Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/Yg7AoniB2BFfkokrTbKGwIDJpog.roa
File: Yg7AoniB2BFfkokrTbKGwIDJpog.roa (raw, json)
Hash identifier: aRsY+3Hox1Z3k8zHScj/7pzbj4/Q+bL3/j8b4SLxipY=
Subject key identifier: 62:0E:C0:A2:78:81:D8:11:5F:92:89:2B:4D:B2:86:C0:80:C9:A6:88
Certificate issuer: /CN=947b9c9d1c1bebca2605323946c809887be90871
Certificate serial: 043F48A1
Authority key identifier: 94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/Yg7AoniB2BFfkokrTbKGwIDJpog.roa
Signing time: Tue 28 Jun 2022 21:28:02 +0000
ROA not before: Tue 28 Jun 2022 21:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71256225 (0x43f48a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947b9c9d1c1bebca2605323946c809887be90871
Validity
Not Before: Jun 28 21:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=620ec0a27881d8115f92892b4db286c080c9a688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:e4:b9:50:ce:1e:2e:1f:da:b9:1d:fd:4c:
fa:ec:17:65:f9:35:f0:4b:db:45:5b:29:1e:70:b4:
79:d3:9a:ff:c4:8d:d7:11:64:a7:ae:cb:af:dc:f4:
5d:7d:80:80:0a:04:cd:0f:73:90:a7:11:7d:f7:e1:
6d:18:14:57:08:c7:7f:49:14:b9:6b:b3:b5:cd:2c:
81:c2:7e:57:81:6d:77:ad:46:79:23:f7:b8:b0:fd:
2c:63:a7:64:21:38:c2:92:8f:a0:fc:d4:75:80:39:
6a:58:15:1e:aa:d1:7e:79:71:42:c5:73:2d:ab:8b:
be:79:55:7f:fc:db:c5:d7:af:0c:12:0c:45:0a:b2:
74:63:49:3e:a1:d7:24:2b:d2:bb:c7:1d:2c:09:76:
44:c8:e9:1f:46:dc:4a:16:60:60:e8:73:ed:d3:b1:
09:69:62:81:43:1f:c7:ad:5b:e3:8f:6a:31:57:92:
20:08:cc:b2:15:ef:28:03:99:7f:87:f3:ce:f6:88:
56:f8:b4:97:64:68:fa:26:bf:0a:ce:68:30:c5:a2:
6f:6c:df:b7:e4:db:00:e3:03:52:a6:2a:0e:f4:af:
0a:be:76:ac:97:f0:3a:73:00:eb:c5:f9:2a:f4:54:
a8:dd:1f:aa:fe:81:e3:60:0f:70:11:c5:12:4b:c1:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:C0:A2:78:81:D8:11:5F:92:89:2B:4D:B2:86:C0:80:C9:A6:88
X509v3 Authority Key Identifier:
keyid:94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/Yg7AoniB2BFfkokrTbKGwIDJpog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:6b:bc:83:3d:c0:41:90:97:9f:16:e1:af:6c:76:72:ee:f6:
52:09:bf:89:33:e0:6e:07:84:19:45:0b:d7:d7:a8:e7:7e:0c:
9e:10:46:5d:bc:3e:5a:91:2e:8d:66:dc:6a:1e:38:15:18:70:
a5:c2:01:f3:e9:95:2e:bd:2b:fc:a2:ca:09:81:f9:75:02:68:
2f:ea:61:43:65:da:b0:3d:f9:14:bc:8a:3e:92:d5:0d:f0:27:
7d:c0:5c:53:45:ea:17:14:41:a6:7e:f0:aa:6a:3a:9c:98:95:
26:81:c0:14:90:cc:83:db:25:10:e3:e5:98:4d:e6:06:80:0b:
55:83:e1:cd:dc:29:d9:c5:b8:75:f3:29:35:27:9a:81:f6:90:
67:ed:97:06:a2:df:1d:b7:ae:c1:d0:98:27:2c:7c:66:01:18:
1d:33:ac:ed:7d:2d:df:4f:be:01:88:49:3a:73:f4:4f:0f:6c:
ac:2e:c7:c8:c4:87:b2:a9:dc:0e:17:37:f1:4a:95:77:ae:2c:
a3:69:45:58:12:df:89:66:90:25:30:dc:19:05:3a:e0:00:4f:
29:9e:4c:f6:20:0f:b1:c8:c5:63:7f:23:7c:5a:8d:06:fa:5d:
2f:dd:81:17:aa:c6:aa:d5:79:24:7f:a8:be:c5:48:fb:80:71:
d6:fb:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:55 2025 by rpki-client