Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/ahe3f0Jmn6dE8tYFMd0tlRhkrFk.roa
File: ahe3f0Jmn6dE8tYFMd0tlRhkrFk.roa (raw, json)
Hash identifier: xauK40L4nu/zQtQTXI5Z9NTnR9J6UgJm7J5Rt12DPYU=
Subject key identifier: 6A:17:B7:7F:42:66:9F:A7:44:F2:D6:05:31:DD:2D:95:18:64:AC:59
Certificate issuer: /CN=71199c17d385154086e3b703dd449322dddeb483
Certificate serial: 018CC26CF3304DC34CDA78085BD4D809CEC7
Authority key identifier: 71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/ahe3f0Jmn6dE8tYFMd0tlRhkrFk.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 185.155.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f3:30:4d:c3:4c:da:78:08:5b:d4:d8:09:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71199c17d385154086e3b703dd449322dddeb483
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a17b77f42669fa744f2d60531dd2d951864ac59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:de:38:fe:1b:dc:70:ca:16:5c:c4:7b:c9:
bf:14:81:ea:db:e7:6f:60:b7:15:15:d7:ac:9a:e8:
f5:92:05:f1:1d:95:d0:ee:55:20:98:85:43:2f:fd:
b8:e7:aa:3b:3f:be:d1:6d:d6:0a:0e:0c:2c:50:c4:
26:1d:05:86:c8:97:49:e3:39:8b:7c:10:bd:2c:7b:
7c:bc:8d:c9:0c:0d:49:c0:3b:ec:5d:ee:51:5f:f8:
66:6d:50:12:ef:ea:d9:93:66:b5:59:ee:f0:33:82:
7f:44:e9:d3:7c:42:79:15:2d:b5:82:b1:26:ee:16:
01:e3:e1:40:12:6a:bb:ef:42:29:94:66:3c:3b:94:
9f:dd:79:40:ce:b1:15:4f:a9:92:5e:b4:8d:82:b3:
e4:8f:2a:1c:58:e0:c7:16:f8:04:e7:2b:87:a6:47:
ef:f1:64:b0:13:63:0c:f5:c3:7a:c6:33:d0:e9:bc:
a1:fd:af:6e:05:ac:70:0c:4a:0f:f5:c4:9f:a8:e2:
b5:95:c8:09:46:5f:03:7f:d2:d8:df:f5:7a:f4:b0:
d7:8b:48:55:ec:49:a6:d5:0b:6b:f3:ed:75:93:e5:
2e:b6:22:2c:e0:82:01:3e:2b:a7:1f:bd:21:1b:bd:
89:c7:12:e6:f3:cf:0c:05:72:b1:5a:79:23:21:84:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:17:B7:7F:42:66:9F:A7:44:F2:D6:05:31:DD:2D:95:18:64:AC:59
X509v3 Authority Key Identifier:
keyid:71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/ahe3f0Jmn6dE8tYFMd0tlRhkrFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/cRmcF9OFFUCG47cD3USTIt3etIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.101.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:37:61:a0:93:db:5f:0c:a7:ab:69:6e:15:98:5f:07:d0:38:
21:4c:09:71:f3:40:5f:18:d7:36:87:d6:e9:d2:f9:ee:52:36:
8b:2a:02:5e:89:19:6e:80:4c:52:c9:b6:1e:b1:66:93:78:99:
6a:ba:18:14:c7:6a:df:8f:e5:1f:bf:e7:fa:a6:6a:30:86:cd:
aa:f7:4c:aa:4c:17:a3:1c:24:cd:22:9e:3f:9e:42:cb:a1:2f:
f5:93:90:f4:53:01:c1:a3:3e:80:f1:2e:24:9b:cb:3c:9f:f8:
fb:d7:18:be:ce:c9:9c:43:e9:af:c0:20:05:85:05:07:7d:3f:
af:b7:a6:59:65:5b:12:e7:9c:1a:c5:8e:40:39:fe:1f:e2:42:
f8:b7:77:66:5a:b5:bb:f1:4a:52:02:9f:a7:01:4e:06:2d:2a:
02:ae:3d:77:e0:37:89:98:8a:2f:17:79:53:99:2c:bf:c3:ff:
51:04:0f:16:9a:b6:ae:77:d3:f5:37:f5:ec:89:85:82:62:a0:
61:27:19:1f:d2:a9:f5:d0:cf:a3:05:41:01:fb:60:e4:31:cd:
cf:59:44:90:c9:3d:ea:f6:1e:d9:1d:d7:c0:57:81:2e:c0:de:
6d:53:13:5d:2c:97:a0:eb:d9:42:f9:35:81:83:44:b8:d0:4a:
2a:7b:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org