Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ykADJFVK8HBxR5Ng6edukK2rFKg.roa
File: ykADJFVK8HBxR5Ng6edukK2rFKg.roa (raw, json)
Hash identifier: rjJq9H02+J+yN3WRjQ3h/UvOtqmTji6Zhkp79O6KLWY=
Subject key identifier: CA:40:03:24:55:4A:F0:70:71:47:93:60:E9:E7:6E:90:AD:AB:14:A8
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0186708432E7334C1211B13CB9AB8F637875
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ykADJFVK8HBxR5Ng6edukK2rFKg.roa
Signing time: Mon 20 Feb 2023 20:29:17 +0000
ROA not before: Mon 20 Feb 2023 20:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 92.114.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:84:32:e7:33:4c:12:11:b1:3c:b9:ab:8f:63:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Feb 20 20:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca400324554af07071479360e9e76e90adab14a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:2e:82:3e:45:88:7d:c8:0b:9a:91:45:a5:
37:cd:fb:1b:18:7a:9a:e2:96:e3:1f:e0:b0:ac:5b:
64:6f:40:ef:c6:2f:57:71:f2:07:f2:45:a6:ea:d9:
71:ee:32:ba:02:8c:fc:50:e1:0e:23:3e:b7:f6:d2:
12:65:7c:ef:b9:8b:23:7f:72:f1:49:20:72:c3:a6:
d2:c9:ac:28:35:80:1a:7c:ad:aa:be:8a:3d:85:59:
ac:7f:49:2c:b8:7b:78:52:5c:6e:99:02:e2:e6:61:
09:6f:7a:e5:e4:c2:17:f8:8e:76:aa:b4:e2:5a:e6:
ae:4f:0c:3c:60:5a:e5:46:eb:ce:35:68:ae:cc:6e:
88:8a:9c:3d:f9:c8:b0:b8:4d:bd:b6:41:2e:4a:e3:
0d:10:9a:e2:72:4a:18:9e:03:59:9f:3e:46:65:90:
0a:18:3a:8b:63:32:70:b6:a7:1a:96:b3:a7:86:02:
0f:ab:87:40:92:80:6e:26:1c:13:a6:fa:c5:4a:2f:
08:af:45:9d:5b:f7:03:b1:8e:2f:92:6c:79:03:03:
73:07:c0:bd:c8:d3:19:cc:a0:df:b4:6d:be:66:90:
70:3f:2d:94:96:41:f8:4b:f1:be:50:00:d5:91:96:
82:e6:24:5c:cb:ed:f6:54:07:d7:b7:b0:17:dc:37:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:03:24:55:4A:F0:70:71:47:93:60:E9:E7:6E:90:AD:AB:14:A8
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ykADJFVK8HBxR5Ng6edukK2rFKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fd:d9:78:ef:4a:65:8d:3a:00:5a:6a:67:5a:ae:12:72:11:
81:4a:ab:8f:24:12:bf:f8:73:c3:8d:43:db:e6:b0:05:8a:60:
ff:b5:ba:41:67:98:49:16:f6:71:09:41:b1:0f:c6:f5:37:2c:
44:e0:d6:87:07:90:c6:f2:10:ba:3e:ef:e2:f6:1d:bb:79:1d:
5a:56:34:c4:ae:16:7b:f8:d9:d4:ca:76:9d:40:e8:17:2a:4c:
ab:24:60:08:a1:7e:b2:ef:93:43:9c:73:bb:de:a9:a4:58:52:
60:f3:06:07:f1:86:83:b9:0b:c3:76:7b:8d:1c:3f:51:cb:cf:
fc:d7:6e:32:4c:b3:8f:0f:cd:be:97:68:23:7e:e9:43:bf:19:
6d:49:4f:c8:f6:d3:a2:e0:2a:12:4a:d8:26:ca:8b:14:79:96:
8d:9b:3c:08:d2:bf:ba:2d:7c:99:5c:d8:26:78:13:a4:70:b5:
e7:44:19:63:17:95:12:ff:87:7b:e0:3f:9b:84:84:ef:8d:28:
4e:22:85:44:8d:40:a7:bb:a5:65:14:7b:5f:06:e9:0d:4f:bf:
47:c8:d3:fc:c0:d6:3f:fa:99:05:7d:32:92:c2:40:a1:84:53:
7a:36:ab:23:d3:d1:2d:91:02:07:52:a0:5c:23:22:d9:b8:89:
f3:e0:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org