Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/YvODPsHgeHKuHw-kotCfTX52Tms.roa
File: YvODPsHgeHKuHw-kotCfTX52Tms.roa (raw, json)
Hash identifier: LRa03pUEOoZ6mjpc186OgTXM97eSljpRU+GXE81ieGw=
Subject key identifier: 62:F3:83:3E:C1:E0:78:72:AE:1F:0F:A4:A2:D0:9F:4D:7E:76:4E:6B
Certificate issuer: /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial: 0181CDC67B3D93EBF121BADA36B8A852D3C5
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/YvODPsHgeHKuHw-kotCfTX52Tms.roa
Signing time: Tue 05 Jul 2022 09:52:25 +0000
ROA not before: Tue 05 Jul 2022 09:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 194.49.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cd:c6:7b:3d:93:eb:f1:21:ba:da:36:b8:a8:52:d3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Validity
Not Before: Jul 5 09:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62f3833ec1e07872ae1f0fa4a2d09f4d7e764e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:f9:58:eb:87:31:30:66:f0:74:14:47:93:
66:dc:61:4c:b1:5a:1e:a2:39:cf:cd:36:24:a0:72:
02:ae:4b:40:59:15:2e:5b:49:40:54:99:ba:8f:75:
61:2f:0c:0a:a1:99:ad:d2:f1:ab:8e:a2:2a:ff:60:
db:2b:d9:7a:a6:7b:f9:97:42:af:bd:2b:1e:ba:85:
cf:0e:17:6e:97:fc:dc:ed:94:ec:bb:e7:98:27:a7:
24:fc:b5:a2:55:9c:8e:e9:c9:62:b9:b6:a9:78:e3:
b2:d7:77:ed:66:4b:24:ee:dd:a2:d3:2e:0d:c3:fc:
99:b1:a9:ae:bf:11:0f:18:3b:ce:51:d0:e3:b6:cb:
c8:0e:fd:30:8a:02:7d:70:c6:91:95:46:4d:de:f6:
cb:e3:ab:6a:93:1e:7e:23:4c:29:34:9c:36:6a:56:
e3:d7:46:b7:1a:2e:dd:bc:ea:ac:13:d2:0b:29:70:
3c:cb:96:c3:55:10:7e:21:40:37:9b:1d:70:69:34:
2a:86:e6:5c:f8:16:70:8d:53:c6:02:10:6e:68:61:
ec:a4:74:44:9b:fb:f9:b3:03:d7:dc:c4:6c:46:f1:
0d:5d:7b:b1:14:44:32:20:3b:4e:27:69:60:e1:d3:
62:81:24:d5:3b:9c:9e:bd:ed:35:22:12:aa:d7:32:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:83:3E:C1:E0:78:72:AE:1F:0F:A4:A2:D0:9F:4D:7E:76:4E:6B
X509v3 Authority Key Identifier:
keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/YvODPsHgeHKuHw-kotCfTX52Tms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.95.0/24
Signature Algorithm: sha256WithRSAEncryption
38:67:25:e2:68:c5:56:b5:0e:37:4a:d2:45:90:07:58:dc:ce:
a1:25:1f:4e:ea:1f:72:fe:3f:a5:54:61:92:5f:9a:13:91:7e:
d5:5b:75:61:c3:32:f3:ec:fc:dc:39:bb:7d:03:4d:0c:f0:64:
65:a8:05:a1:57:db:d8:e5:f6:4f:3c:4c:89:8e:77:b3:b0:b4:
99:42:a8:ce:84:be:8d:87:db:5a:ed:85:ea:aa:51:f6:2d:fe:
50:b4:82:41:3f:bc:e3:ce:be:05:cf:ef:77:fb:41:de:2f:35:
bf:c2:83:36:4c:9c:b7:7f:c6:16:aa:f0:2d:6d:50:29:fd:82:
23:fe:e2:ad:c2:45:f1:50:56:c8:4e:c9:15:34:d6:a2:51:9e:
dd:5a:26:b4:77:46:e7:ee:14:4d:a7:21:0d:08:ae:63:9e:89:
ee:eb:d0:65:73:1c:88:11:ec:a8:d3:b7:c6:a4:9c:5a:a1:0e:
1e:e8:a8:cb:f9:41:fa:b5:88:d5:f3:9f:95:d9:79:a5:30:73:
09:5f:ff:2b:31:65:eb:a5:f4:6d:4b:ea:27:50:26:e6:2c:b5:
eb:8a:5a:66:3b:fb:04:26:44:17:7d:93:51:5a:a0:68:a9:6b:
17:05:6e:4d:ad:36:3e:2a:61:de:d6:d1:da:19:a4:89:8d:e9:
05:af:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:41 2023 by rpki-client on console-fra.rpki-client.org