Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/MptZ3ipDb2cVTVswQkmcgnryAuI.roa
File: MptZ3ipDb2cVTVswQkmcgnryAuI.roa (raw, json)
Hash identifier: iuXPP9KHLgNZLRUGxN2+/1t/qKl4turV8FdZIL5Vdrg=
Subject key identifier: 32:9B:59:DE:2A:43:6F:67:15:4D:5B:30:42:49:9C:82:7A:F2:02:E2
Certificate issuer: /CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Certificate serial: 018CC8011AAE6AE2BC167D33C946393BB113
Authority key identifier: C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/MptZ3ipDb2cVTVswQkmcgnryAuI.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44203
IP address blocks: 185.211.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1a:ae:6a:e2:bc:16:7d:33:c9:46:39:3b:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=329b59de2a436f67154d5b3042499c827af202e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:7d:d1:25:d4:bc:a0:61:44:6f:c9:4a:ea:
73:34:c1:c4:3c:1b:0e:62:29:c1:40:79:d0:a9:4e:
83:f3:73:f7:a6:f1:b0:bd:59:9b:00:aa:2a:41:f6:
cb:6a:7e:29:78:a1:70:9b:a7:30:e3:d1:a7:eb:70:
19:85:26:28:68:84:f6:03:8a:6f:36:bc:c8:9f:19:
46:38:4f:18:bc:13:80:d0:3e:f5:8c:61:80:c2:c3:
2c:c0:77:e5:bc:80:de:d3:f3:28:29:26:1c:11:ad:
f9:5f:4d:54:89:9a:c0:ec:e1:95:0c:d3:12:d0:4a:
a6:2d:a4:5f:36:cf:59:e3:5d:70:65:38:59:63:c0:
78:ef:5e:a9:97:1b:c5:0c:e6:65:4e:8a:15:7f:1a:
60:c3:5a:93:9a:22:fb:e7:25:b6:25:5a:58:bf:e6:
f1:53:88:5c:c8:10:85:cc:f7:e1:3d:6a:68:c9:da:
b6:40:bf:18:0f:e7:07:6f:3d:de:dc:b2:13:0a:33:
ee:a5:68:79:67:68:ff:45:f8:c1:1b:cd:14:70:fc:
8a:9c:5b:ff:1e:e9:83:fa:87:12:a8:a7:e5:b0:f6:
81:14:4e:5c:ab:90:0e:4f:63:f1:16:6e:e5:71:c7:
9a:9d:16:78:9b:1d:f2:a8:4e:21:88:90:a7:3c:4f:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:59:DE:2A:43:6F:67:15:4D:5B:30:42:49:9C:82:7A:F2:02:E2
X509v3 Authority Key Identifier:
keyid:C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/MptZ3ipDb2cVTVswQkmcgnryAuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.202.0/23
Signature Algorithm: sha256WithRSAEncryption
13:44:1a:2e:c8:40:01:a0:ff:e7:64:2d:41:aa:62:fe:20:c2:
8a:c4:e5:4a:02:ea:7d:d8:86:2c:a6:b0:13:fb:4f:a3:c3:78:
cf:ca:cd:f7:35:d2:e2:9f:68:73:0c:dd:f6:f0:9f:b7:2f:72:
70:90:a4:87:2e:5a:b5:97:57:92:5d:ad:2d:4f:c2:3c:e5:0d:
82:96:02:7e:11:2f:21:9a:25:2d:c0:c9:a0:e9:5b:8c:a7:e8:
d8:a2:88:06:d5:85:bd:d9:91:37:42:bc:1d:0e:a8:a8:ed:d9:
57:48:1c:f7:6c:31:e4:97:42:36:a5:db:9e:6a:0a:7a:18:e4:
d1:d5:b6:fd:ea:3c:21:71:ff:38:9e:22:a7:39:40:07:5a:b3:
c8:31:41:5c:8e:1b:35:b1:18:68:3e:3b:24:72:88:76:f8:24:
31:7a:10:2e:71:02:8e:b5:82:d0:49:e4:76:4f:1b:04:e3:cd:
3e:5c:c0:c6:1a:7c:60:a9:ba:ee:62:64:9c:07:69:69:dd:e0:
d3:4d:de:e4:20:9e:57:ef:04:b9:95:20:95:dc:7b:38:b5:1a:
a3:64:98:94:70:73:da:97:a5:1b:83:fb:c9:91:3c:64:a1:42:
e7:56:5f:4e:2f:d7:c4:89:68:18:95:04:55:6e:2a:70:da:51:
b5:22:69:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:04 2024 by rpki-client on console-ams.rpki-client.org