Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/YNsLC5Dfa2YvQSBOsYMc_fpAN9E.roa
File: YNsLC5Dfa2YvQSBOsYMc_fpAN9E.roa (raw, json)
Hash identifier: g1nOnZODXQFY6IQZJeV3n1Rj2HpR7kHDQyJRwLtbrK4=
Subject key identifier: 60:DB:0B:0B:90:DF:6B:66:2F:41:20:4E:B1:83:1C:FD:FA:40:37:D1
Certificate issuer: /CN=db3f546b24b7dbb0984a09c62660a52bad287757
Certificate serial: 018722DB17EC341D149871406AC348AF979B
Authority key identifier: DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/YNsLC5Dfa2YvQSBOsYMc_fpAN9E.roa
Signing time: Mon 27 Mar 2023 11:36:36 +0000
ROA not before: Mon 27 Mar 2023 11:36:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.172.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:db:17:ec:34:1d:14:98:71:40:6a:c3:48:af:97:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db3f546b24b7dbb0984a09c62660a52bad287757
Validity
Not Before: Mar 27 11:36:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60db0b0b90df6b662f41204eb1831cfdfa4037d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:c5:c4:28:80:54:68:80:4b:cd:4d:45:a8:
d8:0b:fd:36:b9:bb:da:ba:da:b9:dc:db:6e:87:49:
77:54:89:35:86:27:32:ec:ff:ea:12:4a:36:55:7e:
e0:98:c7:27:c7:c8:a0:f6:f6:ff:fd:78:dc:c0:dc:
26:06:9d:f5:ea:35:99:c7:2d:70:d1:2b:7c:d2:33:
6d:83:e1:80:31:c3:9a:a8:eb:82:85:28:f3:2a:d3:
5d:95:4f:1c:8b:ac:a9:95:f1:ad:75:99:d6:77:ea:
8c:0e:85:24:54:7a:7c:3b:b4:08:d9:32:df:df:08:
db:22:ce:3a:46:58:ae:d0:13:87:56:9d:a2:41:01:
c6:e0:0e:d1:04:23:6d:ca:67:fc:09:af:83:44:20:
f2:aa:1a:96:d5:d6:4f:67:9b:a4:f5:7e:16:4a:b0:
fd:44:1c:e3:e1:3e:0c:b5:f3:52:85:bd:f6:47:d0:
6f:a1:6f:4c:2b:12:ff:86:d8:1c:41:33:8a:e4:a6:
0e:2c:39:f8:91:46:1e:7a:d4:a6:59:6e:1a:56:da:
f8:94:b8:b1:33:c1:57:87:dc:94:d7:67:e6:e7:8e:
f2:22:dd:be:52:91:24:12:71:7e:bc:ee:3f:c1:4f:
d8:ca:d9:74:96:14:b5:c5:0f:88:1a:6d:0c:bc:cf:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:0B:0B:90:DF:6B:66:2F:41:20:4E:B1:83:1C:FD:FA:40:37:D1
X509v3 Authority Key Identifier:
keyid:DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/YNsLC5Dfa2YvQSBOsYMc_fpAN9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.180.0/24
Signature Algorithm: sha256WithRSAEncryption
07:14:50:3c:c3:13:ce:52:db:44:13:a9:6b:58:90:6f:cd:55:
f2:c0:af:1f:36:21:e7:93:f9:aa:8e:ef:e7:7e:55:59:87:54:
99:e8:2d:bd:cf:19:d8:bd:de:b4:88:7d:a0:19:0b:30:9b:20:
f8:06:07:e1:27:a0:1d:c9:44:cf:72:ea:61:22:e7:00:36:08:
2d:22:a0:2e:b0:4d:78:f9:15:f8:4f:f6:68:14:c4:17:82:1a:
99:7f:56:d5:cc:bf:6a:89:cf:36:96:50:c2:4f:67:cb:4f:af:
c8:fd:6e:c8:aa:cf:79:ce:91:43:b5:1f:9b:cd:af:21:ef:77:
7d:56:52:6b:50:d2:42:d8:b3:c7:ff:62:e4:2a:1c:ab:05:81:
9e:dc:66:f0:d2:58:3e:50:5d:e6:12:c9:ff:fa:70:0e:35:85:
58:48:89:ac:9c:64:dd:48:41:4e:44:3f:c1:c7:2d:aa:93:11:
7e:8c:89:8c:de:be:e7:2a:c1:fe:4d:b1:7e:34:d2:25:96:71:
79:43:f7:21:31:d9:af:5e:f9:63:0b:2a:54:36:09:34:97:a4:
77:d9:8c:96:95:b2:82:2a:be:f5:d3:f0:bc:d2:48:ad:08:8b:
ba:09:67:40:ab:3a:c2:04:c1:e2:c6:1d:d6:8e:00:59:3b:35:
a4:0d:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:45 2025 by rpki-client