Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/yKEq8Y0EwJsiSiIVa_YsRrsFnqc.roa
File: yKEq8Y0EwJsiSiIVa_YsRrsFnqc.roa (raw, json)
Hash identifier: rrmoFnj3Bdbi41bTWQd4paTULVA6T96Nz+vT153sdiE=
Subject key identifier: C8:A1:2A:F1:8D:04:C0:9B:22:4A:22:15:6B:F6:2C:46:BB:05:9E:A7
Certificate issuer: /CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Certificate serial: 01882086727F1376A2E6E1098310B6607D4D
Authority key identifier: B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/yKEq8Y0EwJsiSiIVa_YsRrsFnqc.roa
Signing time: Mon 15 May 2023 17:47:41 +0000
ROA not before: Mon 15 May 2023 17:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 194.150.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:72:7f:13:76:a2:e6:e1:09:83:10:b6:60:7d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Validity
Not Before: May 15 17:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8a12af18d04c09b224a22156bf62c46bb059ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:5e:20:b9:dd:45:72:1d:4c:6d:ff:6a:03:
fb:12:cf:4d:a4:ba:ab:68:4b:fa:db:f2:8d:f7:ab:
66:fa:27:e9:b1:cf:4a:e1:c4:06:44:c9:d5:a2:96:
cb:1a:f0:4c:71:e6:f3:36:18:86:90:54:43:3e:c5:
94:79:13:a2:0a:70:9e:ba:ce:c9:30:62:bb:65:d0:
e1:8f:be:e6:2f:8b:01:4c:7e:74:a6:5c:13:25:4b:
d9:5d:21:7e:ee:00:07:c1:9a:3c:90:68:55:e0:ef:
e7:7c:7c:f6:cd:23:2c:e2:b3:31:bc:a4:a3:67:4f:
93:f0:f1:56:3e:00:d1:8a:78:82:cc:74:34:ab:73:
f1:a3:f8:dd:81:ac:bb:9a:01:a0:20:b3:79:25:e8:
25:6c:9d:05:0e:c1:cd:6f:1a:9d:01:f3:38:ff:02:
89:5b:d6:c3:07:76:36:16:d7:2a:dd:f8:d1:30:6b:
82:86:40:b3:de:21:4c:49:a0:a1:19:48:63:77:c7:
68:6f:ea:64:3d:cf:d3:04:a4:66:24:49:63:92:bb:
bc:d2:9e:df:19:5e:fc:6c:64:a6:49:81:39:67:f3:
cf:f1:8d:f0:67:bf:d5:78:d0:60:0d:dc:f1:62:09:
0f:96:e9:6c:ab:58:bd:ba:3e:eb:97:64:a4:bb:31:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A1:2A:F1:8D:04:C0:9B:22:4A:22:15:6B:F6:2C:46:BB:05:9E:A7
X509v3 Authority Key Identifier:
keyid:B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/yKEq8Y0EwJsiSiIVa_YsRrsFnqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/ssHUKM3uHrP_v23yMY-ZVN2IX_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:68:18:2b:28:b2:70:5b:4c:91:5c:61:8d:16:32:f9:1c:c2:
c1:71:5a:97:ec:2a:30:83:6f:b4:cb:cc:96:7b:49:71:6b:ae:
da:2c:0f:4e:1a:5e:8a:4a:f8:e0:59:7b:52:46:ef:d9:3f:0c:
6d:3d:29:4d:0b:17:92:a3:b2:37:f0:3c:54:f1:22:5a:7a:ab:
50:0d:dd:cb:ed:03:f5:dc:e2:dd:cd:6e:83:2b:ce:b5:45:bb:
1e:6c:15:28:bf:39:05:5d:65:4f:28:91:81:c5:ab:c1:9b:1d:
84:7b:02:f4:43:f3:3b:eb:6c:fe:7a:d2:b0:9c:d2:88:da:78:
fd:49:74:2c:b6:45:a0:73:a3:8f:27:b5:c7:46:69:be:ae:12:
72:b9:43:fd:b9:59:44:b5:a3:79:0f:58:d1:de:cd:6e:01:db:
59:33:62:98:56:70:b1:43:b7:be:cc:a4:53:05:83:ba:da:e9:
9b:f6:61:16:ce:e0:73:e6:21:cb:b7:ff:af:9c:2a:68:e5:a4:
00:e9:a5:14:a1:7e:fe:80:d5:58:3e:89:9e:fc:d2:2f:40:94:
f6:40:ec:a7:24:fe:58:de:e7:6b:97:64:ef:2f:b5:d7:c8:de:
c7:94:af:a7:b5:3d:5c:1f:d1:8f:30:2d:b2:19:dd:b9:3e:f5:
51:20:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 10:20:17 2023 by rpki-client on console-ams.rpki-client.org