Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/yjpRUJU_xKC_O-gpYe2ihPfu2Zs.roa
File: yjpRUJU_xKC_O-gpYe2ihPfu2Zs.roa (raw, json)
Hash identifier: grSbnoTwgPK90Jinf8CzFvh6b3YC4hQs9N+uy3fsE70=
Subject key identifier: CA:3A:51:50:95:3F:C4:A0:BF:3B:E8:29:61:ED:A2:84:F7:EE:D9:9B
Certificate issuer: /CN=92df34b64782d86e371e3fea025bf5aa1dea2e9b
Certificate serial: 01856B53230B702D78CBCBC0C37A65D7E1F3
Authority key identifier: 92:DF:34:B6:47:82:D8:6E:37:1E:3F:EA:02:5B:F5:AA:1D:EA:2E:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt80tkeC2G43Hj_qAlv1qh3qLps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/yjpRUJU_xKC_O-gpYe2ihPfu2Zs.roa
Signing time: Sun 01 Jan 2023 03:14:48 +0000
ROA not before: Sun 01 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 193.35.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:23:0b:70:2d:78:cb:cb:c0:c3:7a:65:d7:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df34b64782d86e371e3fea025bf5aa1dea2e9b
Validity
Not Before: Jan 1 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca3a5150953fc4a0bf3be82961eda284f7eed99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ca:cc:28:a4:06:23:00:23:ec:26:c2:dc:4f:
d2:a1:88:cb:f6:c5:2a:2f:a5:7a:47:1c:6c:9d:63:
85:9e:84:a0:89:b4:2b:ad:82:a9:0f:f9:fb:92:fd:
67:84:57:7a:0a:5a:77:45:fa:d1:0d:5d:f6:2c:e1:
9b:0c:df:f2:7d:9e:22:71:fd:81:95:7c:b2:df:c0:
02:3c:dc:4b:2c:46:ca:1a:b8:91:70:db:09:eb:e3:
e1:8b:89:05:a9:7a:18:d8:ad:66:3b:6d:52:7b:8e:
fd:90:49:ed:29:4d:15:ef:62:2a:b2:8c:af:04:3e:
35:c2:c3:a7:ed:fe:65:39:be:a4:81:f9:72:74:00:
7a:41:55:cc:bf:7d:34:92:d6:81:66:68:d1:f1:e9:
07:ce:b8:74:75:8c:bf:d0:13:07:7f:24:ef:7b:61:
04:27:1d:a1:b1:5f:ec:ae:72:4f:30:5b:93:4a:e4:
2a:a7:f8:d1:3e:5d:7e:6f:0d:b9:0c:8b:f4:fa:22:
0e:a1:1a:bc:41:3b:8b:ed:83:64:2a:8a:21:a8:2f:
8a:c9:af:c0:84:4e:de:e5:df:5c:ae:03:a5:f5:b3:
b9:61:84:6b:8e:db:c0:19:91:3a:08:c0:01:fc:ca:
8a:ae:f4:26:f2:e2:1f:f4:eb:30:3a:80:87:ec:c7:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:51:50:95:3F:C4:A0:BF:3B:E8:29:61:ED:A2:84:F7:EE:D9:9B
X509v3 Authority Key Identifier:
keyid:92:DF:34:B6:47:82:D8:6E:37:1E:3F:EA:02:5B:F5:AA:1D:EA:2E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt80tkeC2G43Hj_qAlv1qh3qLps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/yjpRUJU_xKC_O-gpYe2ihPfu2Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/365ec9-6793-4188-ab5a-48454a3f4aba/1/kt80tkeC2G43Hj_qAlv1qh3qLps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:fd:4d:81:41:4e:7d:92:c6:c0:e8:25:f0:41:7d:17:e5:c1:
3d:1e:38:a1:76:0c:0a:c3:0e:4d:aa:02:81:88:2c:67:2a:c2:
0e:d6:7e:d2:1d:e0:9b:61:9b:da:d2:ca:bc:d7:8b:a4:df:05:
95:35:6e:3f:49:7d:57:38:4d:d3:70:ed:f0:3f:0c:92:c1:5e:
48:36:5f:1a:55:2c:85:24:41:35:61:e1:46:6e:8f:71:70:5d:
56:dd:28:ed:aa:52:a4:5b:e2:bb:96:28:14:d2:aa:a0:5c:7e:
d7:db:06:e4:21:05:83:ed:be:91:3a:a8:e6:49:6d:77:74:be:
65:24:24:b8:d8:91:95:ae:88:9d:d8:78:a0:68:55:b8:ad:16:
a6:d7:7f:e3:52:a9:67:22:35:e3:ab:34:e7:52:c0:05:69:63:
87:79:91:5c:5a:6f:e3:dc:43:62:ba:86:0f:77:56:b0:47:8c:
22:83:8b:92:9c:c8:30:e9:85:61:36:e3:4d:65:83:23:83:74:
8a:e8:e7:f7:1d:ed:38:11:a0:5e:21:70:84:06:79:f6:e5:84:
30:c9:01:60:4f:63:8a:1c:fa:68:0f:04:08:84:36:28:23:2d:
9a:4c:ed:be:8e:0b:6f:67:71:c3:e8:51:7b:8c:05:f7:50:17:
65:ff:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:24 2025 by rpki-client