Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/yk2oak6p0-NJ5qSB7EfII0nQc0I.roa
File: yk2oak6p0-NJ5qSB7EfII0nQc0I.roa (raw, json)
Hash identifier: RC9MEIYTnNTSXTEzhPNJ8EmxbM8fQm28Us58lWT7THM=
Subject key identifier: CA:4D:A8:6A:4E:A9:D3:E3:49:E6:A4:81:EC:47:C8:23:49:D0:73:42
Certificate issuer: /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial: 018CC26D13FEDA9E157036110A46E38640F3
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/yk2oak6p0-NJ5qSB7EfII0nQc0I.roa
Signing time: Mon 01 Jan 2024 00:29:37 +0000
ROA not before: Mon 01 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 213.217.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:13:fe:da:9e:15:70:36:11:0a:46:e3:86:40:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Validity
Not Before: Jan 1 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca4da86a4ea9d3e349e6a481ec47c82349d07342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:f7:92:8c:2d:65:aa:e6:1d:73:45:ea:62:
54:0c:00:2f:74:70:92:1b:26:f7:37:5e:3b:74:39:
4f:4c:c2:f8:72:57:82:5e:fc:55:77:77:97:fd:1b:
a4:10:78:1b:b1:f2:a8:4e:eb:cc:5c:60:7e:25:2d:
a4:22:70:4c:35:61:16:e3:5a:c0:1c:97:6b:62:92:
5d:0e:35:a2:91:fd:a7:43:2a:a7:73:72:1c:b9:7c:
83:db:51:c6:ce:ad:82:4e:53:4c:0f:f9:06:ca:7d:
a3:9a:1b:b5:bd:d0:f4:87:16:bf:f7:d1:07:3b:e2:
41:74:a8:90:ba:ac:9f:56:51:71:cb:58:f1:89:e3:
e0:33:90:d7:79:3c:53:98:3a:b0:76:50:63:bc:50:
16:42:45:2b:64:3a:b6:ac:00:67:5c:a4:f2:2e:9e:
a2:64:ed:51:fd:89:f8:05:67:e0:ea:b0:9f:a5:fb:
48:49:1f:4b:5c:ea:61:3c:02:cb:ef:30:06:eb:96:
f4:2a:cc:9f:e1:5c:e2:44:49:41:38:fd:a5:83:b2:
57:c0:c8:94:fc:43:2f:ea:1c:5f:a7:63:d9:51:b5:
43:19:ba:7e:db:d8:8e:24:94:c1:aa:37:35:88:46:
c7:0e:2e:d4:a4:de:57:46:87:98:c8:a8:73:8c:2a:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4D:A8:6A:4E:A9:D3:E3:49:E6:A4:81:EC:47:C8:23:49:D0:73:42
X509v3 Authority Key Identifier:
keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/yk2oak6p0-NJ5qSB7EfII0nQc0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
12:32:65:93:f4:e6:20:e5:11:f6:aa:d7:81:c6:9c:86:5a:0e:
3a:78:fc:bb:20:91:dd:4e:9b:0e:b0:da:a5:3c:2e:9a:9f:33:
14:a7:bf:dd:3c:78:3a:cd:e8:81:c9:b2:48:04:f3:d3:ec:ec:
42:1f:b3:11:8f:6f:c2:54:5c:6b:fe:71:d4:16:06:71:ab:fe:
d4:c3:02:56:b9:d5:1c:ab:50:aa:f2:81:93:43:5d:f7:57:5d:
88:58:53:9f:db:77:91:cd:50:3b:a3:ff:ba:73:d5:47:82:ab:
67:9b:74:5c:43:c2:40:99:72:c8:30:df:d0:67:2c:bc:a7:dc:
44:73:e3:b8:67:a2:be:5e:13:99:3e:7d:e7:9f:51:66:4c:75:
9d:64:10:6d:3d:81:4a:a1:98:9b:93:fb:73:76:29:02:e4:21:
c7:cc:d2:c2:66:de:19:a0:5a:dd:37:05:78:4a:c8:3e:55:f4:
bd:9a:83:83:5b:7e:73:b4:84:a9:22:7e:dd:b2:48:fe:c0:68:
52:18:8e:1e:c3:9e:13:5b:c8:be:f4:94:d5:e9:23:b5:6f:70:
1e:ce:34:eb:43:6a:52:74:ff:39:67:cc:8b:94:dd:81:e0:d4:
44:d5:a6:12:80:53:3e:02:ac:4c:67:06:88:b0:c3:05:15:63:
bc:7b:2c:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbRP+2p4VcDYRCkbjhkDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTQ0NDgxZDNiZTdmY2E1ZTgwYTU2NGFkOTNjMWI4YTJm
NjM2ZjgwHhcNMjQwMTAxMDAyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTRkYTg2YTRlYTlkM2UzNDllNmE0ODFlYzQ3YzgyMzQ5ZDA3MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXP3kowtZarmHXNF6mJUDAAvdHCS
Gyb3N147dDlPTML4cleCXvxVd3eX/RukEHgbsfKoTuvMXGB+JS2kInBMNWEW41rA
HJdrYpJdDjWikf2nQyqnc3IcuXyD21HGzq2CTlNMD/kGyn2jmhu1vdD0hxa/99EH
O+JBdKiQuqyfVlFxy1jxiePgM5DXeTxTmDqwdlBjvFAWQkUrZDq2rABnXKTyLp6i
ZO1R/Yn4BWfg6rCfpftISR9LXOphPALL7zAG65b0Ksyf4VziRElBOP2lg7JXwMiU
/EMv6hxfp2PZUbVDGbp+29iOJJTBqjc1iEbHDi7UpN5XRoeYyKhzjCri1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpNqGpOqdPjSeakgexHyCNJ0HNCMB8GA1UdIwQY
MBaAFGFURIHTvn/KXoClZK2Twbii9jb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZSRWdkTy1mOHBlZ0tWa3JaUEJ1S0wyTnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lY2VjMzctMzBiOC00ZTE5LWJiYjIt
ZjY3ZTE3NWQ0YmE3LzEveWsyb2FrNnAwLU5KNXFTQjdFZklJMG5RYzBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lY2VjMzctMzBiOC00ZTE5LWJiYjItZjY3ZTE3NWQ0YmE3
LzEvWVZSRWdkTy1mOHBlZ0tWa3JaUEJ1S0wyTnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dkLMA0G
CSqGSIb3DQEBCwUAA4IBAQASMmWT9OYg5RH2qteBxpyGWg46ePy7IJHdTpsOsNql
PC6anzMUp7/dPHg6zeiBybJIBPPT7OxCH7MRj2/CVFxr/nHUFgZxq/7UwwJWudUc
q1Cq8oGTQ133V12IWFOf23eRzVA7o/+6c9VHgqtnm3RcQ8JAmXLIMN/QZyy8p9xE
c+O4Z6K+XhOZPn3nn1FmTHWdZBBtPYFKoZibk/tzdikC5CHHzNLCZt4ZoFrdNwV4
Ssg+VfS9moODW35ztISpIn7dskj+wGhSGI4ew54TW8i+9JTV6SO1b3AezjTrQ2pS
dP85Z8yLlN2B4NRE1aYSgFM+AqxMZwaIsMMFFWO8eyxF
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:23 2024 by rpki-client on console-ams.rpki-client.org