Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/ycnzn81zl6DX40axGYCybmCrEMU.roa
File: ycnzn81zl6DX40axGYCybmCrEMU.roa (raw, json)
Hash identifier: mkU5FiZ2taUO5iuRW4P7kmZRtBhquycXVHLGtsrGsHg=
Subject key identifier: C9:C9:F3:9F:CD:73:97:A0:D7:E3:46:B1:19:80:B2:6E:60:AB:10:C5
Certificate issuer: /CN=859c6dc213c1bee614819c6bd2c607e2f5d8cb62
Certificate serial: 049748AE
Authority key identifier: 85:9C:6D:C2:13:C1:BE:E6:14:81:9C:6B:D2:C6:07:E2:F5:D8:CB:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZxtwhPBvuYUgZxr0sYH4vXYy2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/ycnzn81zl6DX40axGYCybmCrEMU.roa
Signing time: Tue 22 Feb 2022 08:52:46 +0000
ROA not before: Tue 22 Feb 2022 08:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59441
IP address blocks: 193.3.231.0/24 maxlen: 24
2a10:6140::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77023406 (0x49748ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859c6dc213c1bee614819c6bd2c607e2f5d8cb62
Validity
Not Before: Feb 22 08:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9c9f39fcd7397a0d7e346b11980b26e60ab10c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:28:2b:56:ea:6a:1d:a1:28:4c:c3:80:7a:
84:26:9e:3c:5c:88:54:c8:6b:c8:5c:0c:9d:5f:3c:
46:8b:ba:85:39:5c:df:e0:d4:e0:14:c4:b2:4e:c2:
96:02:d7:a4:3b:a3:f9:67:e2:c3:77:71:2b:dd:6d:
4d:02:db:ee:ac:32:04:4f:64:c6:54:e7:b5:25:ce:
89:0c:24:fb:5d:83:3e:64:0c:3a:a7:e7:28:10:37:
91:57:29:d1:ce:ae:0b:0d:5d:20:fb:a4:d6:13:b1:
15:9b:c8:df:fa:04:9a:65:37:2e:bf:54:9e:75:5d:
b5:8d:ac:65:93:4d:50:4a:2e:e3:1f:11:f8:fc:4b:
5d:98:8f:fd:d5:c1:22:94:76:97:85:cd:7f:c3:2d:
30:ae:ce:fc:9a:88:95:71:0b:40:aa:63:0b:57:51:
1d:f5:ce:a1:b5:04:88:db:5e:90:d9:15:f9:28:ff:
ee:c7:d5:24:0d:7c:51:1f:72:4d:67:a9:46:1a:e9:
9f:77:59:4e:de:f2:6a:84:9f:db:48:98:5d:5a:87:
76:ab:d0:91:ba:88:38:59:f2:11:e4:55:de:14:24:
5c:18:5e:eb:6f:23:ff:31:07:58:b6:24:34:75:47:
28:b4:55:ce:74:5a:d8:fc:ab:6e:62:e3:25:55:32:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:F3:9F:CD:73:97:A0:D7:E3:46:B1:19:80:B2:6E:60:AB:10:C5
X509v3 Authority Key Identifier:
keyid:85:9C:6D:C2:13:C1:BE:E6:14:81:9C:6B:D2:C6:07:E2:F5:D8:CB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZxtwhPBvuYUgZxr0sYH4vXYy2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/ycnzn81zl6DX40axGYCybmCrEMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/hZxtwhPBvuYUgZxr0sYH4vXYy2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.231.0/24
IPv6:
2a10:6140::/29
Signature Algorithm: sha256WithRSAEncryption
08:d1:45:d8:0a:f0:82:9b:8b:60:79:ae:40:7d:09:33:91:23:
30:de:ec:28:dd:63:92:87:82:e4:60:a3:45:0e:d0:b9:ca:21:
5f:11:35:72:27:4e:78:35:16:06:f6:42:fe:5d:67:c2:6c:46:
6b:22:43:9d:2f:8f:ff:6d:2a:73:3e:f8:ce:3b:78:0e:af:cd:
d3:51:d7:02:fd:96:e0:26:42:ad:dc:2c:67:59:48:7c:d4:cb:
5b:0b:95:06:25:68:b5:52:86:6d:2a:3e:fa:f5:4c:55:15:6f:
f3:89:c9:de:c1:e6:37:af:ad:22:31:73:5d:8f:72:d5:82:4d:
7d:e1:3b:48:19:f7:b6:7f:20:0f:be:54:1d:7b:94:98:ac:b0:
5d:ee:87:fb:8d:55:2b:17:e5:e2:53:91:0f:94:ae:8f:4a:6c:
6e:83:5f:b3:a4:f3:1f:4b:4d:2f:80:86:06:f7:b2:c5:fb:21:
ce:b6:32:a8:81:11:9e:84:bf:69:70:e1:14:8b:0e:17:91:0f:
3f:23:ce:b2:51:71:dd:6a:03:82:4a:a5:1d:63:41:f8:49:fc:
07:46:79:30:b7:8a:98:53:92:72:c7:64:ea:ed:0b:70:28:b4:
6e:bb:15:b3:b1:8b:75:db:e9:62:60:71:ee:52:41:78:88:e5:
eb:85:07:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:49 2024 by rpki-client on console-fra.rpki-client.org