Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YgRjZw41Eog2cnThDEaXmaifAEg.roa
File: YgRjZw41Eog2cnThDEaXmaifAEg.roa (raw, json)
Hash identifier: v1jFLen9x/+7ge4b5Lh7QnDntljPiL/cXls5YWvlF24=
Subject key identifier: 62:04:63:67:0E:35:12:88:36:72:74:E1:0C:46:97:99:A8:9F:00:48
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018CC348DC1C759921ED759C442B7350A035
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YgRjZw41Eog2cnThDEaXmaifAEg.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48950
IP address blocks: 104.160.4.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
158.222.3.0/24 maxlen: 24
158.222.5.0/24 maxlen: 24
158.222.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:dc:1c:75:99:21:ed:75:9c:44:2b:73:50:a0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=620463670e351288367274e10c469799a89f0048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:0a:86:65:bd:fd:8f:af:47:8d:6a:d2:0e:
78:f9:3b:2a:8f:06:39:cf:66:50:a3:b1:f1:54:8e:
55:03:21:c4:b6:f8:d0:fc:e1:06:88:ed:df:76:f0:
b7:99:4c:2e:74:52:71:a7:88:c7:ef:a3:7b:0f:4b:
33:8d:48:f7:ba:ba:28:be:c3:ba:56:a6:ba:d2:a5:
3a:fb:72:1d:7f:c7:c5:e2:d1:6d:ca:3f:dc:e6:75:
92:6d:d1:96:05:6d:01:a7:15:4e:f7:14:e7:92:96:
d7:9f:53:f5:9d:58:97:a7:9b:9b:d2:9a:99:c0:d3:
09:32:34:6c:75:7f:b1:65:c9:b7:0a:f5:68:6c:60:
f4:f3:ea:44:e4:46:6d:3e:77:dd:7a:db:3a:16:b9:
71:c4:02:87:9c:cf:d0:b4:1b:fd:71:4d:16:da:e7:
cb:7e:56:cb:94:31:61:e1:20:90:0e:e4:41:de:1c:
80:8e:47:66:d7:3a:40:3b:f5:f3:3e:f0:51:37:02:
d2:d2:3d:c1:6d:3d:76:ec:e2:43:c5:76:31:1d:5d:
08:1e:5e:31:e1:b7:49:57:46:12:8d:d2:da:df:a9:
b6:ba:56:ac:e3:33:ca:9c:a4:6f:82:8d:fd:06:df:
dc:27:80:ae:01:af:c6:ec:85:85:a0:04:18:ef:62:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:04:63:67:0E:35:12:88:36:72:74:E1:0C:46:97:99:A8:9F:00:48
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YgRjZw41Eog2cnThDEaXmaifAEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.4.0/24
104.160.10.0/24
158.222.3.0/24
158.222.5.0/24
158.222.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9a:4d:e7:4f:ae:c4:a8:3e:c3:e7:8e:14:ab:d4:34:fc:41:
70:67:b8:5a:fc:c6:5c:07:34:63:8f:27:63:1e:7f:58:c5:43:
60:fe:db:1f:54:34:7f:90:1d:4c:19:64:af:71:e0:e3:10:90:
26:a3:c1:f8:b5:01:1f:5a:9f:59:7e:91:4c:bc:ea:8b:09:d6:
10:20:f5:d8:55:ce:d3:0a:3f:91:38:fc:87:41:b3:de:d7:6b:
f7:b6:29:2f:81:61:00:5f:d6:8c:22:d9:80:08:b6:1b:71:7a:
f8:e5:4b:86:14:8a:f6:ba:d8:45:31:5f:f1:9b:f4:2a:0c:c8:
0b:f2:1e:a8:79:38:f1:9f:8a:7b:46:e9:7e:fc:c8:bd:33:92:
da:62:1f:bb:b8:28:86:50:c8:34:13:c4:1c:72:ce:2b:e8:50:
16:4a:62:e8:14:a9:4c:af:27:5d:d6:78:d3:95:94:82:d5:aa:
f4:eb:93:46:49:ec:d6:93:73:11:d9:3b:3f:2a:0e:19:54:36:
e0:45:77:6a:78:01:c7:d3:45:a0:bc:32:9f:a8:d2:68:10:8c:
20:27:b5:e9:2d:6e:8e:f2:88:f7:f3:5d:5e:83:1d:d9:a7:79:
e7:62:22:08:0e:f3:28:52:5b:6b:1e:1e:20:99:27:87:c1:75:
e0:b5:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:22 2024 by rpki-client on console-ams.rpki-client.org