Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/559c88-92bc-4772-84f3-69f13af5432d/1/Ywoh-_w4XdgnXprd_H6kAvuuB9k.roa
File: Ywoh-_w4XdgnXprd_H6kAvuuB9k.roa (raw, json)
Hash identifier: 8JsbMfGLRE0u92Z1dNqQ2Hu0AHFK2Zrp5yHm9Glv40A=
Subject key identifier: 63:0A:21:FB:FC:38:5D:D8:27:5E:9A:DD:FC:7E:A4:02:FB:AE:07:D9
Certificate issuer: /CN=a477c6fe4b7bac1b623dcdc72bb6c62f00261f1e
Certificate serial: 018CC6B89F1F851F13AC08634946959C3837
Authority key identifier: A4:77:C6:FE:4B:7B:AC:1B:62:3D:CD:C7:2B:B6:C6:2F:00:26:1F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHfG_kt7rBtiPc3HK7bGLwAmHx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/559c88-92bc-4772-84f3-69f13af5432d/1/Ywoh-_w4XdgnXprd_H6kAvuuB9k.roa
Signing time: Mon 01 Jan 2024 20:30:37 +0000
ROA not before: Mon 01 Jan 2024 20:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201557
IP address blocks: 185.25.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:9f:1f:85:1f:13:ac:08:63:49:46:95:9c:38:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a477c6fe4b7bac1b623dcdc72bb6c62f00261f1e
Validity
Not Before: Jan 1 20:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=630a21fbfc385dd8275e9addfc7ea402fbae07d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:7f:49:4b:0d:02:d4:34:25:3f:1c:77:e1:
91:42:5f:cb:b6:24:35:f6:5f:97:ef:86:32:f9:8a:
1d:25:06:90:3a:61:a3:7a:cf:1b:2d:10:b0:d6:40:
5e:0e:f3:f6:0e:02:f4:9f:72:65:b4:d9:5e:c4:43:
2f:dc:4e:7f:bd:6c:3b:9a:b0:8a:05:50:fc:cf:9d:
c3:32:f5:a9:a2:b4:4d:15:29:aa:6f:26:d9:42:4f:
06:99:9f:42:37:7a:29:2b:a4:30:57:26:f7:76:ea:
d0:26:f7:06:49:46:be:9d:02:36:97:3b:5a:a1:78:
23:ed:8d:85:77:b0:12:33:14:38:22:9e:ec:0a:ce:
db:1a:65:16:fa:b3:b7:aa:72:00:30:a8:83:77:00:
73:63:1b:9d:b2:0e:ab:c4:ff:2f:7f:22:6e:27:7b:
ae:e4:ab:39:2f:ca:c5:d2:ea:66:2b:72:59:87:61:
1e:17:99:af:03:c2:ca:14:57:27:c0:74:bb:c7:de:
82:af:7b:ce:8a:5d:7f:d8:05:1a:80:4e:35:4b:2f:
97:37:26:3b:cb:f1:5e:a5:6a:80:8d:5d:e5:0a:d8:
ed:6a:fd:07:e2:bf:88:f4:ab:d3:a3:7a:ca:c0:6e:
74:9b:93:9c:2c:3e:fe:03:1e:fb:f9:04:a3:e1:80:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:21:FB:FC:38:5D:D8:27:5E:9A:DD:FC:7E:A4:02:FB:AE:07:D9
X509v3 Authority Key Identifier:
keyid:A4:77:C6:FE:4B:7B:AC:1B:62:3D:CD:C7:2B:B6:C6:2F:00:26:1F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHfG_kt7rBtiPc3HK7bGLwAmHx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/559c88-92bc-4772-84f3-69f13af5432d/1/Ywoh-_w4XdgnXprd_H6kAvuuB9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/559c88-92bc-4772-84f3-69f13af5432d/1/pHfG_kt7rBtiPc3HK7bGLwAmHx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.200.0/22
Signature Algorithm: sha256WithRSAEncryption
30:aa:1f:83:7b:b0:ea:78:a6:d1:b7:d4:5c:73:44:ca:bd:47:
3e:c5:5f:3f:b7:8d:a6:ff:1e:b2:c4:1b:54:48:48:6d:ae:93:
a9:f9:7b:e7:fa:8d:d1:2e:76:b1:3b:a9:91:2d:6a:8b:6c:db:
6b:25:11:b9:65:64:56:05:53:17:86:2a:41:bf:46:f0:19:2b:
1f:4e:b5:4d:83:7d:c4:fb:02:c5:b4:96:5e:d4:45:bd:3c:27:
af:6e:59:f7:cc:e8:6d:d4:6c:fa:45:aa:08:67:61:46:74:f4:
d4:79:6d:d2:ad:07:e8:48:bf:53:35:4d:b8:3c:70:50:54:3c:
b0:84:57:eb:a9:3a:20:c0:da:d5:38:94:51:99:8a:cd:ad:5d:
b5:ed:c8:1d:6a:e4:24:7e:20:2d:8c:56:88:6b:82:63:47:51:
bd:c5:ed:a3:e1:ec:b0:d8:82:d4:3b:de:4c:78:17:56:50:2e:
3a:a4:52:f4:72:f1:f4:4d:e8:2c:c0:33:35:df:34:d5:63:cd:
c2:44:50:59:bd:84:8c:ee:b4:bb:8c:aa:e1:61:1c:c7:c6:a2:
65:1e:32:7a:8b:c1:ea:d6:e4:ad:5b:10:71:72:6b:6d:01:cb:
1d:90:ca:36:69:d2:41:dc:ab:f9:48:e2:70:32:93:48:ed:b6:
1f:0a:08:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:35 2024 by rpki-client on console-ams.rpki-client.org