Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/YVR3oWoGqbuhnRmMgwhTVNdkYYE.roa
File: YVR3oWoGqbuhnRmMgwhTVNdkYYE.roa (raw, json)
Hash identifier: UsCVTKC/lH7F0aguvYot2LPN4XqbVhRXoEugIwGWfXQ=
Subject key identifier: 61:54:77:A1:6A:06:A9:BB:A1:9D:19:8C:83:08:53:54:D7:64:61:81
Certificate issuer: /CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Certificate serial: 018571D7DD03E36EFEFFADC9B24FF7583D46
Authority key identifier: 14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/YVR3oWoGqbuhnRmMgwhTVNdkYYE.roa
Signing time: Mon 02 Jan 2023 09:37:30 +0000
ROA not before: Mon 02 Jan 2023 09:37:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.149.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:dd:03:e3:6e:fe:ff:ad:c9:b2:4f:f7:58:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1464c35730b65c6f1e420e59a9627980b53bc1a5
Validity
Not Before: Jan 2 09:37:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=615477a16a06a9bba19d198c83085354d7646181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:3f:3e:88:08:a1:ea:5f:fe:3c:1c:55:63:
fa:17:d6:82:22:14:f4:6e:43:85:55:c3:00:a9:69:
93:43:cc:7a:c2:e5:49:df:02:fc:de:82:28:90:1f:
2e:72:2c:3b:f2:48:61:82:1a:be:1d:6b:b3:67:d8:
d6:1d:e8:25:25:35:1c:5d:53:e0:5f:9e:11:b7:19:
3b:da:19:ae:70:7f:ef:fe:98:b6:28:90:44:9c:24:
94:9d:72:c1:6e:ab:a6:d6:3a:2f:4b:ac:29:07:d9:
7c:2d:50:2a:f5:3f:4a:3c:2e:35:5d:2a:e3:87:08:
d2:00:bc:9f:e4:45:eb:17:8c:ff:77:e9:8a:e4:33:
7b:da:f7:37:ad:f4:b3:37:71:eb:58:e2:0f:1e:f5:
dc:ab:2a:e4:56:64:1c:64:07:12:9a:3b:fc:b3:f4:
cc:e1:e4:78:8a:69:1c:9b:85:fb:24:3b:6c:ee:8e:
bc:50:9a:9a:8c:f2:11:59:5e:7a:6b:e5:43:52:41:
c5:9b:6e:e0:b5:e4:30:a4:54:fa:fd:7e:8e:6e:4c:
b7:da:18:6b:74:94:24:c1:01:ad:9d:a0:4e:b4:2d:
36:6b:d5:86:b4:ec:8b:fc:72:68:30:01:cd:8d:af:
ba:e8:a7:8d:25:d1:ad:9c:ba:bf:f9:78:cd:86:96:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:54:77:A1:6A:06:A9:BB:A1:9D:19:8C:83:08:53:54:D7:64:61:81
X509v3 Authority Key Identifier:
keyid:14:64:C3:57:30:B6:5C:6F:1E:42:0E:59:A9:62:79:80:B5:3B:C1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/YVR3oWoGqbuhnRmMgwhTVNdkYYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/154f81-ea44-4e76-845e-b0718f437d7c/1/FGTDVzC2XG8eQg5ZqWJ5gLU7waU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.148.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6e:c6:0d:98:cb:dc:25:4b:1e:6d:74:87:c8:ba:b0:8a:b0:
3b:74:67:21:70:fb:ab:d7:01:c2:ec:2d:e2:2f:d6:8e:e4:fe:
d6:aa:5c:fc:bd:57:2e:d3:da:48:04:1d:ac:49:75:ea:07:b1:
01:bc:81:19:ce:54:7a:f0:f2:f6:a8:dc:02:ad:fc:66:ba:93:
e1:20:6e:80:15:49:c3:c8:ca:72:07:1e:04:16:7e:76:bf:39:
34:13:2c:5a:67:24:8b:81:fc:48:bb:99:a4:f4:d8:10:cc:a2:
58:6a:c1:c3:ba:9f:02:cd:96:e0:ac:d8:63:32:a1:16:45:d8:
b4:d5:c1:20:f0:92:8a:32:1e:0f:46:74:84:f8:2e:40:f2:82:
92:25:75:70:c1:72:81:f3:b4:14:b1:23:84:62:2f:e2:3f:47:
05:be:64:50:ad:f0:8e:be:ea:db:42:6c:dc:50:63:c3:a2:80:
20:aa:a8:4b:ac:7c:35:7b:83:29:f0:15:17:42:e5:24:e0:d7:
37:82:bc:bd:06:a2:61:95:05:0c:21:4c:05:c4:31:b2:c0:5a:
fb:ad:36:d9:f7:bd:2b:05:cc:91:df:a6:47:99:30:a4:85:e6:
0c:11:7c:0a:17:ee:bc:90:38:70:60:e7:88:cf:50:55:0a:72:
ae:73:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:53 2024 by rpki-client on console-ams.rpki-client.org