Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/RYPlP5HRTrXZY9rxSiNK3vOq1Oc.roa
File: RYPlP5HRTrXZY9rxSiNK3vOq1Oc.roa (raw, json)
Hash identifier: d0QR3C9r6pUGtNARvcwMsE6C616EzaveL5+rh4OiqpU=
Subject key identifier: 45:83:E5:3F:91:D1:4E:B5:D9:63:DA:F1:4A:23:4A:DE:F3:AA:D4:E7
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01856C2ECEE9B0FC112434F8972F6E6D2B80
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/RYPlP5HRTrXZY9rxSiNK3vOq1Oc.roa
Signing time: Sun 01 Jan 2023 07:14:45 +0000
ROA not before: Sun 01 Jan 2023 07:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5464
IP address blocks: 195.184.92.0/23 maxlen: 23
109.95.240.0/21 maxlen: 21
194.0.229.0/24 maxlen: 24
2001:67c:33c::/48 maxlen: 48
2a00:1df0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:ce:e9:b0:fc:11:24:34:f8:97:2f:6e:6d:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Jan 1 07:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4583e53f91d14eb5d963daf14a234adef3aad4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:93:f1:f3:c0:3c:54:3a:65:03:4a:8e:bf:2c:
32:5f:55:a6:fa:a7:0c:8e:46:c4:74:77:f9:15:89:
4a:64:ce:f6:69:f7:9c:12:85:e9:e5:e7:f7:3d:9d:
42:66:18:36:93:47:52:7d:07:99:6f:e2:77:fc:71:
95:98:89:5e:f6:cc:35:97:06:8a:8e:e2:c2:c3:4f:
06:c3:b9:2d:02:58:48:fd:e7:10:6c:67:8e:1b:a7:
27:e9:06:85:88:0a:8b:f7:8d:16:38:40:6e:b1:91:
04:35:f0:36:71:73:98:0b:32:d2:9c:cf:67:97:1d:
0f:23:eb:72:c3:0e:42:1f:2d:5d:eb:08:6b:51:a5:
72:e9:e3:63:bb:b4:4f:99:21:e5:ef:38:f1:12:3b:
b4:78:17:68:ed:8c:02:10:5b:e6:b2:65:7b:36:8a:
09:91:e7:ba:0c:c9:87:2e:f8:ee:f4:db:59:47:99:
4c:b5:5c:04:3a:7b:20:34:b0:ff:b6:eb:7b:51:8c:
3f:8a:54:6f:85:4a:50:5b:9e:53:ab:3d:ed:4d:d7:
d9:dd:7a:47:b6:d9:7f:1e:c8:b4:55:a7:69:34:1a:
10:fa:2f:26:74:e3:99:18:2a:76:bb:ff:e4:ce:ee:
2b:b8:70:54:bd:99:b7:12:1b:17:bd:bd:be:f1:e8:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:E5:3F:91:D1:4E:B5:D9:63:DA:F1:4A:23:4A:DE:F3:AA:D4:E7
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/RYPlP5HRTrXZY9rxSiNK3vOq1Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.240.0/21
194.0.229.0/24
195.184.92.0/23
IPv6:
2001:67c:33c::/48
2a00:1df0::/32
Signature Algorithm: sha256WithRSAEncryption
04:b8:7a:84:be:25:25:10:c9:42:59:0b:ee:27:9c:de:0b:c9:
2a:e2:e6:72:00:4a:b9:3d:93:28:2a:23:14:a7:3b:57:fb:fb:
44:53:39:b3:d6:ef:e0:ca:b7:e7:02:e3:b7:17:95:b7:0d:14:
46:e8:60:c4:63:c5:ed:ef:04:9d:1f:ef:d4:56:46:a9:43:91:
11:f5:46:ca:db:51:73:5a:3e:44:93:91:c0:5d:8d:a9:05:4a:
69:b7:1a:ce:78:52:06:19:52:84:04:ef:8c:b6:e0:c4:c0:1c:
9b:81:e8:83:e2:7b:55:46:ec:6f:0f:db:f1:8f:89:f6:14:7d:
1c:5f:e8:b5:f0:f8:45:c9:76:a6:19:51:7d:7d:6e:37:e2:bd:
51:22:2b:3c:b5:ba:3a:6a:b2:f3:de:f3:b6:a7:2e:20:52:ff:
0c:0b:d3:b0:72:5d:8a:bb:3c:18:dc:98:a2:0d:69:23:53:d0:
6b:11:a9:a0:3e:13:ed:45:8f:81:0f:a5:37:d1:90:df:a7:12:
5c:21:cf:26:4e:8c:3e:95:dc:c7:ce:ec:f8:73:6c:1d:ee:53:
37:d6:7f:b4:a4:78:83:1b:2b:36:68:23:f2:42:14:e0:41:f0:
5e:f4:a0:21:6b:34:7a:38:49:94:47:dd:ea:b2:17:b2:b2:89:
b6:44:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:46 2024 by rpki-client on console-fra.rpki-client.org