Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Yv7GBzQwQILjmcPd7Xod5uZjC0U.roa
File: Yv7GBzQwQILjmcPd7Xod5uZjC0U.roa (raw, json)
Hash identifier: r5K/sGC0EHimrhy/0yB9xLbQ+1oQb+tTWEOBe6/iQFE=
Subject key identifier: 62:FE:C6:07:34:30:40:82:E3:99:C3:DD:ED:7A:1D:E6:E6:63:0B:45
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF942BEAAD7191AF6D1CA28732C45A7
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Yv7GBzQwQILjmcPd7Xod5uZjC0U.roa
Signing time: Mon 02 Jan 2023 00:54:44 +0000
ROA not before: Mon 02 Jan 2023 00:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 185.111.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:42:be:aa:d7:19:1a:f6:d1:ca:28:73:2c:45:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62fec60734304082e399c3dded7a1de6e6630b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:8c:c2:98:88:b4:93:14:b2:a6:8c:a9:10:
c5:20:25:b8:d3:fd:91:dd:7e:3f:d5:2a:41:2b:c3:
1f:0a:90:b9:83:1d:55:9f:ab:bb:ce:4d:0f:51:70:
73:91:2c:1e:3a:0b:76:12:87:78:98:40:59:99:14:
42:1e:b5:88:17:51:0a:94:2a:12:ce:82:e8:3f:6a:
5e:e7:81:aa:e5:82:84:fb:65:7f:d9:8c:13:50:a1:
9e:18:5f:0a:9b:17:98:1a:87:9e:ca:37:b7:60:f5:
24:d0:4a:67:fc:44:94:d1:a3:fe:8c:61:8c:da:a8:
ea:3f:bb:07:af:d6:8f:a6:3b:cb:66:07:c4:34:9b:
69:20:9d:2a:1f:61:ae:22:a7:45:5f:24:f6:a2:ac:
0a:9d:60:2c:eb:0b:49:32:39:53:cf:04:40:f3:85:
63:6b:2b:27:9b:f2:ed:a7:51:6b:0b:27:34:f1:3e:
07:e9:3c:d1:c2:a2:8e:f0:0f:95:fa:1d:e0:ba:fb:
70:4d:36:ec:ae:4c:88:37:70:68:4d:3e:ae:97:80:
2a:01:e1:5f:12:72:64:fb:b1:f6:5e:18:8f:9d:12:
3b:8e:d2:92:57:74:00:f2:bc:56:be:a4:01:63:09:
da:7f:34:2f:c2:9a:a3:ff:af:fc:41:96:ec:b8:a9:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:C6:07:34:30:40:82:E3:99:C3:DD:ED:7A:1D:E6:E6:63:0B:45
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Yv7GBzQwQILjmcPd7Xod5uZjC0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.188.0/24
Signature Algorithm: sha256WithRSAEncryption
99:53:48:bb:f3:02:d6:13:63:ca:e6:98:96:8d:13:5c:9a:72:
d2:2d:cd:bb:04:e7:64:c8:fc:d6:5c:c3:f4:55:df:74:c0:91:
b5:a4:b7:0a:25:42:f7:bd:01:08:d1:43:8b:97:13:36:f1:d2:
0c:96:f0:a1:2b:f7:08:cc:09:d0:f4:d0:40:0e:b3:18:0b:35:
f7:93:06:50:6b:f0:7b:74:5f:0c:aa:31:95:bf:db:89:5c:16:
c5:54:44:14:4a:88:c8:a8:3e:d9:f9:96:43:8e:98:7d:08:9f:
a6:62:7d:2b:68:9e:92:8e:ae:bb:51:79:72:4f:85:01:cf:15:
d2:76:d5:80:f7:61:a8:e6:e2:39:43:15:f9:84:cf:64:96:97:
ca:35:7e:d9:e9:95:68:4f:5f:57:af:14:d8:f7:e5:ba:aa:0c:
7e:30:98:77:c8:dd:6c:e7:01:c5:d8:1a:0f:64:ab:08:72:9a:
4a:c5:96:1c:2a:15:28:2f:ef:88:9d:85:0d:e6:a5:9f:bd:80:
d6:ad:e8:6c:90:ea:d8:d5:1d:c0:40:4b:c4:81:6f:42:d6:02:
fb:47:14:9c:2d:8f:ae:b7:8a:3f:4f:61:b0:fc:d1:e0:36:e9:
85:1b:61:99:55:ea:e4:ca:aa:02:8d:2f:73:c4:ce:a0:28:25:
6c:b9:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:46 2024 by rpki-client on console-ams.rpki-client.org