a:a9:11:46:a6:20:db:60:44:bd:28:22:9b:ec:7d:86:0d:
57:19:b8:40:7d:cd:f6:ef:2a:9a:a0:bc:6b:98:df:3c:d2:b6:
02:1d:02:74:5f:90:b6:34:c0:ab:bf:53:cc:e2:8d:38:18:a6:
5a:cb:c3:46:72:fa:b4:1d:c3:1d:b4:1b:bd:3d:5e:54:e7:af:
48:06:51:a3:1a:8d:84:19:cf:57:83:85:ad:2c:e5:f6:2a:c3:
8b:02:7d:3a:5f:39:03:de:b6:fd:a3:9c:0f:4c:fe:3c:d6:b5:
a8:b9:35:e9:f8:7c:eb:9e:bf:d7:24:7f:e2:05:57:13:20:a4:
66:75:36:6a:9a:3e:b6:0b:83:c1:3b:d5:bd:e5:b4:59:da:67:
27:07:4b:32:48:b1:f5:dd:cd:c5:25:79:36:09:3d:c8:f3:81:
4e:13:ac:f2:ba:70:6a:a2:3b:a1:aa:59:22:9e:3a:bd:03:2b:
96:20:e1:b1:c2:6e:46:72:e5:6f:26:08:fc:ae:32:f4:39:a3:
92:ac:dc:93:11:1c:25:97:d9:0b:89:79:4a:95:b9:cf:3a:0d:
6a:87:ed:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPF89rO0f81Zi5igUnciLlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YThlOWFmMmNhNDNlMjcxMmJmYjJjOTc5NmVjNGMwYmE2
NTg1MjEwHhcNMjIxMDExMDczMDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWVlN2M3NDhjMGQzNGVmN2E2ZjI1NDEwNmIxMGNjMWExNjRkYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiMBL9aMM5oPwIJuxvxtk9eUcltS
a9S/qfU2W/Aw9gf2yO/hN18bx0p9P2k4RMhQyJO8zBKkyheiSxWBwUqLFL7pXxZ7
UPiFXM1d0Wv4Uqv9Jqi+UQa047R+KYmNa1uZ1A4xrpTYr335vPmNxBa03aWS6YAD
+ZjosG8cR1I0FA6UElTrpw4lyp8ZKhkD4/r8wr4EGSdcCdo0s1Jl+ZTHqoF0JBUB
rRlS7wESpFQ/7d244GkSG4D/K+nmz7750IBZyjmkShs8bodAVH+ZJTJlrvoizuyq
LsaHYYj/B+EfEzY7h90EBK7jKiOZ9XeQ8o8vHWNXe2iKKwD93t/6n4RcJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXufHSMDTTvem8lQQaxDMGhZNrPMB8GA1UdIwQY
MBaAFNio6a8spD4nEr+yyXluxMC6ZYUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMktqcHJ5eWtQaWNTdjdMSmVXN0V3THBsaFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82MzlmNDktNGNmYy00MWM4LThiYTct
NWUwMzA3MDY0ODhkLzEvRmU1OGRJd05OTzk2YnlWQkJyRU13YUZrMnM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My82MzlmNDktNGNmYy00MWM4LThiYTctNWUwMzA3MDY0ODhk
LzEvMktqcHJ5eWtQaWNTdjdMSmVXN0V3THBsaFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWarMA0G
CSqGSIb3DQEBCwUAA4IBAQBkaQsdKYQHfi81+2F0H5u8zNZVXmgAXbtoYa5gtY0Z
rN4lkmuXSqkRRqYg22BEvSgim+x9hg1XGbhAfc327yqaoLxrmN880rYCHQJ0X5C2
NMCrv1PM4o04GKZay8NGcvq0HcMdtBu9PV5U569IBlGjGo2EGc9Xg4WtLOX2KsOL
An06XzkD3rb9o5wPTP481rWouTXp+Hzrnr/XJH/iBVcTIKRmdTZqmj62C4PBO9W9
5bRZ2mcnB0sySLH13c3FJXk2CT3I84FOE6zyunBqojuhqlkinjq9AyuWIOGxwm5G
cuVvJgj8rjL0OaOSrNyTERwll9kLiXlKlbnPOg1qh+2l
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-ams.rpki-client.org