Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/Y8R4R8UMOg72X8oqj1rJeNmSaEg.roa
File: Y8R4R8UMOg72X8oqj1rJeNmSaEg.roa (raw, json)
Hash identifier: IcHQcMowh2QdLzn0cc+9tyoCup97CkNPDyrh1nGm48U=
Subject key identifier: 63:C4:78:47:C5:0C:3A:0E:F6:5F:CA:2A:8F:5A:C9:78:D9:92:68:48
Certificate issuer: /CN=14c6a90bd967d0e6d8a3660673d54e5d058af96c
Certificate serial: 01856F5DB7F87ED797664711C94C8B7846EB
Authority key identifier: 14:C6:A9:0B:D9:67:D0:E6:D8:A3:66:06:73:D5:4E:5D:05:8A:F9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMapC9ln0ObYo2YGc9VOXQWK-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/Y8R4R8UMOg72X8oqj1rJeNmSaEg.roa
Signing time: Sun 01 Jan 2023 22:04:50 +0000
ROA not before: Sun 01 Jan 2023 22:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202072
IP address blocks: 141.98.98.0/24 maxlen: 24
185.45.44.0/23 maxlen: 23
185.45.46.0/24 maxlen: 24
185.45.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b7:f8:7e:d7:97:66:47:11:c9:4c:8b:78:46:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c6a90bd967d0e6d8a3660673d54e5d058af96c
Validity
Not Before: Jan 1 22:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63c47847c50c3a0ef65fca2a8f5ac978d9926848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:8d:01:c9:66:05:0e:2e:6f:01:cd:8f:66:
1d:4c:a2:87:2e:8b:f2:ca:7d:49:3f:29:48:20:3d:
77:87:9a:f9:39:a5:3d:32:9a:d1:1e:a6:3d:2d:58:
aa:5d:c1:fd:6c:9a:0a:38:8e:07:6a:ff:bd:ac:5b:
40:5c:9f:d3:8e:e1:5e:de:6e:70:03:05:0f:c7:41:
36:81:2f:62:4e:e5:fb:1b:3e:38:04:f1:7d:02:07:
94:fd:ad:30:e1:67:48:a2:96:f6:82:ab:0e:64:a4:
dd:21:36:fa:e9:90:c7:47:3f:f5:3b:ed:09:26:fa:
9d:34:a5:69:cd:6c:b4:e0:78:f9:52:14:f2:a4:a9:
62:6b:32:6b:b3:aa:57:09:b9:77:c9:fb:ab:35:8b:
75:be:d4:59:2d:58:75:e3:8d:76:90:00:8e:a9:37:
38:c9:11:cd:75:5e:0f:61:f1:e3:67:20:b4:1a:de:
4e:eb:de:33:d5:34:18:8b:50:1c:33:b7:39:55:cf:
b1:f9:ad:fc:12:11:48:01:f5:19:df:fb:27:e5:b5:
36:82:78:ed:cb:7f:81:d3:24:cb:96:f9:54:8d:c0:
20:64:95:20:3e:6a:82:e3:8a:80:6b:ff:06:21:6b:
84:f0:2e:77:a5:80:cb:3d:d4:99:a1:a9:b6:c9:b5:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C4:78:47:C5:0C:3A:0E:F6:5F:CA:2A:8F:5A:C9:78:D9:92:68:48
X509v3 Authority Key Identifier:
keyid:14:C6:A9:0B:D9:67:D0:E6:D8:A3:66:06:73:D5:4E:5D:05:8A:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMapC9ln0ObYo2YGc9VOXQWK-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/Y8R4R8UMOg72X8oqj1rJeNmSaEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/FMapC9ln0ObYo2YGc9VOXQWK-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.98.0/24
185.45.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:b9:3e:78:c5:46:0e:8f:1b:d5:79:bb:21:a2:f8:93:2d:f2:
ba:d4:3e:be:18:30:70:cb:d9:af:4b:df:af:ec:57:61:5e:2b:
c8:4d:5e:2f:9e:54:ec:54:ae:43:31:b8:df:74:c1:f3:36:16:
56:61:74:3c:0e:40:a8:a6:dc:c3:c7:62:ec:4a:dc:fe:35:f6:
7b:e4:54:96:a7:77:e9:21:ee:c3:f1:e8:7a:88:96:72:15:04:
e9:fd:e1:e4:09:9a:4d:74:5d:ad:b0:da:9d:10:e6:b4:a9:74:
a7:19:5b:7e:14:24:cf:09:cc:35:94:1c:1f:00:d9:04:8c:e6:
3c:b0:8e:9a:cc:ca:ba:e0:5b:b4:4e:48:ee:71:4f:f4:6d:e8:
1e:b6:19:78:82:be:ce:da:26:08:16:35:f7:2a:35:cf:9e:f1:
1f:bc:2d:23:63:d2:2c:74:7e:a3:03:d5:85:11:63:0e:1c:b0:
30:cf:4d:51:9e:1d:e2:6f:1e:ba:94:5b:d3:54:ac:36:05:81:
43:9f:c3:33:76:e9:01:74:e1:e3:3f:d7:42:e8:9e:cb:2b:fd:
49:c8:dc:94:7a:12:b2:c6:7f:75:87:f4:1f:62:75:0f:58:9c:
61:36:96:68:7b:a6:e9:63:82:b7:68:3a:9b:72:63:96:5b:6c:
b4:bf:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:54 2024 by rpki-client on console-ams.rpki-client.org