Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/UCcVVz02bRvNxHs0xsUKEvMf4Zg.roa
File: UCcVVz02bRvNxHs0xsUKEvMf4Zg.roa (raw, json)
Hash identifier: /n+06GB/Jv6vDP4n7l0Hl7E2K7ELBmCoirTaL9xDuNQ=
Subject key identifier: 50:27:15:57:3D:36:6D:1B:CD:C4:7B:34:C6:C5:0A:12:F3:1F:E1:98
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 01828E7EAC74D355345564637C93D2DC041C
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/UCcVVz02bRvNxHs0xsUKEvMf4Zg.roa
Signing time: Thu 11 Aug 2022 20:00:42 +0000
ROA not before: Thu 11 Aug 2022 20:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 188.208.103.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:7e:ac:74:d3:55:34:55:64:63:7c:93:d2:dc:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Aug 11 20:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=502715573d366d1bcdc47b34c6c50a12f31fe198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:8f:15:fe:df:77:8c:f8:48:15:56:a8:a2:
97:ec:dc:c1:d1:d8:f6:ff:f9:8c:ae:c1:fc:74:2c:
79:06:ec:1b:e2:1d:20:9b:a1:c9:d5:04:75:9d:8b:
ec:a2:99:d0:e5:5f:17:f1:47:22:f4:d3:3c:39:c8:
3f:d8:c5:dd:2e:3f:d7:93:b0:b5:46:a3:c1:85:bb:
0b:18:d2:26:ae:88:e6:37:2a:19:c7:5e:f2:ed:af:
6e:74:3c:3b:1e:43:ca:54:24:18:09:9a:97:e4:64:
37:fe:db:60:62:3f:5b:28:12:f5:61:3a:82:c8:0f:
d1:ae:23:ee:9f:3c:ce:fd:68:a0:ea:48:4b:e1:82:
12:e3:cc:5a:2e:38:43:28:55:b3:54:ae:9c:f5:f9:
3c:a1:bf:43:61:50:dd:d8:da:6f:3c:3b:5a:51:a1:
74:c9:ec:1c:ac:2c:b1:5f:6c:02:5f:a9:93:cd:e8:
29:59:5d:49:ef:5b:87:e0:e4:34:34:3f:4d:3d:81:
0b:d4:08:76:6a:68:7e:f5:9d:a0:22:c1:6b:51:aa:
3c:43:a0:a1:ff:b9:be:46:46:39:51:7f:11:ab:02:
17:0d:7c:0c:87:51:5a:f5:f5:0d:6a:c0:2c:88:7b:
ce:81:d9:b8:98:cf:b4:54:58:39:86:77:89:d9:b4:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:27:15:57:3D:36:6D:1B:CD:C4:7B:34:C6:C5:0A:12:F3:1F:E1:98
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/UCcVVz02bRvNxHs0xsUKEvMf4Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
75:87:14:9e:a2:65:c5:6e:77:70:c9:98:2c:68:4d:3d:84:02:
8d:93:bd:de:2b:82:06:f3:00:14:c0:0c:fb:85:05:18:3c:b2:
d3:8a:eb:27:57:58:29:2f:0e:e2:ae:59:b2:86:ec:b3:86:1c:
52:d6:23:c3:14:d7:52:e2:02:33:d0:ef:27:79:7f:bc:3c:a0:
cf:f0:4d:c2:6d:97:a4:1f:92:b7:26:0d:d6:4c:b7:ff:58:29:
8f:b8:4e:64:62:8d:1b:b9:53:b9:f7:48:0d:95:04:95:41:25:
70:bc:00:30:09:5b:ce:57:67:ca:3c:ab:70:27:31:28:82:52:
7b:52:68:51:b5:f2:31:b1:f1:26:28:9c:4b:26:94:27:72:25:
a1:d7:af:35:4e:6b:94:1d:1b:ee:76:76:81:12:81:78:15:1c:
ae:74:51:cf:c5:b5:a5:59:0d:bf:74:90:a9:ca:a4:b8:34:31:
11:9d:19:44:6d:99:a0:b3:b8:40:4c:4a:7c:66:15:b6:80:e6:
b2:00:2b:0b:78:89:20:e0:86:9b:d2:ba:7a:21:da:81:e1:5b:
09:02:75:43:b9:90:9f:9a:92:e7:08:2a:20:05:ee:14:11:1e:
5f:eb:b5:61:a9:65:df:3b:a5:04:e4:b9:d3:30:f4:1c:28:89:
10:dd:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:51 2025 by rpki-client