Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/y_3V5aVVo_E-2RU57svRJywDUV4.roa
File: y_3V5aVVo_E-2RU57svRJywDUV4.roa (raw, json)
Hash identifier: pHLwiCbXWcggUGTUQtfIGqrP6qKyyR1QPLu+Fa6jCao=
Subject key identifier: CB:FD:D5:E5:A5:55:A3:F1:3E:D9:15:39:EE:CB:D1:27:2C:03:51:5E
Certificate issuer: /CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Certificate serial: 018571279A9AD7A353E875C3F08B139E542D
Authority key identifier: 9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/y_3V5aVVo_E-2RU57svRJywDUV4.roa
Signing time: Mon 02 Jan 2023 06:24:58 +0000
ROA not before: Mon 02 Jan 2023 06:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50020
IP address blocks: 185.201.36.0/22 maxlen: 22
193.104.79.0/24 maxlen: 24
46.16.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:9a:9a:d7:a3:53:e8:75:c3:f0:8b:13:9e:54:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Validity
Not Before: Jan 2 06:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbfdd5e5a555a3f13ed91539eecbd1272c03515e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:f4:a8:a8:73:fa:49:80:25:76:54:b9:e8:
96:e9:5c:db:da:42:8a:8b:d4:0c:59:a6:b4:69:6c:
c2:d7:40:20:8b:28:e1:91:d1:28:a8:de:bd:ff:07:
35:77:47:9d:de:53:55:39:f7:48:93:12:76:be:7f:
c6:97:5c:12:f3:19:4e:47:1a:f0:55:aa:39:86:cc:
63:57:84:06:52:bd:e2:bc:d2:98:7b:5f:59:eb:e3:
a4:de:03:6b:e9:32:d0:0a:fb:b6:3c:cd:ee:0b:63:
1d:1d:8c:1c:c3:a8:5c:3a:e7:fb:74:37:19:68:b9:
98:0d:bc:40:b2:0d:39:1a:a6:c5:7a:7b:e4:d6:0c:
ca:d7:3d:9c:17:24:54:04:5e:ed:d7:e4:03:69:14:
ba:c0:6d:7c:84:cd:c6:cf:73:ae:dd:fb:11:d7:23:
9a:51:37:b3:46:31:48:61:6f:a8:6c:f8:7c:c8:21:
99:39:ba:26:e5:fe:95:fa:d2:a2:6d:a8:7b:01:c7:
ad:64:d4:d0:b1:8e:51:db:b3:1c:fc:d3:d8:e8:0f:
bc:54:9d:4c:f5:2f:ec:10:78:e0:7b:f5:ad:c0:a2:
d7:e1:96:00:04:d4:c9:de:5f:f9:25:c2:5f:0e:08:
27:d3:53:e7:72:ba:21:3a:a8:73:49:62:5c:ed:c6:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FD:D5:E5:A5:55:A3:F1:3E:D9:15:39:EE:CB:D1:27:2C:03:51:5E
X509v3 Authority Key Identifier:
keyid:9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/y_3V5aVVo_E-2RU57svRJywDUV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.192.0/21
185.201.36.0/22
193.104.79.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fc:3f:04:a6:a1:c3:b4:5f:56:20:f3:a8:5d:5b:91:97:d5:
32:f4:a7:d1:f5:b8:7a:dc:4c:46:21:9e:9f:ee:2b:b5:d1:f6:
fb:3a:df:e7:8a:d2:be:27:bf:97:8a:2a:7e:34:d1:d6:4b:e7:
92:63:c0:82:42:29:d1:d3:11:59:4e:e3:a5:49:0e:d5:16:97:
b9:f8:67:76:dd:31:71:48:63:2b:16:4b:be:7b:2f:63:c2:cc:
e0:68:f8:a8:df:9a:a0:7d:93:1b:d6:65:01:20:ff:e4:2d:58:
69:ed:0d:3b:b5:61:6c:7b:65:e4:d2:d6:cc:92:12:77:e5:65:
35:11:18:58:49:e9:60:01:72:d2:ab:54:a4:64:f9:ca:d7:46:
ed:0b:bd:b7:3f:91:65:48:c2:20:d6:e1:9e:3b:bd:16:63:e4:
46:da:65:ed:3a:9d:6d:8d:ac:d7:70:c9:5f:56:24:6a:6e:e3:
18:69:77:bf:a7:ed:4d:5a:4a:a5:cb:96:fb:7c:e8:9c:0c:f4:
d2:d5:29:f2:8a:5e:48:b6:bc:33:2d:91:c6:ae:b2:02:77:ab:
18:95:30:d0:c7:67:f6:3b:42:9c:9e:d4:d3:a2:d4:8a:ea:26:
90:ac:70:27:78:45:1b:7b:eb:0d:a5:5e:ac:8d:74:1e:05:7b:
90:91:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:43 2024 by rpki-client on console-fra.rpki-client.org