Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/c8C4M88yIWdnhCuWAALMVYQaxlU.roa
File: c8C4M88yIWdnhCuWAALMVYQaxlU.roa (raw, json)
Hash identifier: Awvd+u2u+kOn5qmIEKdsCmcc4WNqeEVyuUuqiJuhQBQ=
Subject key identifier: 73:C0:B8:33:CF:32:21:67:67:84:2B:96:00:02:CC:55:84:1A:C6:55
Certificate issuer: /CN=ca01fe82f1fc4ab7bf813aeec91e0a49c172888c
Certificate serial: 018CC4936111177DF5064B7DEE5D724E8513
Authority key identifier: CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygH-gvH8Sre_gTruyR4KScFyiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/c8C4M88yIWdnhCuWAALMVYQaxlU.roa
Signing time: Mon 01 Jan 2024 10:30:42 +0000
ROA not before: Mon 01 Jan 2024 10:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 185.161.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:61:11:17:7d:f5:06:4b:7d:ee:5d:72:4e:85:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca01fe82f1fc4ab7bf813aeec91e0a49c172888c
Validity
Not Before: Jan 1 10:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73c0b833cf32216767842b960002cc55841ac655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:43:13:e3:59:ae:1a:78:c6:c9:a2:35:09:
4d:f8:10:da:bb:67:0e:7c:22:e5:55:88:65:93:92:
08:d9:ae:85:03:96:9c:20:78:ba:dd:3f:09:95:36:
da:33:7b:4a:47:52:aa:ae:7a:9f:05:36:e1:e0:fd:
e3:81:3f:fc:4a:26:12:f6:97:b2:f0:7f:81:e5:a9:
de:03:e5:73:bf:32:1c:3f:fa:8d:d3:d0:e9:dd:58:
4d:0b:04:1f:f8:64:9a:f0:1f:f2:dc:f0:88:d1:68:
aa:fe:52:6a:3a:f7:74:05:58:76:31:13:9b:67:f9:
63:b2:80:15:ae:ce:a3:ea:6e:b7:4e:0f:ee:48:65:
f0:bf:e5:4f:af:21:73:9a:bd:34:61:df:4a:31:5a:
67:c7:5a:f1:6d:c7:fb:ab:17:5b:fe:94:4b:60:25:
37:18:af:8c:77:29:a3:b6:1c:02:6c:6a:cf:43:74:
d6:9d:7d:58:a1:06:6e:f8:0f:b8:41:06:46:e0:e6:
e1:53:da:bf:38:5b:15:35:45:f2:17:3f:a9:36:bb:
cd:a7:99:5a:af:fc:30:6f:12:39:39:32:83:6b:dd:
38:15:b9:aa:a4:05:73:b0:29:89:d6:b7:fd:f0:bd:
aa:45:98:5e:e1:72:0b:10:57:ba:a0:43:4e:a0:89:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C0:B8:33:CF:32:21:67:67:84:2B:96:00:02:CC:55:84:1A:C6:55
X509v3 Authority Key Identifier:
keyid:CA:01:FE:82:F1:FC:4A:B7:BF:81:3A:EE:C9:1E:0A:49:C1:72:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygH-gvH8Sre_gTruyR4KScFyiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/c8C4M88yIWdnhCuWAALMVYQaxlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6727ca-2c59-4366-b7bc-97e386216535/1/ygH-gvH8Sre_gTruyR4KScFyiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.78.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5c:41:38:de:23:c1:07:8a:37:71:7b:8d:38:35:54:62:4e:
37:e6:59:10:3d:88:b5:a9:70:b1:02:c2:4f:81:c4:71:7f:01:
4c:02:c6:5b:f2:ac:88:8b:ee:e2:59:7e:9f:27:58:cc:fc:c0:
1b:b5:e1:41:e4:91:9a:cb:53:cb:3c:e2:c0:9a:93:f4:ef:07:
fd:e8:24:46:91:f2:a0:a5:13:7e:6c:a3:6c:44:04:3d:2a:67:
bb:e6:2a:ff:19:f3:37:ef:75:f2:72:f9:2f:9a:93:4c:9d:99:
72:c2:4f:ae:6b:e8:86:ab:fe:35:56:bf:16:ca:4e:65:67:7a:
07:ce:b9:a1:3d:f9:0a:81:5e:76:2b:ce:6b:36:25:2b:55:3a:
5f:16:97:71:ec:6b:57:30:00:68:0b:d1:3e:26:fc:af:74:30:
7c:29:d8:28:be:7c:a6:ba:7a:97:04:6e:93:35:1e:20:02:25:
5d:9f:7d:1d:5c:70:02:7d:21:00:9c:79:82:ac:70:54:97:c1:
db:a6:fc:1f:4e:7b:f8:41:38:63:12:2c:df:5f:c2:b8:c4:1c:
e8:fa:64:f8:ca:51:96:97:86:d9:04:0b:02:f5:e2:02:b7:98:
54:21:92:27:37:fa:68:db:79:16:f6:f9:9b:9e:c4:32:8c:11:
7e:f5:21:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:46 2024 by rpki-client on console-ams.rpki-client.org