Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/y5JT9F8Ol5-bq4k7FM_FjYyff0s.roa
File: y5JT9F8Ol5-bq4k7FM_FjYyff0s.roa (raw, json)
Hash identifier: q/cyc1hq9JxHz9tiDKMbcp0P59/LOcrox4Qnp5GsCsY=
Subject key identifier: CB:92:53:F4:5F:0E:97:9F:9B:AB:89:3B:14:CF:C5:8D:8C:9F:7F:4B
Certificate issuer: /CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Certificate serial: 01856BAEE2607C5E13A0ECBDE1E76857FAC4
Authority key identifier: 43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/y5JT9F8Ol5-bq4k7FM_FjYyff0s.roa
Signing time: Sun 01 Jan 2023 04:55:01 +0000
ROA not before: Sun 01 Jan 2023 04:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15969
IP address blocks: 194.187.72.0/24 maxlen: 24
46.250.170.0/24 maxlen: 24
46.250.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:e2:60:7c:5e:13:a0:ec:bd:e1:e7:68:57:fa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Validity
Not Before: Jan 1 04:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb9253f45f0e979f9bab893b14cfc58d8c9f7f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:ff:e7:e2:2e:96:58:de:74:87:0c:b8:75:
5c:a2:a5:e1:e4:e7:ce:64:ee:80:45:42:20:c2:70:
fb:8c:a4:20:d0:c3:6e:ff:ff:26:01:32:35:98:a8:
97:15:75:59:44:6f:71:66:91:38:84:fe:37:1e:c0:
61:13:e9:a5:8e:d2:f0:af:38:8e:cf:5f:5f:01:ea:
06:42:d4:7c:6e:eb:f6:24:2e:e3:cf:eb:37:c2:38:
24:65:b4:c9:38:a3:8f:2b:90:87:47:4c:ca:6d:03:
74:c3:a0:ee:b7:6c:f2:be:44:0d:80:6b:66:eb:2f:
f4:56:fd:96:db:4e:2d:74:b7:b1:c7:0b:8b:b0:c1:
58:04:30:7b:98:ae:77:b9:07:2c:8e:3e:5f:3f:b2:
e6:c8:48:18:47:e1:21:0a:e2:92:0c:92:d9:50:a9:
49:97:64:7f:87:f1:a5:ad:88:ea:0f:74:c4:2b:8d:
f7:5d:4e:6b:b4:3f:cf:58:35:69:bb:97:43:e9:f2:
be:66:d2:a3:12:84:1b:3f:28:06:a4:28:a2:76:a8:
63:0c:78:cf:0f:0c:dc:4b:1d:2a:15:88:99:e2:7d:
08:e1:b3:cd:2f:03:b6:4e:55:e6:d7:2b:be:4d:b4:
08:a1:ef:90:1e:1a:2d:46:6d:61:32:b1:88:dc:a2:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:53:F4:5F:0E:97:9F:9B:AB:89:3B:14:CF:C5:8D:8C:9F:7F:4B
X509v3 Authority Key Identifier:
keyid:43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/y5JT9F8Ol5-bq4k7FM_FjYyff0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.170.0/23
194.187.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:24:61:72:09:1c:d6:1e:3b:ad:5a:1a:65:c7:b9:75:6c:0b:
33:18:69:e4:69:fd:16:e2:e9:5a:e8:99:8d:9c:3e:fc:97:29:
b1:ba:bd:b1:fd:54:57:26:8a:d2:ab:25:7a:4a:e5:99:54:49:
ac:f1:a6:95:c7:60:b4:b0:31:21:16:92:a7:27:c0:63:76:f6:
32:3a:19:a1:74:ab:e9:4e:ed:a4:61:9a:77:0e:2e:78:9c:c2:
cc:f9:75:38:8f:5a:7b:77:be:44:87:a5:2b:a6:75:1f:ca:51:
4f:9a:02:30:76:65:5a:f6:0e:03:9f:98:f6:b8:5b:63:30:18:
65:15:77:70:73:9d:0a:1c:c5:89:68:f7:9b:e0:12:29:03:05:
4c:45:65:22:25:f1:72:88:5a:98:0d:2c:8e:ed:08:76:3f:c1:
73:66:74:f6:00:01:d5:38:ff:91:94:33:d5:f5:d7:1c:e1:06:
ad:9c:bc:95:af:8b:6e:03:cb:a9:5e:7a:14:15:36:9b:bf:0f:
cf:f4:f6:3e:69:20:51:1f:1c:17:50:d3:a9:c7:b6:95:d5:45:
d7:f7:64:4e:c6:ee:d0:f5:47:d5:c6:18:08:1c:d3:b7:a8:83:
ae:0c:75:a8:78:31:3b:b7:0b:56:26:47:e4:64:4f:e5:15:e3:
40:41:f0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:10 2024 by rpki-client on console-ams.rpki-client.org