Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/Yy8Xv5HclBSk2yXgyexsb86d6Hw.roa
File: Yy8Xv5HclBSk2yXgyexsb86d6Hw.roa (raw, json)
Hash identifier: bysrgYsRnZLt9Rb1gX2I7N0+8GIrN+SBabp49R0kb/8=
Subject key identifier: 63:2F:17:BF:91:DC:94:14:A4:DB:25:E0:C9:EC:6C:6F:CE:9D:E8:7C
Certificate issuer: /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial: 0182905F50C048846F1D95DB2A4AE0B4ABB2
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/Yy8Xv5HclBSk2yXgyexsb86d6Hw.roa
Signing time: Fri 12 Aug 2022 04:45:41 +0000
ROA not before: Fri 12 Aug 2022 04:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 194.49.86.0/24 maxlen: 24
194.49.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:5f:50:c0:48:84:6f:1d:95:db:2a:4a:e0:b4:ab:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Validity
Not Before: Aug 12 04:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=632f17bf91dc9414a4db25e0c9ec6c6fce9de87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:ab:3d:d2:f0:4c:60:f7:1b:86:8a:98:a2:
51:c1:87:5a:6f:f4:e1:89:2e:11:3f:fb:1b:b2:b2:
58:48:75:59:0a:fb:0b:f1:b3:91:05:a2:e9:d6:00:
c5:6e:77:67:8d:e9:66:8e:c7:f8:14:3a:1c:02:a7:
3d:66:ef:b4:a7:1b:38:4e:78:9e:74:ab:5d:20:29:
91:93:f2:cd:f2:b9:40:f5:01:92:87:fc:04:c2:02:
bb:31:77:bf:5a:8e:08:a7:05:e2:53:27:f7:5e:c4:
d7:75:76:55:5f:2b:ca:08:eb:d7:a2:b1:aa:14:7c:
c4:1d:4f:60:d6:90:4c:9a:e7:8d:af:2d:dc:b8:09:
02:53:1d:79:45:60:85:c0:a3:45:aa:0d:6b:fe:74:
10:f3:1e:24:a8:78:7f:9e:8f:20:f7:fa:c4:1b:bb:
a5:f3:a8:03:cb:d0:ba:70:f0:f2:5c:d4:2e:1f:75:
40:ce:86:65:82:55:05:8c:96:c9:72:d0:99:9e:b7:
11:e6:44:33:51:b9:be:85:a5:ae:46:3e:22:45:6a:
63:7a:0c:4f:78:08:b8:c0:df:fd:51:bb:99:5b:94:
ed:8d:ee:88:6d:92:72:d7:41:7f:4b:8a:03:d2:76:
30:da:43:9d:65:6c:fd:d5:35:ee:1b:43:b4:d8:ea:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2F:17:BF:91:DC:94:14:A4:DB:25:E0:C9:EC:6C:6F:CE:9D:E8:7C
X509v3 Authority Key Identifier:
keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/Yy8Xv5HclBSk2yXgyexsb86d6Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.86.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:c3:9c:5a:e5:d7:68:96:7b:9d:bf:d7:f5:e4:61:33:a4:fb:
c5:03:fd:59:f7:9e:b1:73:74:ba:55:44:72:5b:35:4d:82:15:
75:2c:d0:31:fa:35:3f:96:91:8d:5c:dc:20:04:ba:d9:92:96:
86:4f:2a:f4:d3:de:9a:30:51:9b:78:8e:66:52:46:53:49:45:
9d:7f:7d:ed:52:f2:e9:31:f4:8d:26:28:e0:60:a9:cc:ef:5b:
e2:63:4e:d8:6e:c2:5a:23:3f:53:48:1d:69:f3:c2:2d:af:8e:
f9:79:cf:1d:11:a7:94:a4:6c:dd:e3:8f:bb:f5:c4:4f:fe:76:
e7:f6:2a:78:cf:52:ab:e3:48:eb:83:31:64:dc:45:9a:ae:d5:
35:c3:20:10:f0:4e:df:c3:ac:8d:2a:cd:06:4e:90:c3:5f:15:
bf:fe:ec:cb:dc:0d:1f:61:d0:57:b7:a1:a7:ba:9a:7b:40:15:
18:b7:31:36:4f:6a:31:af:70:32:1b:9f:4f:95:42:1f:c6:97:
f8:59:42:a9:62:fd:de:76:4a:f4:cf:db:19:15:6f:74:f4:61:
68:09:1d:ca:cd:73:79:92:f9:a9:81:09:d2:7e:ae:d5:d0:9f:
55:07:9e:ca:75:67:e3:73:9f:8c:c2:ef:5f:b2:34:fa:90:3b:
c1:5e:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:53 2024 by rpki-client on console-fra.rpki-client.org