Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/ypu_rnI72LHaXYZPS5BVWADGthw.roa
File: ypu_rnI72LHaXYZPS5BVWADGthw.roa (raw, json)
Hash identifier: mWRuLUt2BNpk6ASIbThhI9Vdm44MXvKmyfFbLxVx45g=
Subject key identifier: CA:9B:BF:AE:72:3B:D8:B1:DA:5D:86:4F:4B:90:55:58:00:C6:B6:1C
Certificate issuer: /CN=5e7e445904943e99830cb094988720fc977b1fbc
Certificate serial: 0182067F6AB20FF61B65B7A6E09AB3BFB79A
Authority key identifier: 5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/ypu_rnI72LHaXYZPS5BVWADGthw.roa
Signing time: Sat 16 Jul 2022 10:13:09 +0000
ROA not before: Sat 16 Jul 2022 10:13:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205473
IP address blocks: 194.113.196.0/24 maxlen: 24
194.113.197.0/24 maxlen: 24
194.113.198.0/23 maxlen: 23
194.113.198.0/24 maxlen: 24
194.113.196.0/22 maxlen: 22
194.113.199.0/24 maxlen: 24
194.113.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:06:7f:6a:b2:0f:f6:1b:65:b7:a6:e0:9a:b3:bf:b7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7e445904943e99830cb094988720fc977b1fbc
Validity
Not Before: Jul 16 10:13:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca9bbfae723bd8b1da5d864f4b90555800c6b61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:c2:4c:bb:56:13:f6:4f:ac:23:ba:c0:e0:
cf:32:3b:21:37:6f:ce:75:30:c0:ef:cf:1a:73:ee:
3c:ee:b4:2f:53:20:be:8e:65:62:ab:7e:d4:f5:2b:
e8:9c:04:62:ba:13:52:1a:c2:53:de:cb:45:e4:d3:
59:54:8d:1c:74:b1:04:e9:9f:f3:88:9d:60:c8:a8:
cf:a7:5b:81:5d:4f:5e:69:c0:6f:26:5f:da:87:57:
b5:3a:46:71:c8:b5:7f:5c:9f:14:b5:67:79:c1:d0:
35:2d:16:dc:29:10:0f:f6:2e:9c:ce:83:a7:ea:bc:
9d:27:d8:0e:dd:bb:30:12:b7:71:ff:40:56:de:7c:
5e:85:69:6c:61:f8:be:b0:7c:cf:fc:73:49:a2:1e:
13:7a:52:a6:76:87:7c:b7:65:34:60:75:51:d1:01:
0c:d0:11:08:b1:24:87:20:a9:dc:bc:93:be:52:bc:
97:96:0b:62:cc:27:00:45:43:d7:c5:1a:38:a2:78:
6c:47:00:5c:2b:45:d0:c9:ce:d6:fd:18:70:9b:8b:
9c:ad:22:a8:51:2b:8b:d4:70:8f:fa:c9:25:7a:be:
0e:a2:0f:44:e5:94:70:d2:ae:bc:0f:fc:3b:e1:b4:
97:0d:0b:9e:ec:65:3f:9a:ab:bc:ba:19:9e:a4:34:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:BF:AE:72:3B:D8:B1:DA:5D:86:4F:4B:90:55:58:00:C6:B6:1C
X509v3 Authority Key Identifier:
keyid:5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/ypu_rnI72LHaXYZPS5BVWADGthw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:c2:8e:4f:08:58:13:02:4c:c5:cd:2e:a6:2b:7a:92:e3:d6:
65:c5:64:0d:c0:92:97:48:e8:fa:9f:64:f9:cc:b4:d8:71:cb:
30:1a:64:7f:8d:32:7f:55:a4:0f:b7:bd:98:44:4f:11:e3:84:
39:ac:20:8e:18:09:be:f3:6f:43:71:5f:6b:d1:a4:2e:b9:1c:
32:5c:4c:8c:b0:5d:2c:55:b5:6c:6b:b4:ff:72:44:6c:f6:11:
5a:6b:bf:66:14:7f:c2:7f:76:fd:04:99:00:20:64:fe:82:86:
bb:0b:d4:dd:16:3e:0b:12:75:6e:dd:de:9a:64:65:d8:62:1e:
9e:ea:ed:e6:26:8e:ab:24:2e:9d:4b:ea:f4:1a:1c:ea:24:51:
66:33:17:6f:93:03:6c:a3:4d:38:1b:9f:2c:fa:fc:3a:41:b3:
8e:d0:4c:b8:2f:81:c5:63:78:19:36:1a:db:16:ba:a4:93:b3:
92:9e:df:a6:9e:ce:7f:ee:1c:89:07:2d:8d:f8:e0:ec:3b:9b:
68:fc:60:39:dd:95:46:4a:4f:bd:53:b2:f3:58:4d:d6:ca:81:
12:96:ee:c2:9f:78:94:8d:7f:25:cc:0a:8a:8b:1a:32:1f:89:
06:b4:db:cf:f1:65:d0:01:74:8b:f1:96:d7:e9:ef:78:be:76:
70:d8:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:41 2024 by rpki-client on console-fra.rpki-client.org