Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/ybpbzDk09zdGDBRXc_O4-G1fTs8.roa
File: ybpbzDk09zdGDBRXc_O4-G1fTs8.roa (raw, json)
Hash identifier: uckqaq6r0bIe0wlat7kOtMCOGSfaTp1WfuiDx8GxpWU=
Subject key identifier: C9:BA:5B:CC:39:34:F7:37:46:0C:14:57:73:F3:B8:F8:6D:5F:4E:CF
Certificate issuer: /CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Certificate serial: 0186F5D64B68607FF67ECB0385D0FB0873A1
Authority key identifier: CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/ybpbzDk09zdGDBRXc_O4-G1fTs8.roa
Signing time: Sat 18 Mar 2023 17:48:27 +0000
ROA not before: Sat 18 Mar 2023 17:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212835
IP address blocks: 185.136.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f5:d6:4b:68:60:7f:f6:7e:cb:03:85:d0:fb:08:73:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Validity
Not Before: Mar 18 17:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9ba5bcc3934f737460c145773f3b8f86d5f4ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:32:61:61:a3:a2:a1:a7:2c:4c:53:a3:ee:
42:63:cb:3a:40:6f:34:5f:b9:fe:2b:aa:94:9a:c0:
ab:15:05:79:f6:5e:bf:b3:05:31:d7:a7:f8:4c:d2:
17:36:94:05:ac:91:b5:12:55:fa:6e:b9:3a:e5:69:
b0:fc:75:a0:b1:c4:16:09:91:4a:9f:b5:a8:25:3a:
86:cb:7b:71:71:f1:bf:db:00:9b:2c:4a:a1:ae:6b:
48:40:00:37:8b:30:f9:0c:03:ca:f4:e1:90:80:af:
ae:4e:e3:6c:ce:a2:43:cc:0e:aa:ea:ec:e2:46:5b:
08:b8:3f:c1:ae:49:12:c4:ac:e5:42:a5:13:1b:dd:
ce:ea:7e:24:f9:e8:93:48:e8:00:62:89:93:eb:5d:
81:61:bc:6f:8c:10:d8:4f:4b:74:c8:04:b3:79:11:
0f:88:97:67:c4:30:ad:30:b0:27:b9:4d:3c:0a:b0:
5b:e5:c0:c4:ea:8b:ce:a8:45:65:c7:de:1f:60:d8:
46:c6:13:b4:ea:6b:39:47:3d:26:11:22:0e:fe:73:
71:13:a1:de:ed:8e:3e:b6:42:0d:e8:ae:2c:c2:61:
4d:0d:13:b9:91:b0:8a:20:4d:7a:3e:b5:68:59:96:
ba:1f:16:54:f6:51:58:f2:82:30:6e:ba:c3:d2:bd:
21:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:5B:CC:39:34:F7:37:46:0C:14:57:73:F3:B8:F8:6D:5F:4E:CF
X509v3 Authority Key Identifier:
keyid:CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/ybpbzDk09zdGDBRXc_O4-G1fTs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.135.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3e:36:9f:ea:40:fc:a4:d6:a9:e2:06:7c:21:5e:10:41:d1:
e2:21:8d:60:09:73:cc:00:25:20:22:1b:73:e3:33:18:bf:3c:
3c:4c:a7:93:54:68:da:5f:b0:14:fe:47:77:12:9f:a1:34:9c:
3a:db:3f:a5:d5:15:56:3a:38:ec:d7:bc:42:1e:49:1a:f3:1b:
5a:68:13:14:73:f6:dc:0a:2e:18:05:18:7d:2e:64:38:49:d5:
e3:40:81:1d:a4:c8:9b:bd:fc:e6:32:36:82:f8:72:1d:79:2b:
b8:f9:65:54:98:ab:c4:70:71:39:7f:66:a7:4b:8b:6f:dd:96:
00:1e:a0:d8:18:b4:47:d2:f3:07:e2:d2:5c:ff:51:64:10:d7:
e1:f5:49:3c:47:48:6a:b8:02:38:df:01:97:0a:43:14:12:94:
62:6d:0f:ed:94:33:9b:e2:85:67:d6:df:38:42:34:20:cb:65:
fa:46:0d:7a:8d:4e:35:c7:52:65:8e:fd:a2:b1:1a:16:00:8f:
3f:2d:3f:29:59:6a:11:24:01:d3:f6:9b:bc:b4:90:03:3d:91:
5e:4b:bd:63:37:5c:06:26:94:fa:58:8c:70:a6:e9:a0:c5:47:
7b:13:ad:ae:fc:ac:85:98:de:a8:52:b5:b8:84:68:44:d1:31:
68:30:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:24 2025 by rpki-client