Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Yv8kIitbs-RQpiV4r0f9pVn5tyY.roa
File: Yv8kIitbs-RQpiV4r0f9pVn5tyY.roa (raw, json)
Hash identifier: S8BqAUyv+253BsOLrdmbrwbK2+qEY+MukEPT549irsw=
Subject key identifier: 62:FF:24:22:2B:5B:B3:E4:50:A6:25:78:AF:47:FD:A5:59:F9:B7:26
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD535B31AFD3139B2FA727336230B03
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Yv8kIitbs-RQpiV4r0f9pVn5tyY.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57790
IP address blocks: 188.215.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:35:b3:1a:fd:31:39:b2:fa:72:73:36:23:0b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62ff24222b5bb3e450a62578af47fda559f9b726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:4a:bc:c5:77:a2:ae:8f:2f:c1:c8:4c:32:
45:10:24:02:10:98:dd:a4:dc:b1:e5:3d:2c:50:df:
4c:83:b4:40:a8:fb:08:b8:d4:66:b1:c9:ea:b8:55:
73:b4:52:70:fb:d0:b9:bc:d6:44:6a:bd:16:49:2f:
af:0f:19:73:36:ae:43:1d:84:7d:1e:52:1a:b7:8a:
cc:13:a4:dd:83:5c:36:f5:8a:8f:84:ff:5d:4f:80:
b2:7b:67:9f:3b:5e:a4:a6:06:d9:15:3a:7e:c2:5c:
f9:46:eb:d2:f3:1a:ec:78:6c:40:2f:15:dd:4e:f8:
87:8d:6a:b8:6c:e1:13:ac:82:fa:c0:4b:ee:ce:ef:
50:85:35:d0:61:3d:a0:1f:08:ce:cc:01:08:3b:85:
51:03:35:88:07:88:21:12:e2:d5:3f:d7:55:7f:91:
12:f9:4a:cb:e2:4b:c6:e4:57:8b:fd:40:4c:34:18:
1e:5e:33:6e:ad:68:3a:94:c6:cc:0a:67:ff:25:6f:
a3:6d:19:5c:32:b7:40:fe:56:50:02:22:91:51:68:
12:4d:2c:92:3d:de:49:a7:bc:cb:b3:d7:03:6e:ab:
ff:ce:08:2c:87:32:5a:13:a0:1c:e5:04:04:1a:cb:
f2:3d:4f:c9:16:38:31:e8:26:06:5b:6e:b4:a4:40:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:24:22:2B:5B:B3:E4:50:A6:25:78:AF:47:FD:A5:59:F9:B7:26
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Yv8kIitbs-RQpiV4r0f9pVn5tyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0a:2b:77:83:07:3b:63:8d:7b:e8:5a:e3:8d:f4:8e:fb:90:
4a:30:5d:1a:4d:4f:77:d8:8a:ab:81:67:d3:86:86:31:c5:09:
7f:e0:d5:b7:ec:26:b8:c3:9f:7e:05:37:fb:cd:8c:13:ff:94:
94:cf:31:0c:ff:12:6b:60:5c:11:72:1a:4b:d9:ee:be:fd:af:
5e:72:3f:e9:bc:97:1b:fa:00:47:30:5e:35:66:65:9c:7b:b3:
c1:b6:ed:06:e9:00:d4:8a:8f:af:e9:95:08:8c:a3:4c:20:84:
e6:c6:b4:47:de:6e:05:6e:4a:80:f2:69:c2:12:e2:c1:1d:b9:
1c:9d:6a:41:e4:30:0b:02:1b:0d:eb:51:25:c5:75:ed:2c:b2:
c6:02:f5:af:52:6c:c1:a0:6b:f9:39:34:d3:d4:34:f9:53:e2:
ae:7f:52:2b:f4:88:d7:e3:ef:72:52:b3:6a:5c:4b:1c:8b:1d:
f1:23:c5:06:cc:36:ed:67:a5:b2:53:40:88:ce:52:cb:b2:4d:
ab:13:52:9f:bd:f8:3b:80:b1:81:63:d5:01:be:4e:73:d6:5c:
ce:d4:41:9e:77:ce:e1:00:35:ab:58:16:ae:7e:4b:29:46:f0:
83:d0:f0:00:ad:78:56:f1:11:6c:8f:8b:c1:90:96:3c:f4:7c:
a7:63:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:33 2025 by rpki-client