Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/306b8d-a00c-4758-99fe-f796f4bcfb22/1/YvSlw64U8rWqSFyCmUA0MxeRVbk.roa
File: YvSlw64U8rWqSFyCmUA0MxeRVbk.roa (raw, json)
Hash identifier: STC91/a3KMoKTXvPNK4PCwVqlXRg3vQiqzRxc/c8LWE=
Subject key identifier: 62:F4:A5:C3:AE:14:F2:B5:AA:48:5C:82:99:40:34:33:17:91:55:B9
Certificate issuer: /CN=c791a0949f53fc9de9c8bac169393fe3c0f84768
Certificate serial: D9C0E8
Authority key identifier: C7:91:A0:94:9F:53:FC:9D:E9:C8:BA:C1:69:39:3F:E3:C0:F8:47:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5GglJ9T_J3pyLrBaTk_48D4R2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/306b8d-a00c-4758-99fe-f796f4bcfb22/1/YvSlw64U8rWqSFyCmUA0MxeRVbk.roa
Signing time: Sat 01 Jan 2022 11:03:08 +0000
ROA not before: Sat 01 Jan 2022 11:03:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 185.204.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14270696 (0xd9c0e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c791a0949f53fc9de9c8bac169393fe3c0f84768
Validity
Not Before: Jan 1 11:03:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62f4a5c3ae14f2b5aa485c8299403433179155b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:f4:c1:9a:20:84:f2:a4:c5:53:5f:63:d0:
99:d2:44:91:57:2d:14:dc:76:cb:9d:49:cd:6d:d9:
3f:d1:db:22:99:85:48:64:8b:e6:da:67:ac:35:89:
67:36:cf:7d:2c:15:15:13:6c:a0:49:fe:df:91:4c:
ec:8c:89:c8:4d:c9:e6:6c:85:ca:ae:0d:05:ac:02:
1f:55:74:ba:14:6a:0d:f8:fa:82:f3:3d:47:c7:5f:
d3:d3:b6:36:d1:78:db:1e:fe:6e:3c:af:64:a6:c7:
64:34:ce:2e:f2:b7:16:ea:13:14:43:7f:5a:d4:a1:
82:e1:6a:4b:1e:a0:01:00:9a:bf:b0:53:8f:69:5d:
d4:6c:28:c0:f9:61:49:65:93:74:87:29:fc:aa:17:
49:1b:34:5c:8a:b1:6e:1b:df:8f:29:15:99:16:f1:
d4:85:9f:d7:92:4b:94:b5:e8:54:19:8b:3a:5c:93:
0a:07:dc:e2:12:3c:1a:ac:5a:d3:68:1a:3b:07:e6:
de:fc:c0:d2:5e:ab:57:d0:33:a2:03:7c:cc:f0:b0:
4b:a6:71:e5:73:77:34:f4:00:66:3f:85:12:7f:aa:
7c:58:81:f1:15:5f:ab:fa:02:a9:78:eb:ac:55:88:
b4:07:90:92:16:1b:70:ca:fb:97:62:4d:6d:1d:ea:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F4:A5:C3:AE:14:F2:B5:AA:48:5C:82:99:40:34:33:17:91:55:B9
X509v3 Authority Key Identifier:
keyid:C7:91:A0:94:9F:53:FC:9D:E9:C8:BA:C1:69:39:3F:E3:C0:F8:47:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5GglJ9T_J3pyLrBaTk_48D4R2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/306b8d-a00c-4758-99fe-f796f4bcfb22/1/YvSlw64U8rWqSFyCmUA0MxeRVbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/306b8d-a00c-4758-99fe-f796f4bcfb22/1/x5GglJ9T_J3pyLrBaTk_48D4R2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.108.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b8:d9:5f:ad:de:e7:db:d6:14:96:ec:2a:a2:60:25:ea:3d:
e8:8b:60:5b:73:db:aa:59:ab:62:7e:bc:61:94:22:57:70:ca:
e7:5a:19:79:5a:d3:94:fd:37:06:f8:72:32:0c:cd:b4:65:c8:
8b:72:11:5f:87:14:0c:7e:93:c3:00:b7:dd:f5:67:f6:3d:00:
11:fd:7d:60:00:54:ca:4a:26:ea:68:86:4f:18:8d:87:e0:8c:
0c:e7:0a:60:51:da:31:f5:fa:d5:22:ad:80:e9:3c:5f:7b:9f:
9c:08:bf:ad:df:f3:17:5c:bd:71:90:75:b4:c0:ee:f1:cf:ef:
4b:4e:98:0a:66:48:1e:31:09:95:7a:23:94:8a:8c:df:32:f4:
f8:3b:b0:68:30:4b:3b:9a:02:d5:80:c9:62:48:7c:bb:2a:1c:
ad:5d:0c:53:37:a6:d2:53:3f:ea:42:67:da:71:d9:82:1a:7e:
39:f9:c8:6b:3b:76:3f:15:42:a0:e5:ed:68:ee:77:42:5e:d2:
09:09:32:9e:14:ff:5a:5b:08:1a:c0:21:e4:e2:2a:bf:c8:5e:
5d:ed:af:26:89:91:98:1f:95:86:b4:47:f9:ad:89:8d:18:00:
13:b1:2c:69:9c:88:36:ce:5f:a9:18:6c:78:38:8f:aa:a6:cb:
c7:aa:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:04 2024 by rpki-client on console-fra.rpki-client.org