Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/yB_EIATNO-t7_8nRi96QyFuUTm8.roa
File: yB_EIATNO-t7_8nRi96QyFuUTm8.roa (raw, json)
Hash identifier: htv6JnEPNeZR2ss/AJT2O4Z1huCY72nv8kbWv0xntwE=
Subject key identifier: C8:1F:C4:20:04:CD:3B:EB:7B:FF:C9:D1:8B:DE:90:C8:5B:94:4E:6F
Certificate issuer: /CN=2c8ae6ecedc54ef6f3c67be6063df33e539fa897
Certificate serial: DB73B5
Authority key identifier: 2C:8A:E6:EC:ED:C5:4E:F6:F3:C6:7B:E6:06:3D:F3:3E:53:9F:A8:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIrm7O3FTvbzxnvmBj3zPlOfqJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/yB_EIATNO-t7_8nRi96QyFuUTm8.roa
Signing time: Sat 01 Jan 2022 12:06:57 +0000
ROA not before: Sat 01 Jan 2022 12:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 79.110.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14382005 (0xdb73b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8ae6ecedc54ef6f3c67be6063df33e539fa897
Validity
Not Before: Jan 1 12:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c81fc42004cd3beb7bffc9d18bde90c85b944e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:df:1e:89:10:09:cf:44:e4:66:2a:89:71:
de:23:d1:23:e7:99:e2:d5:56:2d:be:17:ba:0b:e2:
2b:b5:96:c2:1f:46:22:f7:c4:01:80:46:b5:8f:48:
c4:db:7b:e4:32:5c:8c:6c:1a:d7:7e:f4:6c:16:53:
25:8f:6e:96:c7:ec:c1:52:f3:0d:f7:9b:03:1c:6c:
90:17:2c:99:25:be:0e:5e:be:78:27:f5:56:81:6a:
2a:d7:f8:10:17:22:19:9b:ae:7d:26:12:9e:c1:9b:
9f:0c:7a:ff:3b:99:c1:ad:6b:b5:53:2d:72:d2:34:
ac:0a:8a:71:c9:93:58:09:3c:76:fd:99:74:5b:ec:
b0:de:87:12:50:88:d8:b0:0a:fb:18:a5:c4:77:53:
53:8d:80:f7:a1:c4:85:0c:b6:ea:27:28:3a:50:0d:
0b:63:1f:41:ce:d2:31:d1:5f:17:37:1a:99:bc:d3:
21:4a:c6:74:ac:aa:d8:01:14:9e:42:14:05:27:cb:
e3:e3:2a:c0:32:37:20:ab:bf:0d:cd:2e:92:c3:b3:
a7:4f:5d:d2:39:3d:75:46:52:e3:1c:ee:76:14:16:
2a:e7:dd:1c:2c:e1:25:6e:38:ad:87:c4:f3:fe:75:
c8:83:15:24:f5:8d:2b:e3:27:95:04:d0:48:5d:f3:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:C4:20:04:CD:3B:EB:7B:FF:C9:D1:8B:DE:90:C8:5B:94:4E:6F
X509v3 Authority Key Identifier:
keyid:2C:8A:E6:EC:ED:C5:4E:F6:F3:C6:7B:E6:06:3D:F3:3E:53:9F:A8:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIrm7O3FTvbzxnvmBj3zPlOfqJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/yB_EIATNO-t7_8nRi96QyFuUTm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/LIrm7O3FTvbzxnvmBj3zPlOfqJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:77:ab:af:f4:02:89:e5:76:88:f3:5e:e1:07:82:7c:ec:f4:
e5:be:77:1b:85:5a:61:f3:dc:02:74:d7:d3:32:98:d0:28:d3:
ea:26:76:0e:44:f0:1d:f1:73:71:ec:e0:a0:ed:b5:98:e5:3c:
5c:d7:b4:a7:f0:14:d8:7d:09:14:32:06:65:d0:e3:73:07:7c:
9e:1e:74:a9:90:c0:a0:c4:d5:66:53:c4:b9:c1:6c:a0:9c:24:
45:3e:59:a0:d0:be:45:21:7c:b5:bb:eb:12:97:23:76:15:0f:
74:ae:84:56:47:7d:a5:c8:9c:81:f3:c1:18:78:93:53:e6:8e:
61:84:c0:6c:8c:6e:6c:40:16:5d:ba:e3:6b:89:5b:b9:ff:30:
94:5d:75:00:94:1a:16:4d:3c:d7:2d:ad:3f:0d:7f:f0:e2:36:
28:ee:89:48:0e:da:e8:8f:9e:a6:aa:17:09:03:84:7f:dd:21:
8e:81:db:68:3a:c3:e8:19:0d:63:e0:b8:7d:88:35:a8:9e:9f:
a0:23:95:38:37:91:b3:3a:80:1a:62:ea:c8:a1:0e:2a:c6:e1:
9f:88:42:4e:17:87:8c:11:50:7e:b6:bf:25:e9:7f:ce:60:2a:
55:c0:7e:29:0f:4b:5a:9a:3f:4a:8a:18:12:03:7b:8a:cb:e8:
35:16:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:25 2025 by rpki-client