Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/ycm7WLYMET6xWCfLWMhEw2mSla8.roa
File: ycm7WLYMET6xWCfLWMhEw2mSla8.roa (raw, json)
Hash identifier: I0g/XPzoketiFovGEYIxOjX4HLP8315pJrVENYnaGGY=
Subject key identifier: C9:C9:BB:58:B6:0C:11:3E:B1:58:27:CB:58:C8:44:C3:69:92:95:AF
Certificate issuer: /CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Certificate serial: 01856D93EF862D091281EC9F23E9210B952A
Authority key identifier: 81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/ycm7WLYMET6xWCfLWMhEw2mSla8.roa
Signing time: Sun 01 Jan 2023 13:44:49 +0000
ROA not before: Sun 01 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.14.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ef:86:2d:09:12:81:ec:9f:23:e9:21:0b:95:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Validity
Not Before: Jan 1 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9c9bb58b60c113eb15827cb58c844c3699295af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:bd:0f:31:bb:49:31:41:23:a3:c8:2f:48:
6f:98:38:a7:0d:b6:5a:a7:d4:8d:71:66:fe:c2:69:
27:e5:3a:cb:b3:5b:41:7c:c4:a7:58:d7:c7:ee:ec:
bf:7e:47:a2:a5:1d:f3:5c:08:de:0b:83:4d:90:34:
5a:6a:af:04:07:87:5d:f9:5d:fe:43:df:e9:8b:72:
ee:11:f6:1c:df:cf:34:18:4d:26:30:a2:80:2c:ff:
61:d6:ea:76:a6:9c:96:c7:95:aa:d9:cc:98:09:ec:
d8:2e:01:e1:a2:94:5a:31:19:f8:8c:af:e1:f9:72:
25:29:54:f2:c5:19:de:f8:28:0f:de:7a:79:7b:36:
85:06:e5:fe:96:ea:6f:07:28:35:c0:0d:ab:68:0c:
03:cd:8a:82:cf:91:35:ff:9c:8d:48:3d:6b:aa:13:
33:9c:3c:17:6e:c7:4e:0d:9b:b7:8b:71:31:92:69:
0d:40:bd:cd:7e:29:3b:80:37:b2:86:d6:ed:0c:7c:
db:68:fc:e8:3c:91:5d:df:15:4d:96:c9:c4:31:94:
ce:5e:4d:74:11:32:7a:85:bf:ec:38:7b:d6:8e:84:
47:8b:cd:d1:38:00:6c:d0:17:f8:1f:53:25:02:51:
4e:1b:b5:d4:18:b3:46:d9:c1:e6:a1:0b:ce:db:7a:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:BB:58:B6:0C:11:3E:B1:58:27:CB:58:C8:44:C3:69:92:95:AF
X509v3 Authority Key Identifier:
keyid:81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/ycm7WLYMET6xWCfLWMhEw2mSla8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/gXJOewyyM65-fy6zdmlZ_Ggn-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.172.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f1:d7:7e:db:3e:b4:d2:02:09:3c:1b:29:17:72:3f:df:92:
c3:db:14:fa:63:e9:5b:9d:71:e5:f5:f9:4d:a6:88:f7:5d:78:
72:0d:a8:bc:01:75:8a:15:79:66:3a:62:a2:e4:e5:8a:cd:2d:
d7:e5:d9:4d:52:1b:2b:44:65:77:dd:ff:f2:ec:cf:85:79:84:
43:0f:22:e2:e1:ab:4d:2d:16:dc:8a:dc:ad:dd:49:63:7c:87:
90:77:f7:a9:24:6a:14:47:77:09:15:7d:1c:4e:ef:78:7c:37:
47:90:69:81:e2:49:ab:7b:44:c6:0e:a5:34:47:a0:02:b8:fe:
c6:26:d0:27:5a:aa:fb:47:83:6c:3f:2d:97:f2:86:56:bc:4d:
f5:8d:92:c3:20:12:79:32:80:ed:51:11:27:be:81:da:0d:6a:
d4:36:d4:85:8d:e6:da:7e:9a:cd:bd:a0:c5:df:79:af:26:c7:
6e:58:46:53:c2:df:8b:c9:d4:78:0b:e1:dc:14:af:dd:6b:03:
01:8f:01:c4:03:1e:01:a3:77:5d:0b:ff:d5:47:b4:a4:26:00:
f0:9b:f9:bf:fe:b9:87:86:41:b0:f4:5d:b3:3a:1c:78:19:e0:
81:b1:ba:d0:2a:2d:10:75:1e:de:6a:3e:11:05:dc:aa:db:c1:
12:8e:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:27 2024 by rpki-client on console-ams.rpki-client.org