Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/KYQ_Yoz_J-VivKz2a5VjetiRyHQ.roa
File: KYQ_Yoz_J-VivKz2a5VjetiRyHQ.roa (raw, json)
Hash identifier: qZAPk3TuRG2KbKcte+G9pVBUblbgSBpm9t1wpKvMDek=
Subject key identifier: 29:84:3F:62:8C:FF:27:E5:62:BC:AC:F6:6B:95:63:7A:D8:91:C8:74
Certificate issuer: /CN=d8a8e9af2ca43e2712bfb2c9796ec4c0ba658521
Certificate serial: 0C9B681A
Authority key identifier: D8:A8:E9:AF:2C:A4:3E:27:12:BF:B2:C9:79:6E:C4:C0:BA:65:85:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KjpryykPicSv7LJeW7EwLplhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/KYQ_Yoz_J-VivKz2a5VjetiRyHQ.roa
Signing time: Sat 01 Jan 2022 11:01:54 +0000
ROA not before: Sat 01 Jan 2022 11:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210636
IP address blocks: 185.102.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211511322 (0xc9b681a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a8e9af2ca43e2712bfb2c9796ec4c0ba658521
Validity
Not Before: Jan 1 11:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29843f628cff27e562bcacf66b95637ad891c874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:85:ee:aa:e4:f1:45:d6:d8:58:b9:f2:80:
9c:3d:23:22:74:2e:96:1d:db:6e:cb:37:2e:36:cb:
79:82:ac:53:c6:c2:7d:85:88:a5:a1:1c:4d:56:b4:
29:74:41:5a:ec:02:26:c0:43:99:a0:ca:16:33:17:
21:d0:e2:06:9f:9d:4b:96:2d:cb:b4:f3:62:15:93:
fc:93:04:06:f4:10:0c:a4:92:94:cb:59:1e:4f:02:
b4:9e:14:20:86:b1:36:f9:66:b1:d0:cf:a2:ce:f8:
44:f4:fb:99:14:e0:ef:aa:31:bd:e0:20:b6:03:2d:
de:7f:b7:01:93:1f:31:dc:8e:51:bb:4d:08:e1:b2:
dd:df:61:0a:5c:a6:b8:27:cf:5d:df:70:ff:92:64:
42:c5:54:f6:36:8b:5f:41:24:08:9d:39:7f:16:c2:
6d:4d:48:c8:7f:67:4c:70:07:8b:56:21:48:54:1e:
79:12:4e:fc:db:e0:bf:ba:f3:ae:72:26:ec:db:41:
30:1e:d3:b0:3e:05:8c:4b:9f:2e:5d:8e:67:88:26:
c2:00:73:99:08:ca:b3:9b:8d:79:69:eb:39:66:43:
0a:c9:99:8e:e9:9f:17:fe:f4:45:47:3c:22:71:01:
47:73:e3:b5:5c:3e:fd:da:87:ae:2c:e9:38:b5:dc:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:84:3F:62:8C:FF:27:E5:62:BC:AC:F6:6B:95:63:7A:D8:91:C8:74
X509v3 Authority Key Identifier:
keyid:D8:A8:E9:AF:2C:A4:3E:27:12:BF:B2:C9:79:6E:C4:C0:BA:65:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KjpryykPicSv7LJeW7EwLplhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/KYQ_Yoz_J-VivKz2a5VjetiRyHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/639f49-4cfc-41c8-8ba7-5e030706488d/1/2KjpryykPicSv7LJeW7EwLplhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.169.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e0:74:80:f6:30:de:1d:ee:23:c6:0f:f2:ee:90:a5:cd:f2:
0a:ea:44:5f:3c:9f:08:9e:29:80:88:75:76:f5:44:61:a8:d6:
8c:c2:3f:7e:ca:8b:a8:41:b1:ac:70:32:73:37:6e:92:ca:43:
e7:07:94:86:38:ae:d6:fd:43:ba:4a:e9:f8:02:b8:ed:fa:33:
7b:8e:78:56:16:00:7f:39:52:02:a9:50:b2:a8:c9:91:90:c1:
30:95:0a:4f:96:98:0f:5b:48:44:96:5c:d4:af:bc:ce:c0:37:
ad:cb:fa:6f:76:17:67:07:f3:73:77:31:05:38:c7:cd:ff:fe:
a8:9c:32:e4:f8:38:96:a1:e2:db:9e:04:3c:c1:e1:95:9c:24:
53:43:11:47:b0:68:66:8e:77:23:58:b2:07:50:b5:22:b9:60:
22:c2:a1:cb:04:c8:49:38:3d:c5:03:a5:35:57:d7:9d:ad:0b:
bb:cf:84:19:95:4e:e5:f1:ca:97:e7:ec:15:6f:7f:b6:56:f0:
d5:6d:42:1b:19:91:d4:88:99:45:57:9d:2d:46:25:82:51:da:
1d:2c:c4:29:ec:96:08:c8:36:2d:99:ce:60:29:bc:bf:6e:49:
2a:23:e1:e6:2d:ee:e5:cf:83:2e:2f:e8:7c:87:27:f5:dd:f1:
d7:28:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:56 2023 by rpki-client on console-fra.rpki-client.org