Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/Y3hJiIAtjbLbe3vGug-D9uGy3-c.roa
File: Y3hJiIAtjbLbe3vGug-D9uGy3-c.roa (raw, json)
Hash identifier: 9eVaskJy/QkbpORk7/Y53MPZJxZCdIUZhm8nkDQslM0=
Subject key identifier: 63:78:49:88:80:2D:8D:B2:DB:7B:7B:C6:BA:0F:83:F6:E1:B2:DF:E7
Certificate issuer: /CN=bdc762aaf5adc004dad38dc8026d603da23578dc
Certificate serial: 01874DB36182D6028776AE05802BD0639BF1
Authority key identifier: BD:C7:62:AA:F5:AD:C0:04:DA:D3:8D:C8:02:6D:60:3D:A2:35:78:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vcdiqvWtwATa043IAm1gPaI1eNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/Y3hJiIAtjbLbe3vGug-D9uGy3-c.roa
Signing time: Tue 04 Apr 2023 19:16:54 +0000
ROA not before: Tue 04 Apr 2023 19:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39519
IP address blocks: 195.191.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:b3:61:82:d6:02:87:76:ae:05:80:2b:d0:63:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc762aaf5adc004dad38dc8026d603da23578dc
Validity
Not Before: Apr 4 19:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63784988802d8db2db7b7bc6ba0f83f6e1b2dfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:77:3b:f2:fd:7d:72:b4:06:af:e9:8e:fc:
73:2d:38:27:09:6c:2f:44:df:4c:72:58:66:50:95:
0f:90:a4:3e:d5:c2:4b:53:6f:dc:60:08:2b:a4:d3:
c4:8a:a8:92:f9:45:9b:59:aa:b4:88:78:9c:5e:de:
5b:f2:6d:ef:c4:3e:bb:77:d5:6d:09:e3:e4:f5:84:
d3:e3:39:84:a3:df:fe:5f:f3:db:89:13:16:8f:d4:
f9:28:88:11:c0:5d:9f:82:5f:2b:0a:37:fe:1c:61:
77:90:02:0f:7c:70:17:8d:2f:22:4b:64:8f:c3:64:
b7:2b:01:58:9b:bb:5a:f5:98:1d:f1:2e:3f:fd:80:
21:7f:a5:12:94:80:59:7f:b4:06:77:02:b7:8f:56:
3b:c7:a6:1b:a2:62:89:3a:26:7a:4e:3a:3a:2f:27:
2a:6a:eb:10:01:cc:4e:20:0e:bb:47:26:5c:9a:55:
f4:91:30:5d:a5:17:aa:f6:88:39:95:a9:b4:fa:22:
9d:8c:85:16:4b:30:b1:fc:88:06:96:0a:cd:17:f3:
a3:f4:40:d8:6a:31:e6:d0:5d:64:ef:57:3c:9b:34:
d0:f7:a3:4b:b0:13:5f:74:05:c7:9e:c3:a3:1c:2f:
b2:c8:07:54:fa:7a:72:cc:dc:01:7f:0b:39:3c:68:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:78:49:88:80:2D:8D:B2:DB:7B:7B:C6:BA:0F:83:F6:E1:B2:DF:E7
X509v3 Authority Key Identifier:
keyid:BD:C7:62:AA:F5:AD:C0:04:DA:D3:8D:C8:02:6D:60:3D:A2:35:78:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcdiqvWtwATa043IAm1gPaI1eNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/Y3hJiIAtjbLbe3vGug-D9uGy3-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/vcdiqvWtwATa043IAm1gPaI1eNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:09:4d:7f:7a:46:ae:17:ca:1a:b6:b0:ca:8d:b5:b4:a3:52:
cc:27:94:a4:b3:f3:5c:d1:2d:40:7c:26:23:3b:3d:0d:5d:d9:
a5:8e:92:9d:86:03:fe:d3:79:13:78:86:91:e8:80:00:2f:76:
06:1b:9d:de:52:2c:d6:73:38:1f:b3:c9:bb:b3:02:be:c3:71:
55:c8:f1:57:81:c0:01:de:14:4c:e5:13:80:03:14:f2:1b:f4:
70:e4:ba:b1:de:10:82:3c:58:0d:d8:5a:25:91:ee:7f:88:d2:
2d:ee:9c:f7:4e:0d:3f:ff:9b:1d:80:5a:50:01:ff:02:dd:92:
44:43:9a:6e:8d:f3:df:bb:3d:e8:df:c1:23:a9:dd:ab:2b:09:
09:d4:ea:57:f5:fe:df:ff:a8:ae:00:8e:99:6a:97:ab:d2:9f:
05:eb:24:a8:e3:55:87:f2:1e:2e:8f:c8:89:96:e6:2e:f4:fc:
4c:48:8b:8d:bf:e3:62:a5:c5:aa:ed:d3:68:29:4e:73:d1:1b:
53:85:d5:43:4f:87:41:96:14:61:ce:8f:86:9d:22:c0:3e:36:
fc:ba:4e:08:be:23:cc:75:35:b4:6b:b0:ae:d6:5f:96:13:0a:
5b:f3:33:03:b0:ac:6d:9b:93:6c:23:4e:2b:62:ee:44:77:74:
39:6d:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:06 2025 by rpki-client