Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/Y1Tg3tGukk-m6SVTMOHEvpmoMao.roa
File: Y1Tg3tGukk-m6SVTMOHEvpmoMao.roa (raw, json)
Hash identifier: xHJ527Ltts87xzW7SuLgWA68xAsj4u4M973SJ86mpPg=
Subject key identifier: 63:54:E0:DE:D1:AE:92:4F:A6:E9:25:53:30:E1:C4:BE:99:A8:31:AA
Certificate issuer: /CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Certificate serial: 0185708CB680B8D4F89B7C64CF0DDFAD682B
Authority key identifier: 8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/Y1Tg3tGukk-m6SVTMOHEvpmoMao.roa
Signing time: Mon 02 Jan 2023 03:35:48 +0000
ROA not before: Mon 02 Jan 2023 03:35:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59437
IP address blocks: 91.194.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:b6:80:b8:d4:f8:9b:7c:64:cf:0d:df:ad:68:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Validity
Not Before: Jan 2 03:35:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6354e0ded1ae924fa6e9255330e1c4be99a831aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:48:df:17:0a:26:58:1c:65:48:e5:e9:3a:
71:53:17:de:84:47:98:f7:23:f5:d4:94:e5:8c:30:
0f:9c:fc:b0:3d:06:3b:ef:79:d0:6f:72:c4:a8:da:
c3:05:9f:7d:06:0e:4a:fe:6a:a2:a1:32:50:93:5a:
62:14:36:f8:de:89:50:05:42:3f:a0:15:46:e5:5e:
05:78:53:68:b6:d6:13:76:4b:d3:db:0a:ac:c7:1e:
4a:cb:ff:db:9f:6e:61:34:8a:c4:50:64:43:6c:24:
22:4f:8e:89:ca:5b:08:73:6a:56:79:e1:a6:30:96:
fa:fd:38:40:c9:22:07:b5:c5:23:f8:64:2f:0a:4e:
54:52:33:32:9c:64:19:86:2d:5d:be:0c:8e:db:aa:
ae:aa:73:95:6e:4d:06:e6:d4:51:3b:c9:f7:cf:f1:
9e:b3:1d:c9:db:45:b6:68:b6:75:cb:31:7e:dd:53:
f9:62:84:2a:51:62:8d:79:53:cc:49:76:16:76:e0:
b2:9e:de:67:f7:7e:2e:f7:bf:9e:d7:04:1a:25:f7:
50:b7:4d:68:51:25:5b:94:8a:49:f5:7d:c9:1c:86:
16:8b:54:df:bd:ac:17:e4:57:5f:cb:9f:46:25:ec:
4f:1b:c1:3c:b6:12:46:83:5b:c8:d5:5f:5d:a4:d6:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:54:E0:DE:D1:AE:92:4F:A6:E9:25:53:30:E1:C4:BE:99:A8:31:AA
X509v3 Authority Key Identifier:
keyid:8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/Y1Tg3tGukk-m6SVTMOHEvpmoMao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.200.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2c:60:5e:1e:39:a7:ad:49:13:08:cc:df:10:d6:0a:3b:73:
b3:0f:74:3a:60:a6:79:e1:19:b7:82:fe:ca:d1:a2:66:b4:8a:
f3:c8:34:33:04:ff:94:5f:75:49:b9:e6:c2:8a:1b:25:92:06:
5a:8f:21:56:00:18:87:bf:c2:5e:fe:a7:9f:b5:bb:9c:e7:b2:
47:08:b9:60:f9:62:a2:3a:c1:49:2b:c0:92:b0:07:ce:a7:2e:
51:56:ab:3b:3f:06:e4:83:4a:f8:ef:6e:b1:fe:35:a4:ef:37:
cc:e8:ee:b6:32:ee:26:df:05:44:36:1f:62:a2:2e:6f:94:3d:
23:36:4e:d0:ad:4e:3d:f7:c4:39:ce:f6:61:74:4e:d6:ba:b9:
70:5f:38:4b:7f:43:07:5c:a3:c3:e5:30:d1:9d:51:30:13:3e:
b6:98:e9:f6:33:7c:57:33:ca:f4:06:56:37:1b:af:28:50:88:
06:df:13:3b:54:7b:dc:26:d9:4d:a4:c7:e0:e0:41:fe:e9:da:
d1:60:2f:21:8a:72:13:91:70:b4:19:00:f8:ae:05:87:a0:c8:
c9:4a:8e:06:b4:ae:d7:22:7c:6c:db:86:2c:eb:43:91:56:3f:
22:c0:d3:79:82:53:81:5b:e3:a5:89:17:94:e6:50:f8:b8:fd:
26:e8:66:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:26 2025 by rpki-client