Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ySAsQQMMFq3k67ybq10gFWz683k.roa
File: ySAsQQMMFq3k67ybq10gFWz683k.roa (raw, json)
Hash identifier: /JUT2BSm4qP7jFL+J0R4/gzP8QnJhynN/MWPmxwrJ/A=
Subject key identifier: C9:20:2C:41:03:0C:16:AD:E4:EB:BC:9B:AB:5D:20:15:6C:FA:F3:79
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018C3F596F791CD0FA81CE8DB418CDBA2BD9
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ySAsQQMMFq3k67ybq10gFWz683k.roa
Signing time: Wed 06 Dec 2023 13:37:54 +0000
ROA not before: Wed 06 Dec 2023 13:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 195.82.132.0/23 maxlen: 24
91.212.45.0/24 maxlen: 24
45.91.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:59:6f:79:1c:d0:fa:81:ce:8d:b4:18:cd:ba:2b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Dec 6 13:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9202c41030c16ade4ebbc9bab5d20156cfaf379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:4e:55:89:6f:c5:ea:99:25:da:11:b7:56:
24:a9:6d:47:14:db:d6:87:37:0d:69:80:ed:80:7c:
9a:72:54:72:00:25:3c:16:08:cc:e7:9b:e5:a2:76:
90:f1:1c:2f:47:d8:56:02:38:eb:9d:ce:f4:03:35:
fd:e9:8d:58:6c:c6:1b:7d:c0:83:da:cd:d3:e7:e2:
e6:00:a2:c7:2b:d0:11:5e:41:1d:50:8b:d0:6b:e5:
76:6b:86:d4:c7:51:a6:7c:dc:9e:79:7a:2f:92:ba:
cb:76:a4:b5:4b:35:d0:ba:ec:e5:09:3f:01:50:5b:
35:0b:f8:15:ec:c0:2f:85:60:db:78:48:7f:a6:67:
36:b3:f1:73:e0:c4:fa:86:63:60:f5:aa:5c:a7:8c:
3a:07:83:bf:bc:5d:55:67:68:cf:81:5d:15:18:3f:
be:9e:46:17:c1:6e:5b:8b:79:9e:f3:53:67:e0:d3:
bc:8f:db:86:4e:55:a1:d8:4b:c4:6a:f5:ea:de:a7:
f8:c4:e7:10:3e:f6:f5:6c:b4:41:dd:4d:10:19:35:
aa:e5:74:a9:30:27:a0:db:5a:e2:16:9e:e9:71:8c:
e7:44:34:e7:5c:51:d0:21:7f:09:5a:76:38:d8:7e:
11:b3:c9:bd:28:38:06:b7:0f:22:64:32:fc:b8:ad:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:20:2C:41:03:0C:16:AD:E4:EB:BC:9B:AB:5D:20:15:6C:FA:F3:79
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ySAsQQMMFq3k67ybq10gFWz683k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.116.0/24
91.212.45.0/24
195.82.132.0/23
Signature Algorithm: sha256WithRSAEncryption
18:84:46:78:0c:9d:89:6d:d5:94:a6:5e:3c:94:dc:50:de:bb:
4c:1e:3d:79:f2:49:d3:51:4a:ad:da:c4:d3:49:cf:2c:a6:3f:
3f:e6:a6:21:dc:a9:0c:3f:e8:64:3d:02:50:52:a2:c2:b9:6e:
97:0f:e1:cd:7b:4b:5f:0e:4e:5a:26:f1:6d:bc:17:f7:3e:94:
c7:b2:ab:cf:41:65:8d:ce:a4:4d:2c:49:4e:c0:b3:07:6c:90:
03:fb:78:e4:16:7a:eb:87:08:62:48:16:92:5c:e9:80:06:96:
fa:91:b0:c9:0c:c8:7a:6a:b9:09:9a:ca:18:74:ad:a8:f5:07:
92:9b:28:e9:cf:bf:05:da:9b:10:de:22:c1:e8:62:7d:83:c1:
2a:f6:4b:b8:af:14:ca:63:5f:98:39:f1:1d:bc:fb:bb:ad:b4:
79:3b:44:84:96:11:c3:81:b0:99:1f:c9:75:33:61:fb:65:a9:
50:1f:71:fe:bb:ba:a1:9f:78:be:06:5d:b5:ee:35:63:b2:df:
87:81:cc:b9:fb:f2:08:60:ef:12:64:65:27:de:06:ae:88:f0:
4d:31:89:03:ed:50:88:3e:49:fe:f2:b1:93:fc:38:1f:2a:a7:
41:20:73:15:c1:20:44:27:72:d5:cd:b0:ce:01:0c:f6:0b:a9:
5a:bd:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:01 2025 by rpki-client