Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/b2uiN-RTrtHIUR5ExCICg3dQpLw.roa
File: b2uiN-RTrtHIUR5ExCICg3dQpLw.roa (raw, json)
Hash identifier: YIQ7dwM+CEBuNyuzyuIaM7qfDrk8tRKFQNDyc4ncCAA=
Subject key identifier: 6F:6B:A2:37:E4:53:AE:D1:C8:51:1E:44:C4:22:02:83:77:50:A4:BC
Certificate issuer: /CN=2b8966d0f14fd59993ca4878e774fa4779036694
Certificate serial: 018CC2DAB2E2316628F6AD499DB1EBB19122
Authority key identifier: 2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/b2uiN-RTrtHIUR5ExCICg3dQpLw.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200780
IP address blocks: 185.40.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b2:e2:31:66:28:f6:ad:49:9d:b1:eb:b1:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b8966d0f14fd59993ca4878e774fa4779036694
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f6ba237e453aed1c8511e44c42202837750a4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:b9:e8:a2:db:44:46:4e:58:68:f6:36:ab:
17:95:49:ac:ec:bd:3a:f2:92:ad:3e:b6:ad:f5:18:
8f:ae:2f:50:aa:9f:c0:f0:37:7c:ee:c6:09:e0:d1:
a4:92:0e:fb:c9:66:94:2e:db:b3:3e:34:a5:5e:41:
57:0c:30:75:2d:58:52:67:40:15:8d:e6:f9:22:dd:
b6:4d:20:32:cb:a8:85:d4:8f:04:cf:d2:fb:a6:21:
d2:c1:de:7b:cd:d4:85:77:91:b1:2f:b1:03:36:16:
f8:37:7a:ae:24:15:d2:94:45:02:ab:4d:ea:60:76:
80:1f:b1:f6:5a:8e:6d:8f:3a:6f:f2:02:c7:04:ad:
7d:15:67:56:b8:82:43:6a:60:f3:c3:3e:06:08:47:
c9:7b:bb:7f:24:1d:ab:c8:d1:d2:c9:f7:ad:2d:9f:
09:6d:64:86:42:af:83:e2:a1:98:2e:b0:09:91:93:
95:16:db:90:5a:42:cc:c0:41:d9:90:44:d1:a4:22:
a2:b2:ce:1c:68:88:77:59:18:1c:85:86:45:d9:15:
10:e8:b8:16:ed:f3:66:72:05:4a:e1:eb:9e:a6:40:
12:23:e7:b5:fe:d6:72:9b:55:81:50:a0:45:70:1c:
4d:86:b0:b0:5e:0c:a7:9d:dd:4f:9b:e3:75:48:58:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:A2:37:E4:53:AE:D1:C8:51:1E:44:C4:22:02:83:77:50:A4:BC
X509v3 Authority Key Identifier:
keyid:2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/b2uiN-RTrtHIUR5ExCICg3dQpLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.102.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:f1:39:f7:c6:5c:77:6e:5d:df:75:cd:04:cc:6e:30:4c:79:
d5:6b:cf:31:0f:da:be:88:ce:52:ae:a9:ce:21:b8:94:ca:9e:
35:34:d2:32:2a:7f:3a:64:d4:70:07:8a:dd:f8:f8:40:d5:a6:
69:de:64:87:ce:96:66:52:b1:69:be:e4:49:c8:a1:d6:71:22:
83:a7:f0:09:8b:fd:2d:e2:78:dd:59:29:a2:2a:b0:b4:a7:b4:
06:29:8c:27:0e:cc:66:82:c0:24:a1:cc:52:c9:07:d0:73:37:
0b:81:e4:77:6c:cb:0b:ba:42:98:0e:c7:1a:7a:54:b9:07:e6:
e5:57:e5:b5:d2:73:88:a4:04:84:55:df:40:2b:e2:1e:52:db:
db:ce:e5:04:f5:cf:78:54:4c:52:84:df:9a:e7:28:3a:b1:84:
a2:fc:2e:cf:a1:b3:7d:2e:4d:76:87:8b:47:fe:c9:a0:74:c0:
80:4d:42:19:be:00:33:69:2c:59:60:70:5e:c5:40:e6:66:14:
b8:0b:fb:c0:13:06:f8:7c:a9:2e:9a:90:54:2e:6a:39:58:fb:
90:69:5b:eb:6c:85:81:52:6a:54:f1:8a:b7:03:d6:97:b2:bd:
a8:64:ac:4a:4b:4d:25:f0:5c:20:8b:8d:b5:04:58:55:04:1a:
2b:01:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 16:35:57 2024 by rpki-client on console-ams.rpki-client.org