Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/YxNyCA8EusX030YlHL9sedaLetI.roa
File: YxNyCA8EusX030YlHL9sedaLetI.roa (raw, json)
Hash identifier: nJ9Ds1JMsa0sor8ZapVbc2b2tegUSb03YDS2mw9hSAI=
Subject key identifier: 63:13:72:08:0F:04:BA:C5:F4:DF:46:25:1C:BF:6C:79:D6:8B:7A:D2
Certificate issuer: /CN=4e67a6e4730fdb2b5822306d11f43dbd8c3337dd
Certificate serial: 018CC7954DFD53EDA9C0559F0AA5489BDFB7
Authority key identifier: 4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/YxNyCA8EusX030YlHL9sedaLetI.roa
Signing time: Tue 02 Jan 2024 00:31:39 +0000
ROA not before: Tue 02 Jan 2024 00:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61222
IP address blocks: 185.215.91.0/24 maxlen: 24
185.215.90.0/24 maxlen: 24
185.215.89.0/24 maxlen: 24
185.215.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4d:fd:53:ed:a9:c0:55:9f:0a:a5:48:9b:df:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e67a6e4730fdb2b5822306d11f43dbd8c3337dd
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=631372080f04bac5f4df46251cbf6c79d68b7ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:d6:a9:b0:5b:79:99:1e:a3:e3:3c:80:c5:
c0:85:11:e4:8d:5a:71:89:ee:25:a4:e4:0a:af:fc:
48:63:b4:a9:4f:32:20:96:0f:aa:6b:dd:ea:dd:e5:
8e:c1:8f:75:aa:87:b5:e9:43:2d:7e:44:3b:5f:cc:
64:cd:fe:df:38:5f:fe:e5:b5:b1:1b:b2:80:d9:48:
be:45:98:ee:76:4c:c7:e6:49:bc:d2:ca:e9:e4:35:
32:a1:b3:88:45:03:f4:7e:15:2d:16:09:80:a0:0c:
86:62:29:d5:b3:43:aa:ba:ea:9e:97:ae:03:96:41:
ee:b2:63:8b:4e:2e:d3:d7:87:be:49:ca:90:14:4c:
9e:a6:b2:a0:5b:77:90:f3:63:50:02:77:92:20:50:
e0:c2:d8:47:4b:7d:6e:e5:39:8b:ad:f2:65:21:b9:
94:97:9b:b6:a9:a0:38:f8:a0:22:d5:6e:eb:c1:c3:
15:d4:73:63:f2:66:2c:03:b9:9c:fc:24:d0:be:70:
fc:79:70:56:21:10:f1:dd:a1:0f:b5:b2:2a:f5:45:
ab:4d:8b:94:e0:36:20:9c:6b:b7:1f:e1:4e:9e:10:
75:47:86:92:4c:ac:b5:46:d7:6f:38:46:b1:b4:74:
ce:48:b5:b0:b3:15:90:2f:2f:45:17:dd:37:5f:a1:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:13:72:08:0F:04:BA:C5:F4:DF:46:25:1C:BF:6C:79:D6:8B:7A:D2
X509v3 Authority Key Identifier:
keyid:4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/YxNyCA8EusX030YlHL9sedaLetI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/Tmem5HMP2ytYIjBtEfQ9vYwzN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.88.0/22
Signature Algorithm: sha256WithRSAEncryption
88:d4:8f:21:6d:52:1c:e9:cb:30:20:a8:a1:65:74:f3:a4:58:
df:b0:04:2b:42:b0:93:0f:f3:b3:d5:99:64:d7:ad:08:b0:e3:
52:a4:a4:68:04:54:1d:2b:06:44:57:08:08:79:90:14:0e:0e:
a1:b3:ed:2d:78:91:9c:5c:cb:64:c2:ef:37:f7:50:82:0e:52:
e5:11:f9:15:ac:8f:6b:1c:7a:1f:bb:ff:db:99:71:f9:91:b6:
c7:5e:bb:01:aa:00:37:d7:85:63:11:6a:e0:ac:c9:9a:d2:f2:
4e:6b:b4:8f:e7:9f:f9:8f:51:cf:1b:35:c7:a0:6e:80:cb:ee:
47:1b:f5:1c:2e:2c:23:ed:85:57:bd:ae:4e:c1:94:a0:75:6d:
31:66:48:f1:78:03:3a:00:92:ca:85:fc:d8:37:f1:b8:41:7e:
a6:11:19:de:b3:5d:9c:16:55:45:45:3c:55:ac:3a:0c:0f:f7:
6b:24:0b:09:23:4a:35:8c:86:b0:a2:d2:9c:06:d3:df:af:77:
9d:9f:44:e4:13:fc:76:06:a1:31:7b:dc:f3:0f:75:ea:ad:93:
48:d0:e4:bc:86:85:e8:f0:4a:21:5a:73:50:91:4b:1a:4f:9d:
49:3f:4a:64:cf:6a:06:ca:f0:d3:cb:01:a0:3e:7d:0d:28:98:
80:e6:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:53 2024 by rpki-client on console-fra.rpki-client.org