Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6da2d4-0919-4eaa-8a0c-040e105eeecd/1/yLwH2Ln2YOi8D7QDlxTtm-aIb1U.roa
File: yLwH2Ln2YOi8D7QDlxTtm-aIb1U.roa (raw, json)
Hash identifier: DdyPOxxSWlwVLZYT+svADFePWbBrHXn/zuvMm3HIGa4=
Subject key identifier: C8:BC:07:D8:B9:F6:60:E8:BC:0F:B4:03:97:14:ED:9B:E6:88:6F:55
Certificate issuer: /CN=b87b401f0d4506d887eaf628ff598911e67f9b7d
Certificate serial: 0274E805
Authority key identifier: B8:7B:40:1F:0D:45:06:D8:87:EA:F6:28:FF:59:89:11:E6:7F:9B:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHtAHw1FBtiH6vYo_1mJEeZ_m30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6da2d4-0919-4eaa-8a0c-040e105eeecd/1/yLwH2Ln2YOi8D7QDlxTtm-aIb1U.roa
Signing time: Sat 01 Jan 2022 11:55:06 +0000
ROA not before: Sat 01 Jan 2022 11:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198155
IP address blocks: 193.150.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41216005 (0x274e805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b401f0d4506d887eaf628ff598911e67f9b7d
Validity
Not Before: Jan 1 11:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8bc07d8b9f660e8bc0fb4039714ed9be6886f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:7a:12:9d:ed:d3:f3:35:dd:2c:e7:2c:db:
85:9d:76:e5:1e:e3:86:b2:62:11:23:f7:ae:6f:c7:
d0:7c:16:c0:1f:ef:87:c3:23:02:d9:52:4c:ed:7d:
a6:75:48:36:34:bd:92:7e:c2:29:ad:00:9a:c2:91:
6b:8c:53:ff:24:6d:e7:14:67:63:16:57:ca:16:44:
d6:ac:c7:61:92:e9:71:d1:50:4e:f3:66:19:0e:e3:
98:fe:e6:71:52:37:0e:fe:57:62:0e:79:77:dc:a8:
f5:73:23:f8:cd:cf:4d:79:69:1c:0a:28:12:6f:69:
55:b8:85:37:97:c0:79:fb:7c:3c:ae:b9:51:b8:cc:
d3:f3:9e:ce:fa:6a:ac:1f:9e:02:a5:04:84:ef:e6:
f1:34:57:2a:b4:14:d4:a6:f3:76:73:1d:8d:e6:d8:
53:27:f9:fe:9c:b3:c4:9f:c0:ac:40:d0:f3:4c:23:
9a:27:cd:c0:39:67:30:6b:08:5a:a1:ce:2e:b7:4c:
47:22:c8:90:b8:bb:79:75:d7:25:87:15:e1:14:2e:
a9:91:2f:18:8f:6c:99:e4:04:13:33:09:ec:be:a5:
05:81:7e:02:60:82:69:a9:be:7c:61:db:13:30:5e:
04:96:19:70:0c:e9:62:2c:a4:c3:dc:c6:08:62:3b:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BC:07:D8:B9:F6:60:E8:BC:0F:B4:03:97:14:ED:9B:E6:88:6F:55
X509v3 Authority Key Identifier:
keyid:B8:7B:40:1F:0D:45:06:D8:87:EA:F6:28:FF:59:89:11:E6:7F:9B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHtAHw1FBtiH6vYo_1mJEeZ_m30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6da2d4-0919-4eaa-8a0c-040e105eeecd/1/yLwH2Ln2YOi8D7QDlxTtm-aIb1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6da2d4-0919-4eaa-8a0c-040e105eeecd/1/uHtAHw1FBtiH6vYo_1mJEeZ_m30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a0:e9:03:ec:1d:8e:d1:9d:a6:8b:fb:83:50:d9:fb:87:4b:
15:d5:2d:60:fa:b3:6f:83:36:df:de:c7:f9:c1:33:b6:12:95:
c3:97:ce:70:42:e1:cc:fa:cf:8a:ac:65:c6:12:bb:7e:e4:1c:
20:37:9c:79:28:83:96:1f:3a:7b:1c:85:30:8c:b3:87:d9:dd:
72:b5:7d:3c:de:78:c5:20:a2:55:c5:e5:39:3a:17:af:22:5f:
7b:36:90:9a:e1:e9:25:76:c9:ea:7f:ca:e7:37:7f:45:09:bb:
bb:df:fa:cc:a6:40:8d:5a:1a:7e:69:08:37:d9:e9:fc:5b:13:
6b:30:b6:e6:d7:e4:52:42:29:d7:8d:82:44:d7:9e:80:54:a3:
24:21:93:e8:90:4b:ec:ed:c5:03:79:2e:1e:e6:c9:67:93:b7:
d1:59:2e:4e:ae:67:44:43:6c:a3:37:e9:0f:63:09:f5:c5:b8:
3e:80:0d:5a:d2:d4:35:ed:da:52:3b:63:40:61:8b:9a:0c:5c:
7d:b8:9e:06:80:a9:84:17:78:d2:61:de:61:a7:fc:48:0c:4d:
21:15:e9:49:bd:38:59:f0:30:83:62:1d:c9:d9:f9:2e:a5:a1:
1d:47:95:ab:3a:94:33:65:35:98:d2:d0:0a:fe:2f:6e:57:11:
0c:c7:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:36 2024 by rpki-client on console-fra.rpki-client.org