Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/Kgs93U1nx6414-jqLCejkezrwKg.roa
File: Kgs93U1nx6414-jqLCejkezrwKg.roa (raw, json)
Hash identifier: zrXqKNcHOKEoJlHKBnsWr8oWrhOEeHyt8fIrQVEIdq8=
Subject key identifier: 2A:0B:3D:DD:4D:67:C7:AE:35:E3:E8:EA:2C:27:A3:91:EC:EB:C0:A8
Certificate issuer: /CN=4a751782fa4cd1425443d1efa12d6676213f44ec
Certificate serial: 018CC4246243245FD7DCF416B46FF37985C6
Authority key identifier: 4A:75:17:82:FA:4C:D1:42:54:43:D1:EF:A1:2D:66:76:21:3F:44:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnUXgvpM0UJUQ9HvoS1mdiE_ROw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/Kgs93U1nx6414-jqLCejkezrwKg.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200097
IP address blocks: 185.37.101.0/24 maxlen: 24
185.37.102.0/24 maxlen: 24
185.37.103.0/24 maxlen: 24
185.37.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:62:43:24:5f:d7:dc:f4:16:b4:6f:f3:79:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a751782fa4cd1425443d1efa12d6676213f44ec
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a0b3ddd4d67c7ae35e3e8ea2c27a391ecebc0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:b3:08:a5:cd:92:89:7c:30:c5:03:86:27:
29:98:3d:7d:16:14:f9:65:7a:eb:ce:ed:be:00:32:
82:aa:68:a1:f0:27:b1:d4:e4:be:9f:40:d6:11:11:
dc:37:61:81:83:6c:9c:58:d8:3d:be:9f:96:56:f6:
54:bb:65:7c:e7:8a:ef:08:79:df:dc:80:6a:27:56:
b3:b7:b3:18:07:cc:0b:d1:f0:07:c1:0a:7d:54:37:
b9:bd:73:48:3c:2d:d3:46:31:79:27:3f:38:40:1f:
da:00:7e:7b:1f:35:5a:20:d0:48:05:9e:59:59:04:
d7:17:a7:8c:f0:eb:db:18:dc:be:3d:41:6e:a7:ed:
99:59:44:36:e1:bc:6a:ba:0f:3c:ec:bd:5c:00:6f:
a0:4c:18:67:75:2f:13:51:ce:9a:ac:b9:21:81:1b:
ed:4a:7b:bb:0f:36:8d:b6:fd:11:fe:83:65:3d:af:
ef:d3:a4:ad:3a:c6:7d:bb:13:8d:4a:75:9e:96:39:
b5:92:c8:bd:5d:08:3c:04:0f:dc:39:8a:89:3a:16:
c6:2c:05:05:fe:96:13:b4:e2:0b:6b:a2:ce:90:73:
0a:fd:cd:51:01:42:16:f6:38:be:26:09:2b:77:af:
aa:76:0a:7d:da:19:85:27:dd:ed:bc:06:b9:12:cb:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:3D:DD:4D:67:C7:AE:35:E3:E8:EA:2C:27:A3:91:EC:EB:C0:A8
X509v3 Authority Key Identifier:
keyid:4A:75:17:82:FA:4C:D1:42:54:43:D1:EF:A1:2D:66:76:21:3F:44:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnUXgvpM0UJUQ9HvoS1mdiE_ROw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/Kgs93U1nx6414-jqLCejkezrwKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e0f3db-47f5-4907-b4ae-3b0b32248e5e/1/SnUXgvpM0UJUQ9HvoS1mdiE_ROw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:fd:e7:cf:62:b2:df:f6:8a:3f:32:12:b3:60:3a:31:19:59:
35:86:bb:2f:78:c4:ad:c7:f4:cc:78:f1:66:1c:11:70:04:8b:
7b:33:6f:99:e3:16:99:46:e2:8b:6b:60:83:83:74:98:5c:49:
64:2a:a3:c3:23:a2:d6:80:19:29:e9:9f:c1:26:8e:f6:2b:14:
7b:bd:39:04:d7:87:08:c9:09:27:27:a6:c5:2f:4a:62:30:5f:
98:fd:73:a0:27:50:aa:f1:7c:24:7d:7d:f9:e8:9a:5a:41:ab:
d6:85:e0:63:3f:25:ac:b6:79:b3:ec:86:8d:97:18:6b:61:29:
9c:71:61:ed:c1:d8:29:ef:db:f3:74:51:bc:94:4b:91:16:e6:
3c:bb:aa:33:d9:e7:0c:b9:35:87:79:2a:c6:78:ff:df:ef:30:
69:85:65:b3:b6:72:a9:19:02:3d:49:8d:50:59:4b:e4:06:7c:
b7:08:58:c8:7b:97:b2:91:0e:44:4e:98:55:92:17:e6:b0:c7:
4f:3e:e0:b8:b9:e5:05:76:5b:a0:24:80:73:b6:b8:6a:07:da:
62:19:44:44:56:48:4f:0b:54:ba:5c:76:6e:fb:b0:43:3d:55:
b7:81:4c:c8:86:a9:fb:06:10:0e:18:d6:95:34:01:0e:c1:08:
bd:53:05:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 15:28:21 2024 by rpki-client on console-fra.rpki-client.org