Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/2YpLBpbwb8rObZEb0ofMdqr4SVc.roa
File: 2YpLBpbwb8rObZEb0ofMdqr4SVc.roa (raw, json)
Hash identifier: 3NkzdP3UtgnDsPs0AcoK4y8UtgL5sNSx4FxX4/5O9lc=
Subject key identifier: D9:8A:4B:06:96:F0:6F:CA:CE:6D:91:1B:D2:87:CC:76:AA:F8:49:57
Certificate issuer: /CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Certificate serial: 0185737162E8DD49CF6F61A0E09FF0ED49AC
Authority key identifier: 6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/2YpLBpbwb8rObZEb0ofMdqr4SVc.roa
Signing time: Mon 02 Jan 2023 17:04:48 +0000
ROA not before: Mon 02 Jan 2023 17:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 185.99.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:62:e8:dd:49:cf:6f:61:a0:e0:9f:f0:ed:49:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Validity
Not Before: Jan 2 17:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d98a4b0696f06fcace6d911bd287cc76aaf84957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:f8:d9:59:81:63:44:2f:9d:6f:d9:d6:59:
83:3e:59:b1:02:04:74:9d:44:dc:30:50:13:4f:66:
c2:84:79:8d:ea:40:78:c4:2f:88:f1:b4:d0:21:20:
70:2f:cf:28:9e:8b:7d:9f:f3:75:36:89:d8:48:56:
47:ad:51:af:05:7f:c4:7a:4a:c2:ee:6c:c7:89:2d:
e3:67:22:29:a5:f3:ed:5c:d6:72:9d:da:87:56:4a:
7e:56:e5:37:e0:9f:d4:25:98:e1:e8:ae:b4:83:ec:
c0:73:28:7a:6e:24:c8:df:86:e6:6f:01:e4:15:c7:
f1:9e:5d:21:ef:8a:ac:9a:94:e7:cf:66:b3:11:22:
fe:bd:09:e3:d2:bc:b4:92:24:9a:51:ba:51:09:70:
5c:40:40:81:b9:7c:64:21:e3:b6:cf:36:61:8d:ec:
c2:9d:53:e9:10:c5:ee:cb:e1:f6:3c:06:a4:a6:1e:
37:73:87:c3:98:eb:ba:ed:81:e1:fa:f8:e5:30:7a:
68:69:09:12:ac:0e:d5:3f:2e:39:4a:c3:c3:92:7b:
a3:07:38:5b:cf:94:8b:14:10:75:49:79:de:68:64:
c5:c8:2e:7e:2a:e3:c6:c1:98:88:60:29:65:7e:63:
26:05:36:67:79:b0:8d:14:7f:33:07:bc:77:82:a2:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8A:4B:06:96:F0:6F:CA:CE:6D:91:1B:D2:87:CC:76:AA:F8:49:57
X509v3 Authority Key Identifier:
keyid:6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/2YpLBpbwb8rObZEb0ofMdqr4SVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.23.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:16:23:55:e0:f8:29:2e:7f:74:94:b8:f6:c2:f8:37:b4:04:
d8:8f:a9:a4:53:a0:73:e1:e4:1d:9a:cd:28:97:cc:d3:08:95:
a4:3f:93:ce:e3:4e:4e:b4:2f:1b:0a:cb:9c:2a:ab:d1:8d:5c:
df:ce:36:fd:68:f6:20:88:6c:47:4a:3e:89:2c:57:94:88:de:
94:0f:a5:2d:33:b1:f8:10:aa:85:df:55:db:54:49:ef:98:fa:
19:07:5d:28:b8:ff:d9:d2:ec:a8:77:7c:41:25:6f:ad:b4:c5:
ec:12:e7:98:74:d9:a3:f7:4d:10:cb:e3:b2:4d:73:f6:bd:e5:
a5:30:2e:05:53:fc:72:0b:c4:e1:77:df:da:f5:9b:59:9d:3d:
33:5d:38:40:3b:9b:55:0d:83:06:b5:5a:cf:db:af:f6:59:8c:
e2:11:9c:cf:27:81:2b:10:40:29:c9:ef:13:90:b2:16:ff:a9:
63:57:d5:d5:13:24:42:25:cb:db:e5:9c:48:e2:fa:29:a1:57:
75:1c:fb:83:b3:03:6f:e2:d2:a7:12:b0:e0:c3:6e:59:a2:e9:
96:0e:16:24:e4:f6:04:67:02:b6:85:92:1f:c9:0e:fa:fa:88:
86:8b:76:42:54:5a:c3:37:dd:05:10:1f:1c:fa:75:e3:64:4f:
1a:96:b1:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzcWLo3UnPb2Gg4J/w7UmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOTk4MTVkMGEwYmRkOGFiODJiYjAyMzUzMThkYjdlNzNi
OTNkZmIwHhcNMjMwMTAyMTcwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOThhNGIwNjk2ZjA2ZmNhY2U2ZDkxMWJkMjg3Y2M3NmFhZjg0OTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rz42VmBY0QvnW/Z1lmDPlmxAgR0
nUTcMFATT2bChHmN6kB4xC+I8bTQISBwL88onot9n/N1NonYSFZHrVGvBX/EekrC
7mzHiS3jZyIppfPtXNZyndqHVkp+VuU34J/UJZjh6K60g+zAcyh6biTI34bmbwHk
Fcfxnl0h74qsmpTnz2azESL+vQnj0ry0kiSaUbpRCXBcQECBuXxkIeO2zzZhjezC
nVPpEMXuy+H2PAakph43c4fDmOu67YHh+vjlMHpoaQkSrA7VPy45SsPDknujBzhb
z5SLFBB1SXneaGTFyC5+KuPGwZiIYCllfmMmBTZnebCNFH8zB7x3gqLVfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmKSwaW8G/Kzm2RG9KHzHaq+ElXMB8GA1UdIwQY
MBaAFGuZgV0KC92KuCuwI1MY235zuT37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVtQlhRb0wzWXE0SzdBalV4amJmbk81UGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZhOGItNDA3Ny00NDRlLTgxOWYt
ZWRmMTYzODg1MGVkLzEvMllwTEJwYndiOHJPYlpFYjBvZk1kcXI0U1ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iMDZhOGItNDA3Ny00NDRlLTgxOWYtZWRmMTYzODg1MGVk
LzEvYTVtQlhRb0wzWXE0SzdBalV4amJmbk81UGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWMXMA0G
CSqGSIb3DQEBCwUAA4IBAQCyFiNV4PgpLn90lLj2wvg3tATYj6mkU6Bz4eQdms0o
l8zTCJWkP5PO405OtC8bCsucKqvRjVzfzjb9aPYgiGxHSj6JLFeUiN6UD6UtM7H4
EKqF31XbVEnvmPoZB10ouP/Z0uyod3xBJW+ttMXsEueYdNmj900Qy+OyTXP2veWl
MC4FU/xyC8Thd9/a9ZtZnT0zXThAO5tVDYMGtVrP26/2WYziEZzPJ4ErEEApye8T
kLIW/6ljV9XVEyRCJcvb5ZxI4vopoVd1HPuDswNv4tKnErDgw25ZoumWDhYk5PYE
ZwK2hZIfyQ76+oiGi3ZCVFrDN90FEB8c+nXjZE8alrFV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:12 2024 by rpki-client on console-fra.rpki-client.org