Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/ScBcQyMfgl-vIRQFXm0ZKKrhsJQ.roa
File: ScBcQyMfgl-vIRQFXm0ZKKrhsJQ.roa (raw, json)
Hash identifier: WcmhDapN3iOv3xPNtasdSJAqHqt/CavLfb01tyYV4Sk=
Subject key identifier: 49:C0:5C:43:23:1F:82:5F:AF:21:14:05:5E:6D:19:28:AA:E1:B0:94
Certificate issuer: /CN=d8a8e9af2ca43e2712bfb2c9796ec4c0ba658521
Certificate serial: 0C9A10D6
Authority key identifier: D8:A8:E9:AF:2C:A4:3E:27:12:BF:B2:C9:79:6E:C4:C0:BA:65:85:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KjpryykPicSv7LJeW7EwLplhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/ScBcQyMfgl-vIRQFXm0ZKKrhsJQ.roa
Signing time: Sat 01 Jan 2022 11:01:53 +0000
ROA not before: Sat 01 Jan 2022 11:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8038
IP address blocks: 185.102.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211423446 (0xc9a10d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a8e9af2ca43e2712bfb2c9796ec4c0ba658521
Validity
Not Before: Jan 1 11:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49c05c43231f825faf2114055e6d1928aae1b094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:76:93:4d:e5:c0:ba:39:c9:d9:71:2b:ac:
77:10:74:b0:40:67:8a:b5:fd:64:09:50:e2:a7:91:
3b:70:18:16:d2:a4:27:b1:25:9a:6d:0b:f5:34:43:
e7:f4:01:d8:a3:f0:76:90:01:7e:ff:18:98:9b:d1:
0c:f8:c0:70:3d:16:ee:ad:a7:64:ae:67:ab:83:13:
3d:c7:e0:58:ec:3b:3b:2e:0e:ab:26:a7:4e:51:6f:
0b:4e:40:d2:25:46:eb:11:38:92:86:24:2b:12:81:
3b:4f:f0:e6:ba:46:6d:13:14:55:46:23:48:fb:6c:
3e:55:2f:65:87:1b:86:53:be:3a:f4:a1:ac:94:c5:
f7:cb:00:09:bf:a7:85:af:d5:bf:1c:44:35:dc:28:
4d:87:ee:50:28:0c:76:bd:15:72:ee:5e:54:8c:b0:
2b:30:19:a9:9c:c9:98:8f:63:80:f1:8c:38:d2:12:
eb:6e:f9:53:b9:c8:6a:0b:5f:98:89:5f:64:87:0e:
5c:fd:3a:57:40:3f:63:8f:c4:cc:df:38:e9:9a:12:
ec:f0:94:67:bc:db:a2:0c:8a:9d:de:03:e6:b7:46:
38:de:67:ea:59:22:90:93:87:74:d2:43:a4:24:ef:
95:cc:ab:f4:7d:b5:d0:06:a5:da:0a:ba:40:ac:9f:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:5C:43:23:1F:82:5F:AF:21:14:05:5E:6D:19:28:AA:E1:B0:94
X509v3 Authority Key Identifier:
keyid:D8:A8:E9:AF:2C:A4:3E:27:12:BF:B2:C9:79:6E:C4:C0:BA:65:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KjpryykPicSv7LJeW7EwLplhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/ScBcQyMfgl-vIRQFXm0ZKKrhsJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/2KjpryykPicSv7LJeW7EwLplhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.168.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c9:a4:d1:14:2e:44:a4:07:ee:c1:8e:f8:fc:0b:0f:85:73:
a4:1a:f8:af:1d:98:c3:c3:04:13:94:e6:26:ec:f9:bb:4e:2d:
59:1c:71:7e:c2:d3:e3:b2:7e:2f:34:f4:d4:c6:94:0a:07:5a:
ce:e3:87:7a:d9:a3:0a:66:45:0d:1b:93:5b:18:48:bb:b6:af:
ad:3d:3d:64:14:0f:71:5e:ed:ea:27:cd:b8:61:92:09:60:23:
d6:15:69:a2:67:d1:79:b8:fa:3e:9f:60:50:44:9c:0e:6e:56:
13:08:83:b1:9e:fb:f4:d4:60:a1:b4:a6:be:19:1d:2a:5e:c5:
4f:9f:c1:56:1d:4c:ef:d4:91:ed:76:48:1e:52:e8:a6:5d:e7:
56:f1:bd:c0:3c:3c:ee:c8:66:de:15:22:0b:d5:23:45:4b:83:
78:af:14:05:59:e6:0e:91:4f:06:54:1a:62:50:47:ad:5b:bb:
da:8d:cd:6f:4c:b2:c3:5d:e9:ed:d1:b6:ac:df:be:76:3c:0b:
ff:93:b9:14:f4:8f:a1:a5:76:17:3a:69:78:ae:c4:59:5b:a0:
94:17:55:da:51:0f:31:43:de:ef:5a:67:23:6e:26:c4:c7:7e:
de:0a:18:9a:03:8a:9e:02:f5:f0:d6:7e:39:70:90:3a:b0:3c:
12:2f:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:56 2023 by rpki-client on console-fra.rpki-client.org