Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c6aa16-f64a-455f-8838-48be110a528b/1/yLJa1C6iljYWc7Zq1kEezNgS1Ls.roa
File: yLJa1C6iljYWc7Zq1kEezNgS1Ls.roa (raw, json)
Hash identifier: RJL9L+wKBuQ4oAzljvaLbHkwzf36mv0IzQSwaGx/kNY=
Subject key identifier: C8:B2:5A:D4:2E:A2:96:36:16:73:B6:6A:D6:41:1E:CC:D8:12:D4:BB
Certificate issuer: /CN=e041805c9eba9ed5b22680094af760407bab7f79
Certificate serial: 01FE0362
Authority key identifier: E0:41:80:5C:9E:BA:9E:D5:B2:26:80:09:4A:F7:60:40:7B:AB:7F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EGAXJ66ntWyJoAJSvdgQHurf3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c6aa16-f64a-455f-8838-48be110a528b/1/yLJa1C6iljYWc7Zq1kEezNgS1Ls.roa
Signing time: Sat 01 Jan 2022 08:52:51 +0000
ROA not before: Sat 01 Jan 2022 08:52:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50320
IP address blocks: 193.104.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33424226 (0x1fe0362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041805c9eba9ed5b22680094af760407bab7f79
Validity
Not Before: Jan 1 08:52:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8b25ad42ea296361673b66ad6411eccd812d4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:dc:b6:5b:6b:74:55:0f:93:16:25:0f:f9:
61:88:16:14:d9:de:fe:1f:4a:c4:c0:d2:e2:41:9d:
13:a2:f3:e0:87:fc:77:7c:73:c5:09:18:c9:2c:b8:
79:cd:30:42:70:9b:2b:c0:20:05:57:af:3d:0b:ca:
00:00:37:b0:2c:60:99:61:d4:8c:b6:6a:7f:e4:78:
4f:f1:76:1b:40:a5:eb:e7:48:0f:30:37:60:56:46:
47:65:b3:e8:dc:1f:00:15:31:a1:a3:9f:71:28:61:
ac:6a:83:be:48:92:1e:d0:ed:4f:d0:a5:2f:0b:05:
3b:db:1a:d3:10:99:c4:2d:a4:b8:38:85:b0:d8:24:
f3:98:ec:f0:3c:b0:1c:8f:4f:66:2a:79:92:00:94:
4c:8c:34:1b:c2:45:20:a4:bb:f1:0c:56:54:59:fd:
95:46:a9:b1:58:db:cf:d2:b1:42:b7:f4:95:57:c8:
df:7b:c9:7d:00:79:36:9a:35:00:0e:11:c3:4e:01:
9b:b9:f0:bb:fd:b2:a1:17:15:7a:fa:d2:71:61:9f:
24:ad:33:a9:e1:0d:b8:51:6f:38:1b:3b:6a:88:7e:
0d:aa:bf:a6:06:4c:a4:36:4e:48:f3:d2:e2:b0:fd:
88:7a:0e:a5:54:2a:58:83:bf:ba:0a:1f:b9:b7:1d:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B2:5A:D4:2E:A2:96:36:16:73:B6:6A:D6:41:1E:CC:D8:12:D4:BB
X509v3 Authority Key Identifier:
keyid:E0:41:80:5C:9E:BA:9E:D5:B2:26:80:09:4A:F7:60:40:7B:AB:7F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EGAXJ66ntWyJoAJSvdgQHurf3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c6aa16-f64a-455f-8838-48be110a528b/1/yLJa1C6iljYWc7Zq1kEezNgS1Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c6aa16-f64a-455f-8838-48be110a528b/1/4EGAXJ66ntWyJoAJSvdgQHurf3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.206.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b0:44:cb:71:ec:16:73:e3:3a:37:17:60:79:29:8d:33:f4:
a7:8f:39:7e:4b:b1:b6:d9:ed:b8:c8:c0:b8:25:97:94:2d:8c:
ba:dd:f3:9e:9f:46:7e:9b:c0:db:23:c3:77:89:eb:f2:03:8b:
e3:31:1c:32:93:0e:57:52:f1:dc:8b:50:81:3f:d6:d7:22:05:
d0:f0:f8:ae:76:ab:47:a0:0a:ca:76:2a:c6:a9:fb:73:c1:c1:
70:b7:da:c4:19:9a:63:8b:a2:41:d4:b3:57:66:50:84:e8:cb:
10:e0:3e:d4:77:2c:43:61:5b:35:c6:8e:be:98:4f:af:fb:a1:
39:e3:04:9d:e3:5a:4f:31:15:63:bf:2f:dd:3d:28:a2:eb:2a:
d5:ea:80:c2:7f:ef:3c:bd:7b:73:86:e5:77:38:bb:39:76:c9:
bb:1e:c3:5f:e9:c7:04:e5:57:80:31:93:52:c3:9d:b4:ae:20:
2c:7d:96:77:ea:b0:8c:66:7a:2e:b2:07:17:64:01:fc:4b:c2:
ae:2f:72:e2:24:1a:d4:7b:7b:c8:e9:2e:f9:c2:81:96:58:25:
33:03:dd:01:dd:a9:39:e8:20:56:d8:03:8a:7b:4d:9d:dd:a0:
d2:02:6c:90:19:84:ad:42:5e:de:c7:65:c2:09:5d:29:7b:9f:
29:ea:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:10 2023 by rpki-client on console-ams.rpki-client.org