Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yci30o92nFO_imSqpvhhwk_eBzI.roa
File: Yci30o92nFO_imSqpvhhwk_eBzI.roa (raw, json)
Hash identifier: fYDPSPBuAk8za+brUIqkXjzMPDri4lzgYE8MNG86PFU=
Subject key identifier: 61:C8:B7:D2:8F:76:9C:53:BF:8A:64:AA:A6:F8:61:C2:4F:DE:07:32
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15C6EA64
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yci30o92nFO_imSqpvhhwk_eBzI.roa
Signing time: Sat 01 Jan 2022 05:59:12 +0000
ROA not before: Sat 01 Jan 2022 05:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213122
IP address blocks: 185.147.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365357668 (0x15c6ea64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 1 05:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61c8b7d28f769c53bf8a64aaa6f861c24fde0732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:01:14:d9:86:82:41:04:5b:f2:00:8e:c8:9b:
5d:c7:d0:08:4f:31:d9:eb:67:e9:b4:6b:66:70:12:
64:32:3e:d9:da:3e:23:d4:d8:08:64:a3:7f:04:0c:
cb:7e:05:c6:59:c5:50:20:0c:c4:26:57:84:22:fb:
87:63:44:8e:58:25:fc:c8:8c:9f:cd:c2:15:28:0f:
4e:90:fb:94:c7:97:70:3a:bf:ef:aa:f1:f3:f6:b5:
53:cf:21:65:bf:c6:ed:39:9b:9e:b0:ba:6c:6f:89:
ba:88:64:74:f0:00:3a:5c:b2:c5:27:1b:ce:7d:a4:
a6:43:23:fd:2b:a5:25:64:e6:cb:91:3a:90:45:b2:
09:d9:57:38:2a:26:8a:2c:1e:3f:fa:7c:4c:3b:f2:
a5:e8:7d:a6:32:8c:2d:e4:40:01:20:75:af:c9:0f:
c6:c1:4f:16:14:48:d3:de:92:0a:f6:c2:79:89:f2:
c6:e6:e5:ad:ad:6e:6a:b2:98:89:07:37:f4:e8:bd:
18:e4:8d:75:c5:16:22:ca:b5:b8:a0:5a:6f:28:c3:
4e:c7:e5:16:cc:b7:f5:7d:93:17:7d:ca:48:37:99:
94:07:0f:9c:ee:72:de:42:6f:03:80:ad:2d:5b:2a:
a3:c4:ce:de:7e:28:31:04:c5:f2:99:06:67:0f:8f:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C8:B7:D2:8F:76:9C:53:BF:8A:64:AA:A6:F8:61:C2:4F:DE:07:32
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yci30o92nFO_imSqpvhhwk_eBzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.34.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ec:df:99:72:80:ba:18:bf:9d:b4:4c:5f:7b:e5:15:27:d4:
a9:1f:98:46:2d:7e:55:1a:b3:fa:e1:20:be:b7:22:2d:04:07:
8b:01:5b:42:f8:71:91:68:c8:bc:12:37:2f:22:9a:1c:94:83:
21:6f:9e:cb:83:5d:04:b9:74:90:37:22:35:63:10:8e:bd:19:
39:ba:73:89:1f:98:2c:75:7a:59:33:57:4d:fb:98:0b:76:78:
b7:ee:40:d5:2b:0a:22:53:cf:57:61:e2:ec:2e:e0:e2:0e:db:
06:3c:fd:7e:30:c9:48:12:2c:07:69:fc:49:e2:71:71:35:7e:
8a:3d:81:84:68:d6:cd:14:ea:1f:ff:66:aa:ce:b6:40:06:e0:
8d:32:5a:d1:d1:4d:7b:eb:81:4b:60:e5:4e:84:16:5a:e8:9b:
67:0e:2b:53:44:c3:27:2b:80:18:ef:29:0c:e3:04:93:70:7a:
53:5e:77:0f:bd:e7:bc:46:b0:73:40:65:34:26:6c:83:f0:9a:
a2:eb:a7:d3:1e:19:a4:d7:b8:02:1f:b4:d2:62:aa:5b:91:19:
99:c6:2e:16:a5:8a:6b:1d:f9:74:f2:6c:87:7b:79:cf:ce:f6:
20:46:25:60:f1:f0:5a:f6:14:66:b0:ba:69:4d:a7:84:71:04:
f7:e7:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org