Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/yqVuyyRbIP4HzXK_jNChK8XkmNA.roa
File: yqVuyyRbIP4HzXK_jNChK8XkmNA.roa (raw, json)
Hash identifier: GjiUj1onUSJWOq1GzoR9QcOgnY4CfzwKWScIHoXpMhM=
Subject key identifier: CA:A5:6E:CB:24:5B:20:FE:07:CD:72:BF:8C:D0:A1:2B:C5:E4:98:D0
Certificate issuer: /CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Certificate serial: 018CC94E2F7558EC0CB8BE8F5109094ADD29
Authority key identifier: 45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/yqVuyyRbIP4HzXK_jNChK8XkmNA.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3561
IP address blocks: 185.253.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2f:75:58:ec:0c:b8:be:8f:51:09:09:4a:dd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caa56ecb245b20fe07cd72bf8cd0a12bc5e498d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:1f:98:f2:27:82:69:f0:ff:4b:43:ae:cc:
e0:8d:18:16:a9:ee:59:19:af:1c:97:91:7a:09:85:
68:8c:16:27:99:f4:94:53:dc:fc:03:07:2a:9b:be:
44:49:82:bb:6d:06:97:8e:c8:5e:18:f8:b0:eb:23:
65:ac:3a:4c:fa:4c:f2:2e:20:7d:7e:38:02:c2:03:
1e:bd:96:a5:eb:1b:73:ab:73:2d:d2:ce:f8:f5:9e:
27:35:53:86:5c:e8:44:75:c3:3e:bc:06:b2:24:f9:
5e:db:5a:f0:a9:c5:63:18:34:de:d3:04:d0:5c:d5:
77:a3:d6:f0:75:73:f1:8e:01:01:1c:a4:51:a5:ee:
b8:33:68:54:29:7b:ad:2b:55:78:73:26:4c:03:a6:
80:f1:0c:13:af:d8:ff:5d:4f:fb:ae:5a:4d:dd:3a:
70:fe:80:a1:e1:3c:3f:1d:35:ef:0c:bb:6a:2c:a8:
0e:f6:22:24:38:13:84:f0:62:7e:aa:9b:3a:7f:9c:
81:60:8e:9e:79:2e:a3:a0:be:d1:a3:2d:31:9b:39:
22:8d:56:07:08:51:49:8f:96:ce:e6:dc:2e:09:a2:
08:80:1d:39:1a:e0:93:6e:4e:a6:7f:99:78:03:35:
f5:9c:10:33:24:5c:cc:0b:a6:a7:bd:51:69:d0:cd:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A5:6E:CB:24:5B:20:FE:07:CD:72:BF:8C:D0:A1:2B:C5:E4:98:D0
X509v3 Authority Key Identifier:
keyid:45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/yqVuyyRbIP4HzXK_jNChK8XkmNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:74:2e:0c:a9:93:9c:f7:eb:d7:50:82:f2:80:71:c0:b4:c7:
50:8d:42:73:fa:11:c4:af:5b:b6:97:79:a0:0d:50:b4:ee:05:
1e:b3:51:2c:1f:8a:2a:89:af:25:10:92:af:09:10:32:97:17:
62:e7:77:c8:9e:f4:98:ca:05:de:54:d2:ca:b1:d5:f7:67:cc:
c4:44:a3:44:4f:fa:4f:53:32:25:90:1d:94:1a:7b:e1:f3:64:
db:bb:88:d0:33:15:b3:1a:fa:00:b4:70:49:a1:03:3e:68:48:
dd:9f:54:4f:88:09:da:c0:be:af:c6:95:46:6f:99:e6:a2:8f:
11:33:16:0f:07:59:6c:56:1c:aa:bb:67:03:ea:43:8a:a2:ab:
76:d4:b9:d9:15:d1:af:25:f2:5f:e9:a2:6a:4b:b2:9a:f3:2a:
3d:d1:3a:d8:17:b2:45:1f:c8:3f:89:0e:9e:55:da:82:ac:d0:
4b:44:d7:92:4a:ce:8b:04:69:6d:e0:a4:53:6b:f6:42:a8:88:
e1:3b:1d:e0:a2:76:d1:68:ba:57:7a:33:9b:f7:ef:bd:41:3a:
de:0e:b9:4d:9f:50:a3:9d:e3:65:c0:63:75:16:3c:64:18:77:
35:1e:ed:e5:3d:e2:d0:d6:75:a4:c9:3f:e4:14:6f:b3:8d:40:
77:ce:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:27 2024 by rpki-client on console-fra.rpki-client.org