Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/JkrMr3sKCPmGi38u9tK8P7-Sww4.roa
File: JkrMr3sKCPmGi38u9tK8P7-Sww4.roa (raw, json)
Hash identifier: 6CgZSTUMzOFRp7X/aTxwr9WgbC90ODcSXWs/kjSA5Ok=
Subject key identifier: 26:4A:CC:AF:7B:0A:08:F9:86:8B:7F:2E:F6:D2:BC:3F:BF:92:C3:0E
Certificate issuer: /CN=d8a8e9af2ca43e2712bfb2c9796ec4c0ba658521
Certificate serial: 01834025B680DC4F631E9AFE5F7DE5980CA7
Authority key identifier: D8:A8:E9:AF:2C:A4:3E:27:12:BF:B2:C9:79:6E:C4:C0:BA:65:85:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KjpryykPicSv7LJeW7EwLplhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/JkrMr3sKCPmGi38u9tK8P7-Sww4.roa
Signing time: Thu 15 Sep 2022 07:55:56 +0000
ROA not before: Thu 15 Sep 2022 07:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60064
IP address blocks: 185.102.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:25:b6:80:dc:4f:63:1e:9a:fe:5f:7d:e5:98:0c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a8e9af2ca43e2712bfb2c9796ec4c0ba658521
Validity
Not Before: Sep 15 07:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=264accaf7b0a08f9868b7f2ef6d2bc3fbf92c30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:52:d1:cb:4c:f3:ed:64:24:3e:99:7e:5c:
f1:47:93:6a:38:b6:43:d7:80:ee:ec:6f:50:fb:16:
a2:44:e6:9b:0a:27:60:49:76:77:6a:da:5f:d0:26:
cb:07:4e:d0:e7:e7:74:e1:cf:4e:b0:61:2e:5f:b5:
95:42:74:c8:57:ff:8e:a6:69:85:43:b2:4c:3e:c3:
5f:46:dd:fa:64:ac:34:f8:65:1e:67:b1:52:d0:9b:
b2:ab:c5:b8:6c:6b:81:8e:60:dd:af:d5:be:a3:da:
a2:85:85:12:0d:92:6b:0a:d4:b6:b3:d2:e0:93:9a:
65:93:cc:91:27:9b:77:b9:01:15:67:c8:62:f0:f9:
95:3b:50:7c:e7:ea:af:47:ce:b0:7b:52:e1:a4:87:
6f:91:ae:f7:60:46:6c:3f:12:b5:af:fc:33:01:24:
e6:44:00:58:67:ad:dd:ca:93:e2:0a:50:52:1d:97:
48:6a:73:81:a8:2e:1e:10:26:98:38:cc:44:24:57:
49:f8:65:c3:e5:b0:9d:21:b8:93:85:fc:60:ff:10:
e1:d7:1b:98:6b:37:5d:c8:d2:6a:e6:f0:12:25:f5:
ed:6e:f6:c4:07:8e:76:02:70:b7:4e:dd:d6:4b:61:
77:ac:2d:12:f7:87:6f:ab:7e:ac:f1:5c:36:14:d0:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:CC:AF:7B:0A:08:F9:86:8B:7F:2E:F6:D2:BC:3F:BF:92:C3:0E
X509v3 Authority Key Identifier:
keyid:D8:A8:E9:AF:2C:A4:3E:27:12:BF:B2:C9:79:6E:C4:C0:BA:65:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KjpryykPicSv7LJeW7EwLplhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/JkrMr3sKCPmGi38u9tK8P7-Sww4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/2KjpryykPicSv7LJeW7EwLplhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.170.0/24
Signature Algorithm: sha256WithRSAEncryption
20:26:4d:fd:35:55:95:cb:35:91:21:f4:fc:1d:59:78:18:60:
c9:17:d2:91:7d:25:c3:fd:89:38:6b:52:a4:d7:aa:f5:1f:cf:
11:49:0a:e8:cf:76:db:73:a8:1e:41:8d:fe:cf:e3:e0:82:17:
be:76:1c:9e:61:9c:5b:12:52:33:cd:7c:94:c3:67:46:34:d5:
e9:95:d3:e3:99:77:f1:be:44:d9:4c:5c:99:58:ec:a1:14:84:
90:c5:ed:8f:2c:64:65:d9:83:b5:dd:82:b0:0e:e4:b9:4e:04:
e3:4d:c7:29:f0:ea:e3:47:1e:cf:97:2a:0a:8c:4a:bc:50:49:
e7:d4:b9:cd:9e:ad:59:0c:a0:fc:c7:4b:d6:ea:3a:ab:4f:0e:
2c:d1:d4:f8:fa:02:1c:04:4f:f4:7d:61:49:75:7d:a7:00:68:
0d:7d:ae:09:45:f8:d7:5e:3e:4d:b7:ad:21:56:49:0c:e2:5f:
0a:ed:c0:89:e1:f7:85:30:56:cb:97:4a:a7:98:6e:3b:30:34:
36:83:c9:8e:ff:8a:f8:8e:08:75:cf:d2:3a:12:74:11:04:6f:
11:f0:e6:6a:fc:db:11:a0:63:17:99:3a:67:22:83:cd:0a:db:
3c:a5:b0:b0:de:c7:81:87:3f:0d:90:8b:50:9b:6b:1a:a4:fc:
dc:70:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:58 2024 by rpki-client on console-fra.rpki-client.org