Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/yhX-mRDw60dKLTUCdIUd9M14BTI.roa
File: yhX-mRDw60dKLTUCdIUd9M14BTI.roa (raw, json)
Hash identifier: TUWpjV4gt1bGR6MfAbMbFkAAP2nqKASgJ4noHn3hC14=
Subject key identifier: CA:15:FE:99:10:F0:EB:47:4A:2D:35:02:74:85:1D:F4:CD:78:05:32
Certificate issuer: /CN=bf174a5833bde6aa7824c34099762d00978857ff
Certificate serial: 3580D8C5
Authority key identifier: BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/yhX-mRDw60dKLTUCdIUd9M14BTI.roa
Signing time: Sat 01 Jan 2022 11:56:07 +0000
ROA not before: Sat 01 Jan 2022 11:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15423
IP address blocks: 193.163.252.0/24 maxlen: 24
193.163.251.0/24 maxlen: 24
193.163.250.0/24 maxlen: 24
193.163.249.0/24 maxlen: 24
193.163.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897636549 (0x3580d8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf174a5833bde6aa7824c34099762d00978857ff
Validity
Not Before: Jan 1 11:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca15fe9910f0eb474a2d350274851df4cd780532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:05:39:ba:07:00:50:46:df:88:49:93:b9:
1c:08:09:47:d6:35:c9:76:50:69:ae:5c:34:5a:8d:
f3:c8:71:9a:ce:0a:55:eb:8f:0b:fd:1f:dc:c6:97:
8c:85:c9:ab:69:f7:a3:bb:84:5f:ea:b8:74:b1:ac:
ed:31:0a:db:74:4f:5f:cf:de:ac:1d:6a:49:22:57:
2c:d1:75:53:f7:dc:40:04:25:98:88:69:77:dd:c5:
54:49:99:a3:1e:ba:9f:6c:6b:91:f6:62:10:2c:e1:
3b:6f:25:88:e1:fc:f1:42:52:f6:71:b6:5f:41:c9:
bd:9e:c5:3e:52:99:7b:d3:cd:17:b7:5e:ed:9c:a1:
e1:53:8d:2e:30:97:1e:bb:9e:ed:0f:ba:ac:ed:65:
91:bb:c4:f4:85:68:b9:e2:83:c5:15:cc:24:f7:2f:
30:1c:9d:f7:6e:39:42:25:bd:86:4c:ca:7a:ff:77:
b3:c1:c1:fd:08:4c:23:db:4a:2c:3e:ac:b2:de:41:
ea:7d:55:81:bb:79:65:09:98:49:72:cf:30:2c:99:
da:01:fc:03:41:d3:66:24:61:f0:9c:ce:41:25:37:
0f:9e:da:33:42:3f:ba:7c:ee:0b:e6:0b:05:ec:65:
5f:69:b6:4b:1d:40:b6:f5:a0:d8:31:20:70:67:25:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:15:FE:99:10:F0:EB:47:4A:2D:35:02:74:85:1D:F4:CD:78:05:32
X509v3 Authority Key Identifier:
keyid:BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/yhX-mRDw60dKLTUCdIUd9M14BTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/vxdKWDO95qp4JMNAmXYtAJeIV_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.248.0-193.163.252.255
Signature Algorithm: sha256WithRSAEncryption
34:ce:32:3b:6e:ad:b7:a6:45:49:de:c2:ab:f2:42:86:66:d6:
dd:c8:41:bd:a9:c4:9b:2f:d7:b0:48:81:a4:0e:17:b4:a3:9a:
b0:3b:d2:8e:56:13:b6:81:f5:52:1f:e5:c6:d6:5d:b4:09:86:
ae:d0:c0:c8:5b:df:04:9c:04:ef:13:bd:e5:92:cd:43:d4:be:
9e:b1:81:3b:81:f7:5d:10:16:28:3e:f3:c5:3a:f4:b5:fa:64:
a6:4c:ce:d6:43:34:8d:f5:7a:08:99:2d:a1:26:31:fc:93:96:
5e:5e:8b:cd:42:c4:80:14:fb:e3:6d:c4:cd:0d:2a:a4:b7:2a:
b3:65:41:56:e2:f7:3f:e9:9c:55:cb:01:57:b9:69:70:16:07:
41:1f:ec:52:e1:0b:b6:0d:c8:3e:c8:19:23:a8:60:ac:f3:00:
cb:28:3b:ee:9e:6d:1c:46:78:8d:da:45:bf:ef:a5:a1:20:c7:
1d:f2:be:28:68:13:fe:0d:9c:bd:11:20:17:60:0d:21:f2:c1:
40:94:07:82:a9:c4:a6:7e:2e:4f:56:f3:0a:58:37:f4:c9:4b:
51:ef:14:f1:6a:ad:20:f7:40:66:f4:6e:57:c1:93:c9:3d:c4:
32:7d:1d:21:de:d0:85:3b:b5:56:30:e5:4d:d1:20:63:e3:e8:
f5:91:34:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:34 2024 by rpki-client on console-ams.rpki-client.org