Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/YBsCjpPS1tRDP3xf0CJbJBybqis.roa
File: YBsCjpPS1tRDP3xf0CJbJBybqis.roa (raw, json)
Hash identifier: zfdiDEin+a5jrQYbGG7r6Z1jnFul+9O7UYeRMYqcZCg=
Subject key identifier: 60:1B:02:8E:93:D2:D6:D4:43:3F:7C:5F:D0:22:5B:24:1C:9B:AA:2B
Certificate issuer: /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial: 0182F929CD1D4B4AF1AAFBA3838099ECF411
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/YBsCjpPS1tRDP3xf0CJbJBybqis.roa
Signing time: Thu 01 Sep 2022 13:07:22 +0000
ROA not before: Thu 01 Sep 2022 13:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 194.49.86.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:29:cd:1d:4b:4a:f1:aa:fb:a3:83:80:99:ec:f4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Validity
Not Before: Sep 1 13:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=601b028e93d2d6d4433f7c5fd0225b241c9baa2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:da:87:2e:2e:57:21:a4:1f:e0:06:ca:2c:
2a:d4:e9:46:05:d0:b1:70:62:35:00:34:bd:e2:57:
16:35:6e:46:01:23:86:5e:91:1a:97:e4:a5:95:22:
34:2a:d5:80:4b:1d:a8:81:1c:3b:1f:44:98:72:d7:
6c:fe:49:de:89:a5:70:fd:8f:b3:29:b8:0f:28:9d:
fd:35:bf:69:23:48:c6:3a:e4:c7:b5:e8:56:15:22:
a3:6e:e7:1c:4b:3e:e5:27:a6:c0:23:34:ff:95:13:
06:14:c9:fa:8d:8f:ba:92:7d:3f:8b:e6:12:bd:dc:
05:02:10:e4:d6:b1:6b:07:76:25:15:1d:e5:be:1e:
01:74:25:d5:ff:1e:10:72:c2:c1:a5:a8:f6:6e:d3:
73:d4:f5:a8:26:88:90:10:f3:7d:46:ef:22:bd:01:
0f:dc:9e:ff:c6:0b:23:40:9b:fe:5b:92:2e:b5:39:
87:65:a5:49:54:16:e3:99:24:5b:c5:90:52:9d:6e:
b1:4f:ee:00:b8:3b:26:f6:1b:c0:ab:61:68:da:90:
b2:2a:49:b8:72:b9:84:b5:8b:3f:97:3c:b0:bf:48:
ba:44:90:87:04:5a:2e:c6:da:a7:b8:ea:0e:24:19:
42:2f:42:ae:f4:f3:95:d9:30:91:6c:70:0f:8b:69:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1B:02:8E:93:D2:D6:D4:43:3F:7C:5F:D0:22:5B:24:1C:9B:AA:2B
X509v3 Authority Key Identifier:
keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/YBsCjpPS1tRDP3xf0CJbJBybqis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.86.0/24
194.49.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:27:02:fa:0d:66:33:16:07:6a:be:04:26:95:e4:4e:d5:d7:
4b:c4:b9:a5:56:41:10:ab:68:d4:a1:87:b9:7d:4e:11:2e:08:
b5:aa:de:fd:31:30:4f:06:a8:f8:22:73:76:e6:d9:16:98:f9:
d0:6f:55:c8:07:68:e4:81:16:80:37:b2:cd:53:34:40:86:2a:
f5:40:03:5a:fd:cb:58:14:c2:83:69:3c:12:f1:16:7e:cb:e6:
b3:29:50:38:2b:b0:4d:15:dc:3a:8e:33:f6:4b:1b:b5:2c:79:
3a:8e:44:1c:b4:86:35:a4:86:42:b3:a0:9d:6c:6e:3b:b0:b8:
b6:b2:34:07:8d:a5:12:d6:05:ee:ad:45:cf:ce:89:2b:c4:7b:
b9:aa:62:ef:98:41:a5:c6:72:a7:39:82:16:6e:d5:73:8a:3f:
e2:99:a3:1d:21:60:e5:68:a6:9c:68:a9:18:84:38:17:2b:33:
1c:5b:5a:2e:40:f7:65:ba:d2:e4:7b:bb:9a:d5:47:4b:3a:d6:
73:eb:a1:9c:da:af:0d:41:8f:bb:a5:87:dc:8d:c0:54:8a:ba:
88:95:ab:b8:55:84:4b:92:2e:02:f5:3c:2f:71:ff:6a:60:5e:
67:53:7a:8a:43:82:cb:e0:6e:dd:91:85:7e:77:56:6a:02:4f:
a1:2e:5f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:46 2024 by rpki-client on console-ams.rpki-client.org