Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/YsFvSJsNGqhzn0Id6-K4yF2HBsQ.roa
File: YsFvSJsNGqhzn0Id6-K4yF2HBsQ.roa (raw, json)
Hash identifier: 8UT9TRxErtR/UJMQ8Ulk0i/8vuE2+Eomp3HX6a9nqlY=
Subject key identifier: 62:C1:6F:48:9B:0D:1A:A8:73:9F:42:1D:EB:E2:B8:C8:5D:87:06:C4
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 018A77F4E49FB13826D0AEE5A5D6B41AE3CE
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/YsFvSJsNGqhzn0Id6-K4yF2HBsQ.roa
Signing time: Sat 09 Sep 2023 03:20:52 +0000
ROA not before: Sat 09 Sep 2023 03:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35478
IP address blocks: 194.126.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:77:f4:e4:9f:b1:38:26:d0:ae:e5:a5:d6:b4:1a:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Sep 9 03:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62c16f489b0d1aa8739f421debe2b8c85d8706c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:85:5d:56:81:1b:1a:7e:32:56:fb:2b:20:
15:60:1a:9f:db:29:72:22:58:59:f7:fb:c5:de:a7:
46:69:7e:bd:a3:7b:57:3f:1f:c0:de:69:ff:b6:c0:
a4:57:d7:34:de:89:0b:1f:eb:87:d9:32:6d:53:dd:
28:1c:e6:17:20:e8:c4:b0:64:1b:c0:9c:de:e2:88:
7e:e3:67:1d:a6:7d:e3:9b:fc:13:9d:1e:c5:8f:ae:
6b:1d:48:1a:f2:85:25:9b:0a:36:af:9e:56:dc:6b:
5b:bb:00:ac:53:6b:8e:79:df:bc:84:97:95:84:d8:
da:92:a0:cf:99:ad:b1:ab:84:c2:95:4b:48:95:0b:
a8:6d:dc:f2:2f:8e:35:b2:b4:96:37:36:ec:a1:15:
62:23:48:6d:1d:7e:f5:32:e8:32:75:ab:8d:d1:c5:
aa:f2:dc:69:95:4d:05:bd:f2:21:e6:56:76:8c:29:
ba:91:85:2c:5b:53:da:62:c3:7b:e7:5c:ea:9e:32:
99:ca:25:ba:85:1d:f6:e1:78:ae:be:b0:cb:09:67:
0e:e3:d0:ca:17:80:84:83:81:81:f9:6a:40:eb:eb:
85:04:31:a4:2b:f9:0d:73:0a:aa:5c:8e:a0:ee:32:
c9:13:0b:c0:64:5e:fe:b4:af:69:51:a4:3f:26:3d:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C1:6F:48:9B:0D:1A:A8:73:9F:42:1D:EB:E2:B8:C8:5D:87:06:C4
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/YsFvSJsNGqhzn0Id6-K4yF2HBsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
20:23:a4:74:52:dd:85:ed:61:51:8c:54:97:91:24:04:83:17:
61:02:91:62:46:a9:dc:06:8c:14:41:c0:d5:8e:4a:39:f4:de:
ad:8d:84:7c:09:e7:4b:04:b4:ee:c0:24:89:45:13:ba:82:bc:
10:da:a8:75:2e:7b:14:77:3f:bb:43:42:d6:87:50:2b:15:fb:
58:00:ec:bb:6f:43:ea:8b:c2:a2:6e:52:78:c1:8c:35:75:a5:
46:c9:93:88:69:ed:ee:f0:ef:e3:c4:b5:13:39:cd:ea:2c:08:
10:4a:8a:6e:87:fb:5a:36:b9:d1:d5:0a:03:0c:2d:03:c9:7f:
e0:f0:8b:d2:db:cb:c1:6f:d8:1c:07:34:ea:74:28:a5:a1:ab:
62:80:93:68:b7:b8:74:26:74:1b:34:30:30:c9:3a:67:38:6b:
05:b9:b2:fc:50:c2:74:fa:d1:ef:06:f2:4e:b0:ce:2a:5c:aa:
1b:79:4d:cb:91:74:5c:e5:f9:de:fe:87:c1:b5:c9:98:cc:a7:
2a:2a:d2:51:04:d5:ec:e0:5f:c3:30:16:c5:bf:15:fc:ae:70:
ef:9c:06:7c:e7:64:53:69:64:46:aa:69:8d:b9:1c:a8:cc:bb:
2e:28:db:71:77:86:60:10:de:e2:87:5c:86:56:bf:c9:42:fc:
25:94:f0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 11:30:37 2023 by rpki-client on console-fra.rpki-client.org