Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/Ymc4uvZ88tJnTNUoKCoruGQiYxc.roa
File: Ymc4uvZ88tJnTNUoKCoruGQiYxc.roa (raw, json)
Hash identifier: Fq6PUrbluy/D+oonKhHggs3yZWaXY7J5tDr9ck0jPrs=
Subject key identifier: 62:67:38:BA:F6:7C:F2:D2:67:4C:D5:28:28:2A:2B:B8:64:22:63:17
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 146D3D58
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/Ymc4uvZ88tJnTNUoKCoruGQiYxc.roa
Signing time: Sat 01 Jan 2022 03:58:56 +0000
ROA not before: Sat 01 Jan 2022 03:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20264
IP address blocks: 83.98.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342703448 (0x146d3d58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=626738baf67cf2d2674cd528282a2bb864226317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:8f:e7:a3:8e:e4:89:b1:38:ec:30:b2:15:
66:f4:40:8a:8e:92:0a:7c:cb:6c:0c:13:e1:99:30:
15:51:ab:1a:7e:2d:0c:9b:52:8c:4e:63:90:fd:07:
76:cf:4d:9f:6a:25:8b:4f:f7:3a:fc:c7:43:ba:45:
da:e2:ad:64:fa:8b:b3:07:15:a4:1c:93:e2:91:de:
ff:5f:21:05:35:cd:81:82:e5:a2:73:8c:ba:bc:06:
ca:dc:cb:2f:5b:3a:28:e5:53:40:96:c2:d2:f4:3a:
df:95:95:2b:40:cb:4d:80:83:ac:fe:27:5f:a5:16:
58:c4:7b:9f:56:1a:44:f9:c8:9c:61:69:19:9f:95:
62:2c:f9:6b:9f:43:23:3c:91:13:95:c1:90:32:80:
71:a4:90:2c:ab:50:2a:4b:d9:fe:51:b7:f6:ca:48:
f5:56:77:89:c6:59:9c:af:7d:ee:ed:91:8c:5f:ea:
3e:89:77:3a:0a:74:a8:5a:97:7c:5a:14:19:55:e5:
80:37:c1:39:d5:89:ac:e0:7d:4f:3a:a8:73:58:fa:
9b:a7:80:2d:91:16:02:55:1a:0b:18:ac:fa:e0:f4:
3e:54:87:4b:cb:65:f5:d8:49:67:ea:89:a3:30:b9:
53:6f:a6:79:e8:a2:b5:5c:9a:3c:98:aa:5a:fa:e7:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:67:38:BA:F6:7C:F2:D2:67:4C:D5:28:28:2A:2B:B8:64:22:63:17
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/Ymc4uvZ88tJnTNUoKCoruGQiYxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2f:3f:08:32:a9:ea:39:56:05:c7:c2:29:21:a9:44:88:94:
f7:d1:87:f4:eb:7a:0f:aa:22:12:de:f2:06:4a:72:3a:8b:b9:
92:51:35:ff:65:f7:e5:07:d6:76:84:ea:5e:94:09:da:b8:be:
b7:ea:e5:65:ff:4a:a2:c4:0a:45:6c:a9:aa:5e:86:2f:26:92:
b4:13:e4:5b:12:51:ea:44:5e:21:e3:80:15:cd:74:60:66:f0:
1d:d1:01:dc:a8:b9:35:f0:aa:61:6b:ea:85:7b:ab:86:06:2f:
36:90:14:d1:97:01:59:e3:04:74:cd:7d:59:61:39:68:d6:3c:
5d:63:33:f6:cc:dd:65:08:7e:a2:56:8e:b3:12:9e:30:67:9d:
66:d3:4f:87:72:1a:ff:94:88:3a:cd:c7:33:8f:61:b6:a0:e8:
f3:89:9e:e9:6a:42:af:83:03:9c:e4:d5:b7:fb:38:d8:5c:b0:
86:3b:74:5c:66:a7:d1:7c:55:c9:6d:40:9c:40:cf:f8:e8:c6:
1e:2d:82:4d:e1:7c:1f:b5:5c:d6:c8:f4:c6:88:36:e8:42:42:
af:61:d4:ca:a8:6e:ab:74:99:1e:50:32:7b:d8:c1:f7:63:08:
2f:85:78:74:12:fe:23:6e:f1:a9:64:ef:7c:20:17:fc:09:33:
4d:29:c3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org