Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/vurRcz89gPZF-VA64N3ozmpBGww.roa
File: vurRcz89gPZF-VA64N3ozmpBGww.roa (raw, json)
Hash identifier: PQLFtg2bg3UkNh1Qc+lrXrIzLfOrBYIdWbSPlkLNyHs=
Subject key identifier: BE:EA:D1:73:3F:3D:80:F6:45:F9:50:3A:E0:DD:E8:CE:6A:41:1B:0C
Certificate issuer: /CN=344c27728554e8fb3780c1e83e8e6517c659cd1b
Certificate serial: 018964C05D5F660C9D64E45C3C09DCBD906F
Authority key identifier: 34:4C:27:72:85:54:E8:FB:37:80:C1:E8:3E:8E:65:17:C6:59:CD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwncoVU6Ps3gMHoPo5lF8ZZzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/vurRcz89gPZF-VA64N3ozmpBGww.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 185.202.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5d:5f:66:0c:9d:64:e4:5c:3c:09:dc:bd:90:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c27728554e8fb3780c1e83e8e6517c659cd1b
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beead1733f3d80f645f9503ae0dde8ce6a411b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:e8:ea:50:6b:1e:a5:bd:a4:e4:c7:bd:8a:
c7:51:e7:80:3f:55:c5:57:c8:03:6b:37:7d:80:89:
29:c7:21:40:d7:79:e9:fe:04:61:bc:de:66:5b:68:
63:9d:df:31:02:bb:6a:6b:7b:02:d8:70:2b:88:5c:
e3:ca:1d:7e:2e:28:c7:b1:dd:8a:be:42:9c:2d:ed:
b3:68:73:9a:56:20:13:de:a0:a6:5f:82:61:94:77:
68:c6:ed:72:b1:c3:cc:89:92:dd:05:ff:70:8c:48:
15:3f:4a:fa:94:9e:38:27:b9:fe:fd:f9:b0:ee:b7:
fb:26:c2:c4:f2:68:f0:97:ad:cb:c8:48:24:35:c8:
5a:b0:2e:69:3c:70:7e:b3:e5:49:8b:88:7a:02:09:
0b:ba:f4:91:93:5d:73:bf:0d:4d:18:a9:e1:af:6a:
c7:86:07:03:4d:1e:eb:fb:f4:7a:50:4b:21:ee:90:
41:4b:3d:a5:71:60:6e:91:da:cd:59:39:84:a0:59:
b2:e9:0f:86:00:53:5a:0d:d6:89:a3:66:65:25:98:
f5:f0:87:92:d9:cc:39:98:80:e3:c3:d0:e5:a6:98:
2e:24:85:b2:a8:44:3a:74:9b:43:71:7d:76:96:fc:
c7:16:23:69:e0:de:53:ca:ad:60:b8:e5:82:6f:3b:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EA:D1:73:3F:3D:80:F6:45:F9:50:3A:E0:DD:E8:CE:6A:41:1B:0C
X509v3 Authority Key Identifier:
keyid:34:4C:27:72:85:54:E8:FB:37:80:C1:E8:3E:8E:65:17:C6:59:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwncoVU6Ps3gMHoPo5lF8ZZzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/vurRcz89gPZF-VA64N3ozmpBGww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aa6cab-0083-4453-91b4-08015a568389/1/NEwncoVU6Ps3gMHoPo5lF8ZZzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5f:30:9e:01:8d:42:57:4e:7b:ac:e1:b5:12:58:49:5b:8b:
97:2a:19:71:94:3b:0e:3f:e8:af:de:32:d1:73:6f:fa:79:ea:
06:c6:ce:ed:80:65:85:24:b4:a4:5f:0d:ba:2a:4e:bc:a7:7b:
e5:3d:90:61:5e:b0:d1:06:bb:99:ff:56:bc:07:e6:ab:85:a8:
b6:21:60:da:8f:ac:e9:9b:a9:8a:f0:a3:29:1e:bc:89:28:2c:
e5:d7:c2:66:33:4d:af:d7:e4:30:a9:26:a7:40:77:33:59:3c:
58:84:05:70:d4:8b:46:4f:60:29:c7:7b:92:7f:14:9c:28:bf:
4f:e6:c9:f3:51:b9:d5:ef:6b:41:a6:07:0c:8f:24:8e:6f:38:
b7:93:3c:a0:08:35:cc:4a:c4:d7:78:2b:f6:e6:26:e1:c2:18:
3d:51:ff:74:ce:ec:41:6e:7c:97:8e:20:21:4b:30:33:a1:de:
fe:c7:4f:ab:37:85:2c:b1:08:9b:aa:52:8c:06:4c:5d:82:5c:
99:59:12:2e:f3:b6:d0:5e:0b:0d:a4:18:27:ce:08:8c:b0:07:
b8:16:a2:a5:fe:4b:53:4b:5e:d6:b0:b5:19:26:a4:fd:e2:49:
fd:88:7f:71:70:09:fb:f1:45:be:e0:af:a1:f0:b4:88:9e:48:
3b:31:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:20 2024 by rpki-client on console-fra.rpki-client.org