Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/myd89YmU_i7013aJwhjNQ35661I.roa
File: myd89YmU_i7013aJwhjNQ35661I.roa (raw, json)
Hash identifier: TNYyLXPoQDUlvsCERPtLVBLRfaKs2m1xOtdspflmUCo=
Subject key identifier: 9B:27:7C:F5:89:94:FE:2E:F4:D7:76:89:C2:18:CD:43:7E:7A:EB:52
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 04D886F8
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/myd89YmU_i7013aJwhjNQ35661I.roa
Signing time: Thu 30 Jun 2022 15:06:03 +0000
ROA not before: Thu 30 Jun 2022 15:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 36.255.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81299192 (0x4d886f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jun 30 15:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b277cf58994fe2ef4d77689c218cd437e7aeb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9d:7d:56:eb:2c:e7:b1:c5:14:02:16:42:55:
46:ef:20:76:12:72:94:78:69:51:57:b8:71:6f:93:
16:76:a9:5e:df:be:33:b9:d9:ca:a0:7f:e2:73:a2:
55:e3:c9:36:94:4b:8e:ec:f8:70:1e:23:94:fc:2b:
82:e2:ce:16:26:97:83:6d:c3:10:5d:fd:4d:d3:f2:
f1:ab:7d:92:02:8e:55:fe:e0:33:f6:b7:6b:fe:8a:
ae:02:72:97:91:c3:d5:f7:f9:a5:a2:e9:64:b1:f6:
ee:05:4b:6d:c2:cb:44:2c:3e:1a:48:8c:f5:70:9c:
99:e5:e4:ff:a4:a6:2e:c2:9e:31:29:03:b4:68:60:
36:0e:2e:21:9d:72:bb:e6:7b:97:47:80:47:a8:41:
e9:45:8f:e4:f3:9b:18:cd:88:b3:c4:6e:6a:f7:2b:
c3:82:18:b9:04:a3:e8:70:d4:6d:68:ca:14:89:c0:
f6:a5:15:8f:44:f7:0c:91:a8:85:0f:5c:ff:8a:43:
e5:94:3c:3e:8d:5b:6c:57:1e:d8:17:97:c8:84:d4:
29:dc:70:69:37:4e:4f:81:af:77:39:76:88:9b:04:
d7:f1:17:2d:3d:f0:db:f8:68:5a:37:79:c4:3d:d4:
68:8e:5b:39:12:0e:07:f8:68:09:b4:af:51:a8:9d:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:7C:F5:89:94:FE:2E:F4:D7:76:89:C2:18:CD:43:7E:7A:EB:52
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/myd89YmU_i7013aJwhjNQ35661I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
48:11:93:ad:0a:f9:0e:fd:9a:2b:97:db:5a:cb:16:92:a9:bb:
18:9e:8a:f1:bd:a9:0a:19:46:5f:62:8f:c8:c1:db:5a:99:79:
bb:17:2c:35:f8:56:c5:88:e2:fa:f8:20:f1:51:d1:48:0b:65:
8d:d6:28:95:f7:70:78:d2:fa:86:c4:48:89:98:25:dc:6a:bc:
24:da:32:cf:a8:06:cd:5e:55:f7:6a:e9:f8:59:83:63:19:72:
5a:d8:4a:8a:6a:dc:8f:18:3c:7e:5b:ba:b8:34:f1:6a:c7:4e:
0a:b3:4b:79:b7:10:87:e7:6a:72:f2:97:da:66:22:fd:ff:d9:
e5:6e:32:cd:82:c9:ae:b0:de:c2:d6:72:dd:16:b3:af:de:9d:
b7:a9:c3:14:d5:59:65:82:3d:1a:cd:41:6e:8a:f3:78:6a:8c:
72:2c:89:9b:b6:00:6a:0e:07:b2:df:ea:88:07:02:0f:15:13:
d1:f1:78:77:72:ca:85:09:ba:55:5a:16:9a:2b:dc:d2:65:25:
a1:b0:62:7e:9c:e4:cb:c2:6e:6d:5d:d5:91:26:c0:5e:b6:40:
11:79:2b:99:1d:7c:6d:b9:bf:42:e0:0c:bd:4c:a4:c6:46:24:
5a:83:76:f2:57:36:3f:e6:04:23:50:81:39:02:93:59:e6:8c:
79:dd:89:09
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBNiG+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDg1Mzk3ZjI2YTA0NGNhZWY2YTZiNjY5Mjg3MzMxYWE0ZDY4NjQ1MB4XDTIyMDYz
MDE1MDYwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWIyNzdjZjU4OTk0
ZmUyZWY0ZDc3Njg5YzIxOGNkNDM3ZTdhZWI1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOadfVbrLOexxRQCFkJVRu8gdhJylHhpUVe4cW+TFnapXt++
M7nZyqB/4nOiVePJNpRLjuz4cB4jlPwrguLOFiaXg23DEF39TdPy8at9kgKOVf7g
M/a3a/6KrgJyl5HD1ff5paLpZLH27gVLbcLLRCw+GkiM9XCcmeXk/6SmLsKeMSkD
tGhgNg4uIZ1yu+Z7l0eAR6hB6UWP5PObGM2Is8Ruavcrw4IYuQSj6HDUbWjKFInA
9qUVj0T3DJGohQ9c/4pD5ZQ8Po1bbFce2BeXyITUKdxwaTdOT4Gvdzl2iJsE1/EX
LT3w2/hoWjd5xD3UaI5bORIOB/hoCbSvUaidtr0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSbJ3z1iZT+LvTXdonCGM1DfnrrUjAfBgNVHSMEGDAWgBRghTl/JqBEyu9q
a2aShzMapNaGRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lJVTVmeWFnUk1ydmFtdG1rb2N6R3FUV2hrVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvMTEyNWEyLTQ0MzItNDgzZi1hMDBiLTYxNmQ5N2E3N2JkNi8x
L215ZDg5WW1VX2k3MDEzYUp3aGpOUTM1NjYxSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
MTEyNWEyLTQ0MzItNDgzZi1hMDBiLTYxNmQ5N2E3N2JkNi8xL1lJVTVmeWFnUk1y
dmFtdG1rb2N6R3FUV2hrVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAST/XjANBgkqhkiG9w0BAQsFAAOC
AQEASBGTrQr5Dv2aK5fbWssWkqm7GJ6K8b2pChlGX2KPyMHbWpl5uxcsNfhWxYji
+vgg8VHRSAtljdYolfdweNL6hsRIiZgl3Gq8JNoyz6gGzV5V92rp+FmDYxlyWthK
imrcjxg8flu6uDTxasdOCrNLebcQh+dqcvKX2mYi/f/Z5W4yzYLJrrDewtZy3Raz
r96dt6nDFNVZZYI9Gs1BborzeGqMciyJm7YAag4Hst/qiAcCDxUT0fF4d3LKhQm6
VVoWmivc0mUlobBifpzky8JubV3VkSbAXrZAEXkrmR18bbm/QuAMvUykxkYkWoN2
8lc2P+YEI1CBOQKTWeaMed2JCQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:45 2025 by rpki-client