Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/pKecvc5VBWSngjHqqb-TFkVWK_Y.roa
File: pKecvc5VBWSngjHqqb-TFkVWK_Y.roa (raw, json)
Hash identifier: ZRCL7qoVHoURyFbxNMFHvPAwZWRrrKqlA6G0nZegkQ8=
Subject key identifier: A4:A7:9C:BD:CE:55:05:64:A7:82:31:EA:A9:BF:93:16:45:56:2B:F6
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018C4AF5F0319F9CE261EBA9F32E3121517D
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/pKecvc5VBWSngjHqqb-TFkVWK_Y.roa
Signing time: Fri 08 Dec 2023 19:44:40 +0000
ROA not before: Fri 08 Dec 2023 19:44:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398826
IP address blocks: 104.160.21.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.20.0/24 maxlen: 24
104.160.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:f5:f0:31:9f:9c:e2:61:eb:a9:f3:2e:31:21:51:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Dec 8 19:44:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4a79cbdce550564a78231eaa9bf931645562bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:eb:28:e2:23:b3:ef:e6:07:ab:31:aa:65:
bd:cd:31:69:68:8b:54:8a:5e:36:7e:77:96:4f:b9:
e0:cd:ee:01:f9:44:91:29:d6:58:c5:08:48:6a:dc:
1d:85:15:b9:e0:f3:1a:5d:ef:cd:4e:0e:6b:29:da:
5b:07:8c:c8:83:82:2d:2b:96:6b:93:1d:f3:56:38:
a0:23:86:64:e8:69:4a:14:23:36:27:e6:5b:cd:80:
06:45:3c:64:ae:a8:65:07:57:27:89:30:ba:49:5a:
b5:6b:62:b5:e4:31:96:01:12:41:dc:6f:fe:c8:ed:
2e:e6:98:2d:27:b4:61:ec:9d:9e:04:38:46:0e:60:
7b:92:fe:2e:bf:77:89:dc:f6:e2:4b:63:91:4f:ca:
4b:d2:20:4e:93:65:ad:96:f7:64:84:84:cd:90:30:
c2:80:e9:4a:88:96:07:db:af:d7:0d:2e:2e:35:5e:
c6:28:52:08:57:97:28:e0:e0:99:b5:4f:e0:f7:04:
80:46:32:85:e2:a0:ad:c0:47:e0:20:12:1b:6e:a8:
e5:16:62:94:9a:e8:08:07:ab:c3:84:90:ba:21:cf:
b5:3e:0a:88:a2:52:70:02:78:46:39:75:7d:84:8b:
8b:14:b8:3d:93:6f:91:fe:09:5e:af:44:fb:c9:68:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:9C:BD:CE:55:05:64:A7:82:31:EA:A9:BF:93:16:45:56:2B:F6
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/pKecvc5VBWSngjHqqb-TFkVWK_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.18.0-104.160.21.255
Signature Algorithm: sha256WithRSAEncryption
86:2e:53:0d:eb:ff:7f:a1:cc:f6:71:fe:b4:34:da:bb:0f:55:
f5:6f:d2:bf:08:a1:34:47:50:f9:2d:1a:80:3b:b6:71:bf:85:
49:e7:39:62:89:ec:78:ae:bf:f0:dc:b8:79:b1:61:38:8f:02:
cb:66:dd:5d:85:d6:06:e0:1d:8f:59:70:32:03:f2:42:fb:13:
7d:be:15:35:94:c0:6e:d2:7d:8f:6e:bc:eb:7e:2c:48:92:16:
b7:22:8e:58:05:a9:f0:66:4f:1c:64:2d:f2:53:d3:32:8d:48:
84:c7:f9:ae:e5:df:07:78:36:08:12:6e:ac:d5:39:13:d7:70:
5e:a3:b6:35:a6:70:d7:65:c2:55:fa:f1:fe:7e:70:4c:e9:12:
31:9d:a9:d6:81:56:e6:de:dd:d0:74:b5:98:59:61:83:e4:22:
4d:4f:84:a2:ab:83:d3:c6:ab:fb:76:76:43:8a:e1:b4:da:e6:
c8:5a:70:aa:66:10:75:88:b5:2f:3b:8c:92:84:4c:43:97:a9:
85:58:a2:43:19:66:72:b7:7d:8d:13:c7:a2:3c:94:51:f8:7c:
ba:f8:7b:e5:4c:e6:6b:53:3a:47:bc:09:d9:b4:2c:91:57:e4:
19:b8:e7:8f:a2:bb:67:80:c7:a9:af:8b:0b:af:be:8f:7b:44:
ab:fd:12:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:22 2024 by rpki-client on console-ams.rpki-client.org