Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/YMDSyfHUDWrI0skm4burzRDd6yc.roa
File: YMDSyfHUDWrI0skm4burzRDd6yc.roa (raw, json)
Hash identifier: 4Kg74OshFy8PK+rqnEtZ30krtWbCsgo+v+AQBc+8mYo=
Subject key identifier: 60:C0:D2:C9:F1:D4:0D:6A:C8:D2:C9:26:E1:BB:AB:CD:10:DD:EB:27
Certificate issuer: /CN=9d50eaae1731d233f74435709a7b1dbab8f861cd
Certificate serial: 0187343F
Authority key identifier: 9D:50:EA:AE:17:31:D2:33:F7:44:35:70:9A:7B:1D:BA:B8:F8:61:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVDqrhcx0jP3RDVwmnsdurj4Yc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/YMDSyfHUDWrI0skm4burzRDd6yc.roa
Signing time: Sat 01 Jan 2022 06:01:23 +0000
ROA not before: Sat 01 Jan 2022 06:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48715
IP address blocks: 185.235.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25637951 (0x187343f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d50eaae1731d233f74435709a7b1dbab8f861cd
Validity
Not Before: Jan 1 06:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60c0d2c9f1d40d6ac8d2c926e1bbabcd10ddeb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:06:0f:7c:87:94:89:43:40:5c:8c:65:08:
74:36:00:69:7d:a4:0f:c3:34:a1:b1:7a:e6:da:e2:
a6:90:de:c2:22:1a:e7:22:4e:2c:80:a4:6d:1a:62:
ed:51:d5:63:0c:32:d1:4b:ba:61:c4:25:6b:11:e0:
ec:e6:5b:9d:65:38:a0:86:f1:6b:be:94:3e:1b:95:
d9:30:eb:93:35:8e:4a:9a:fa:e3:2f:48:ed:77:30:
67:5d:89:fc:9d:53:ce:2e:85:16:34:46:bf:74:a7:
35:a2:be:b6:92:cd:9f:5f:23:c0:11:9e:83:98:64:
06:1c:e7:04:f8:d1:2f:ec:d5:75:f8:42:46:ef:ee:
9b:c7:2a:e8:a9:dc:a1:a4:b7:c8:71:b0:bb:aa:8d:
76:1a:3f:cd:69:95:1a:6b:87:10:51:ef:70:f9:4c:
21:3d:54:11:d7:6e:99:06:71:09:75:94:f2:c4:5a:
5f:a5:d8:fd:1a:9a:36:99:53:22:7d:da:98:2d:79:
1f:c0:92:17:99:92:00:49:38:3d:eb:25:bb:48:47:
dc:8d:8b:c4:a6:27:7d:75:07:32:bb:63:b8:53:ff:
3a:95:a9:85:6e:6b:74:c8:58:ca:5c:d9:bd:27:1b:
23:59:42:99:2c:5e:9d:40:72:0f:0e:c8:93:66:13:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C0:D2:C9:F1:D4:0D:6A:C8:D2:C9:26:E1:BB:AB:CD:10:DD:EB:27
X509v3 Authority Key Identifier:
keyid:9D:50:EA:AE:17:31:D2:33:F7:44:35:70:9A:7B:1D:BA:B8:F8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVDqrhcx0jP3RDVwmnsdurj4Yc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/YMDSyfHUDWrI0skm4burzRDd6yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/067cf3-4e23-4c56-bd14-c9ffa095baba/1/nVDqrhcx0jP3RDVwmnsdurj4Yc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.245.0/24
Signature Algorithm: sha256WithRSAEncryption
af:fd:26:4b:1c:06:63:61:8f:35:40:c2:8b:8e:77:10:63:5f:
ac:d1:fd:52:bb:97:32:39:bd:77:30:a5:28:a5:d6:77:be:44:
6d:e8:ec:71:be:f5:0b:31:47:94:a3:03:8c:51:41:10:b0:77:
ab:94:58:60:81:88:e2:57:40:35:fd:29:60:56:f0:ea:d9:fa:
18:3c:d8:3f:0f:98:d4:90:dd:71:63:07:2e:7d:86:a3:6d:97:
5e:4c:04:ec:9c:1a:59:c5:cd:96:22:ea:68:b2:b5:bc:8c:77:
ca:a1:18:19:1f:6a:c8:ea:c6:d8:95:e7:be:c2:31:56:c1:9a:
1d:20:5d:4a:a4:4d:20:72:1c:0b:02:57:ed:f5:e3:ab:db:a7:
bc:65:6d:14:64:a0:5c:c4:25:ac:45:b0:c4:33:81:37:cd:06:
07:df:82:2e:83:df:69:20:99:35:77:89:f4:da:12:dd:64:ce:
90:f4:b8:ed:83:33:07:ea:f5:70:4d:83:c9:ed:49:c7:6d:11:
c3:75:e4:b4:c1:f6:9c:9d:fd:a6:2c:af:4b:ce:b6:20:3e:3a:
98:86:45:94:67:bb:6d:d5:73:ad:62:73:88:9b:3f:2a:78:e9:
41:d9:80:7f:e8:0a:7d:12:d6:24:73:96:aa:97:5f:04:66:4a:
48:3a:8b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org