Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/0-Y2xJ5hD-19MyMmD340AOdo6iE.roa
File: 0-Y2xJ5hD-19MyMmD340AOdo6iE.roa (raw, json)
Hash identifier: zRQ5qyP2BCKl4Mh7Nlese2zW80ySVY80hfw+Dl+QQbw=
Subject key identifier: D3:E6:36:C4:9E:61:0F:ED:7D:33:23:26:0F:7E:34:00:E7:68:EA:21
Certificate issuer: /CN=c1e896a37a8399faebf40035bf0f4a959cfa5bf2
Certificate serial: 01878E7A213B4FFBC64C88022DED239DFE88
Authority key identifier: C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weiWo3qDmfrr9AA1vw9KlZz6W_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/0-Y2xJ5hD-19MyMmD340AOdo6iE.roa
Signing time: Mon 17 Apr 2023 09:09:41 +0000
ROA not before: Mon 17 Apr 2023 09:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 85.208.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:7a:21:3b:4f:fb:c6:4c:88:02:2d:ed:23:9d:fe:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e896a37a8399faebf40035bf0f4a959cfa5bf2
Validity
Not Before: Apr 17 09:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3e636c49e610fed7d3323260f7e3400e768ea21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:e5:55:8b:9b:1b:c0:c5:34:e7:20:52:fb:
28:ac:7c:a4:d6:ca:6a:3c:fa:fc:08:1a:68:75:11:
9d:2a:a8:28:8e:23:14:01:fb:a3:16:a4:09:3a:8f:
92:a7:0d:8f:0e:62:a2:59:aa:9b:ee:4a:c9:b8:19:
3c:45:93:01:b1:e3:83:b1:9e:f5:e3:99:5f:13:09:
4f:ad:31:ae:60:5c:95:c9:56:bd:e7:18:1c:c9:01:
a4:b4:3d:8f:49:de:ba:f0:15:d0:a0:38:85:17:c2:
b7:e8:47:2a:56:e8:7d:ba:da:e3:3c:e7:bd:96:6c:
f4:df:ed:b3:a2:3d:23:85:9a:40:ed:6e:4d:f8:4b:
bd:80:72:0f:d5:d4:97:d1:10:49:20:bb:05:7e:ab:
8d:cf:b8:85:e5:9c:a5:8e:ea:9f:b3:26:0f:26:48:
3a:bb:a5:ca:9d:c3:83:7c:e6:76:41:d3:60:66:3f:
ed:f9:48:cf:e5:0e:bc:43:d0:4b:2a:36:c4:94:87:
7f:7f:fd:01:3e:fc:6c:c0:01:ce:c1:37:ea:82:3a:
3c:d9:b9:e0:72:0d:df:71:7f:50:47:f1:e6:d2:f4:
48:13:f7:07:33:54:19:e8:18:62:2e:71:7c:e0:88:
93:17:86:a0:30:ea:0f:6a:87:8e:f0:22:42:d5:99:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:36:C4:9E:61:0F:ED:7D:33:23:26:0F:7E:34:00:E7:68:EA:21
X509v3 Authority Key Identifier:
keyid:C1:E8:96:A3:7A:83:99:FA:EB:F4:00:35:BF:0F:4A:95:9C:FA:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weiWo3qDmfrr9AA1vw9KlZz6W_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/0-Y2xJ5hD-19MyMmD340AOdo6iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b19a4-f0a0-47c6-8f0b-d2b698b97492/1/weiWo3qDmfrr9AA1vw9KlZz6W_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.16.0/22
Signature Algorithm: sha256WithRSAEncryption
90:cc:af:6c:50:38:5d:ca:ff:56:51:e5:a4:4b:ec:70:3e:19:
a4:0b:7f:47:8b:97:46:01:85:29:53:a8:3a:49:e3:cf:28:63:
9d:45:a9:2a:5c:7c:a8:3b:dd:d0:79:39:75:99:22:54:7b:3a:
cc:38:cd:dc:40:22:0f:59:a8:72:dd:ba:47:e0:5b:6f:e0:19:
b3:8b:87:56:27:28:fd:bc:1c:90:5f:83:65:b1:af:90:dd:d6:
2d:51:f6:cb:36:93:72:03:41:ab:e2:f9:85:03:92:04:af:e0:
95:ae:92:9b:cb:d7:8a:8c:04:16:13:c8:cf:07:ab:ba:f4:67:
12:ca:5a:b6:05:d1:8a:47:15:e8:83:c7:12:10:24:f1:4a:51:
04:43:3d:a5:6b:90:02:14:84:50:01:1f:24:56:10:50:6b:75:
df:8e:6c:e1:c9:00:45:22:d4:ea:72:51:4d:fb:6b:31:2a:90:
22:3b:fb:fb:1a:b6:73:74:39:76:15:b1:fd:47:4b:90:8f:89:
88:d0:20:95:56:c0:4e:4a:86:6b:99:2e:a6:69:70:f5:41:38:
da:39:76:7e:1a:00:50:b5:20:d5:85:98:90:d4:e9:fd:9f:26:
f6:cf:7b:ac:26:2f:b8:44:34:30:96:c4:a3:31:7a:7f:38:69:
58:96:1c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:10 2023 by rpki-client on console-fra.rpki-client.org