Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/iLKBUPqJy6ZtVLEvmymXKZgp-SA.roa
File: iLKBUPqJy6ZtVLEvmymXKZgp-SA.roa (raw, json)
Hash identifier: uznOSMabPfq0UdlLe0acHN/aZuOeu2Scr9fEjakuVUA=
Subject key identifier: 88:B2:81:50:FA:89:CB:A6:6D:54:B1:2F:9B:29:97:29:98:29:F9:20
Certificate issuer: /CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Certificate serial: 018E3366D7A89133B1F84EF463EA97B2908E
Authority key identifier: C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/iLKBUPqJy6ZtVLEvmymXKZgp-SA.roa
Signing time: Tue 12 Mar 2024 16:02:41 +0000
ROA not before: Tue 12 Mar 2024 16:02:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44203
IP address blocks: 185.211.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:66:d7:a8:91:33:b1:f8:4e:f4:63:ea:97:b2:90:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Validity
Not Before: Mar 12 16:02:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88b28150fa89cba66d54b12f9b2997299829f920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:d7:8a:89:e6:b3:55:40:14:46:fd:42:95:
43:59:ec:9a:17:07:0d:aa:1b:cf:cc:e5:39:19:05:
f4:c6:df:a4:36:6f:b8:5f:ac:97:0a:2b:97:53:fa:
9a:e8:ee:d9:bd:7b:7b:54:3f:8e:1a:fd:02:28:83:
0e:52:60:71:d6:0f:15:05:2f:55:5d:3c:7d:d7:f1:
cf:26:20:6c:3e:8a:19:ba:39:c1:d2:a4:1a:35:7c:
57:fc:65:43:b8:50:a2:9f:95:0e:41:50:70:cd:21:
2c:d7:6c:39:40:87:aa:24:ce:da:d2:10:0f:e8:83:
c6:d4:49:3f:d1:1a:c1:ed:30:ae:44:61:50:bf:4c:
b6:6f:34:ae:b9:58:f9:d3:23:3d:13:92:6c:03:c2:
fb:b2:23:78:4d:b9:d6:8d:02:c6:a2:d8:36:6f:a4:
54:cf:ae:45:ab:a3:e2:09:e3:5c:6a:8c:1e:28:7c:
29:01:dc:48:06:aa:a8:73:48:eb:ba:37:98:55:6c:
be:6c:3e:eb:26:a3:39:34:eb:2b:02:cd:5c:42:88:
2d:a3:18:ca:0c:25:18:8b:29:9a:ea:24:14:03:3d:
34:2a:78:31:ae:d2:87:00:dd:13:b3:ad:b9:5f:97:
9b:22:3e:3c:9e:9e:68:5f:79:6d:45:00:d1:c2:15:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B2:81:50:FA:89:CB:A6:6D:54:B1:2F:9B:29:97:29:98:29:F9:20
X509v3 Authority Key Identifier:
keyid:C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/iLKBUPqJy6ZtVLEvmymXKZgp-SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.202.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:af:b4:d1:37:18:d9:1f:f0:ff:fa:fc:c3:e0:d7:4f:25:2c:
46:8c:d7:c0:55:92:ed:ab:3a:f0:a4:a7:22:ac:b5:05:1e:89:
05:bd:89:11:b3:6f:ab:99:b6:79:c8:f5:b5:80:2f:e7:e5:db:
43:9a:05:ed:40:c9:99:41:5e:8e:a4:0b:3c:0f:aa:ae:35:27:
37:1d:ce:40:9e:b7:d5:55:f7:a0:b0:78:4b:74:8e:a2:35:47:
c2:fa:fd:51:86:81:b9:c8:a4:d7:f1:4d:77:47:1f:90:94:6e:
52:7b:87:86:ea:23:90:3a:8d:cf:4a:b1:5f:25:d5:2f:9e:91:
96:8a:c1:ce:98:ae:d4:95:79:5f:57:8c:b2:7d:34:45:5f:06:
f0:4b:ad:86:85:55:48:e5:83:bc:79:c1:a6:48:3c:cb:c6:82:
21:ce:8a:8b:45:f2:e9:dd:a3:f6:53:2f:71:b6:01:7d:81:18:
64:4b:cb:29:08:f9:df:64:e3:8b:29:a2:dc:c6:ea:67:04:01:
64:c3:60:26:49:b1:59:fa:9e:f4:78:9d:9e:f8:6a:4a:cc:f2:
08:cd:cb:43:b2:59:15:e3:b5:9f:0d:b1:f4:a9:a0:15:9a:ef:
c4:37:97:0a:ec:f7:d4:34:6e:25:1e:31:80:19:d8:84:23:9a:
41:de:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 12:52:45 2024 by rpki-client on console-ams.rpki-client.org