Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/899344-87c5-4aa2-b1a3-204d2587d81f/1/yJYZhXJHsUUoCLeZH4f9dW6NVMc.roa
File: yJYZhXJHsUUoCLeZH4f9dW6NVMc.roa (raw, json)
Hash identifier: QJbYmzyAvXy/C+KhXeq62vYgjO8Thq5M8vmcF0zW0sw=
Subject key identifier: C8:96:19:85:72:47:B1:45:28:08:B7:99:1F:87:FD:75:6E:8D:54:C7
Certificate issuer: /CN=3109f5695a89111d0f3bd6b5d2b18779aac102de
Certificate serial: 01856D41B0556DB4D9DE999E2ABA2E687091
Authority key identifier: 31:09:F5:69:5A:89:11:1D:0F:3B:D6:B5:D2:B1:87:79:AA:C1:02:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQn1aVqJER0PO9a10rGHearBAt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/899344-87c5-4aa2-b1a3-204d2587d81f/1/yJYZhXJHsUUoCLeZH4f9dW6NVMc.roa
Signing time: Sun 01 Jan 2023 12:14:59 +0000
ROA not before: Sun 01 Jan 2023 12:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209363
IP address blocks: 185.253.124.0/22 maxlen: 22
193.34.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:b0:55:6d:b4:d9:de:99:9e:2a:ba:2e:68:70:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3109f5695a89111d0f3bd6b5d2b18779aac102de
Validity
Not Before: Jan 1 12:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c89619857247b1452808b7991f87fd756e8d54c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:e0:3f:6d:14:3f:73:d3:13:c9:cd:26:45:
e6:3c:a5:d9:c1:0c:46:6a:4f:88:ff:ab:0a:8e:8e:
e7:26:b3:fb:79:ce:38:f3:57:dc:10:c3:d9:d6:04:
6e:ab:90:9b:83:13:d6:97:4d:5c:7b:02:cd:a3:c5:
28:e1:fb:9b:88:c2:d7:b6:0d:e2:03:ea:e4:bf:9e:
4f:54:23:46:90:df:2d:17:59:96:85:28:d9:6a:7e:
df:90:d3:95:1b:fc:79:3b:b0:c9:b4:57:bf:18:24:
4b:9f:85:c5:a2:67:04:b0:8f:fb:b8:07:8e:d7:d5:
ab:d1:20:d1:39:3e:cf:b0:35:72:7a:af:73:60:d5:
51:1b:14:80:e1:0a:1b:60:82:85:db:99:b4:70:d0:
5d:a3:70:6b:b2:f7:68:b0:a6:ff:bd:e3:55:e9:a4:
ab:95:fc:55:fb:4f:76:81:8d:9d:bc:25:24:ab:d3:
06:58:9c:c1:80:b9:b3:4f:ed:40:9e:9e:15:78:e9:
53:e3:d1:63:5c:77:27:4a:79:3a:21:40:59:70:8b:
01:ad:f4:21:e0:df:fc:f0:9a:f5:32:ea:bc:9e:bd:
66:70:3e:67:86:76:1c:18:85:69:60:ab:f0:bb:05:
af:72:b4:79:e8:3d:91:29:64:17:ef:06:10:45:e2:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:19:85:72:47:B1:45:28:08:B7:99:1F:87:FD:75:6E:8D:54:C7
X509v3 Authority Key Identifier:
keyid:31:09:F5:69:5A:89:11:1D:0F:3B:D6:B5:D2:B1:87:79:AA:C1:02:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQn1aVqJER0PO9a10rGHearBAt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/899344-87c5-4aa2-b1a3-204d2587d81f/1/yJYZhXJHsUUoCLeZH4f9dW6NVMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/899344-87c5-4aa2-b1a3-204d2587d81f/1/MQn1aVqJER0PO9a10rGHearBAt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.124.0/22
193.34.148.0/23
Signature Algorithm: sha256WithRSAEncryption
21:08:e1:48:db:0e:36:ab:45:16:02:0e:59:08:0b:ba:81:46:
19:3d:c1:51:98:42:9f:08:63:0f:23:f7:25:c5:b7:93:f3:c1:
c6:2e:b8:b0:8f:b8:df:a3:61:a2:e6:08:dc:cf:a3:fd:b9:56:
7c:3a:de:c8:87:d5:97:bb:cc:89:17:bb:85:c1:3d:36:7f:79:
76:ab:8c:e8:16:55:3f:fd:ac:c4:13:9f:87:c1:45:72:55:03:
9e:47:bb:05:02:57:62:ab:93:1b:bc:ad:f9:eb:95:de:0d:4d:
ff:4a:36:19:35:fc:d2:9f:eb:01:e6:1e:86:9c:7e:fe:5d:00:
07:32:70:46:98:12:c9:df:e9:3e:6d:86:64:ed:24:1a:10:fa:
b8:9c:ec:b6:f4:6c:dd:17:09:c8:90:f4:cf:a0:48:17:5c:bb:
ca:6f:f3:7b:e9:15:43:60:02:e3:63:78:11:b5:39:e3:80:e6:
10:ee:94:22:36:53:9c:8e:66:a3:ce:08:49:3d:74:7d:7a:90:
a4:0e:48:0e:f0:aa:98:8f:b9:ba:37:d0:48:e0:28:3d:30:1f:
b0:46:a9:3f:32:95:55:fb:bb:f9:0f:da:c7:d6:1e:ff:10:b4:
92:4e:cb:14:bf:a0:b1:ad:6e:c6:04:03:8c:c1:b9:7a:c7:7c:
bc:10:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:12 2024 by rpki-client on console-fra.rpki-client.org