Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/PyRUiRIS2vLgDmWSJQ0AafAgAzs.roa
File: PyRUiRIS2vLgDmWSJQ0AafAgAzs.roa (raw, json)
Hash identifier: xI4UF71pbPpzk7+WWZ2EFRpny0dNFkVv5z8myuft+9A=
Subject key identifier: 3F:24:54:89:12:12:DA:F2:E0:0E:65:92:25:0D:00:69:F0:20:03:3B
Certificate issuer: /CN=a06189b384dab7b9b0826d0314fa66c3ff2d5b86
Certificate serial: 018964C13ACFE493D78869E1A2E3631C4FCF
Authority key identifier: A0:61:89:B3:84:DA:B7:B9:B0:82:6D:03:14:FA:66:C3:FF:2D:5B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/PyRUiRIS2vLgDmWSJQ0AafAgAzs.roa
Signing time: Mon 17 Jul 2023 16:48:52 +0000
ROA not before: Mon 17 Jul 2023 16:48:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 185.235.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c1:3a:cf:e4:93:d7:88:69:e1:a2:e3:63:1c:4f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06189b384dab7b9b0826d0314fa66c3ff2d5b86
Validity
Not Before: Jul 17 16:48:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f2454891212daf2e00e6592250d0069f020033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7b:18:50:22:75:c4:22:e7:65:91:34:5f:50:
29:d7:e0:92:40:86:00:12:59:54:47:9c:b3:84:a3:
0a:56:9e:01:e0:e3:bb:3a:f3:cd:ae:1b:e5:4c:ee:
11:e2:d9:de:b3:b1:93:e2:ef:c6:d2:fa:d0:3b:72:
c8:23:2c:33:ab:fd:77:f6:fa:fa:00:f5:68:84:9d:
25:c7:c6:06:70:30:53:53:12:41:4f:3a:63:a5:03:
72:a4:7c:10:4f:5f:b3:4f:b1:fe:c8:41:fe:e9:49:
86:86:20:66:24:53:44:a5:c4:6d:3a:cc:48:ca:f7:
91:ff:38:41:77:cb:de:b6:5f:bb:c5:3a:68:2d:79:
81:2b:cd:f7:1e:0e:36:29:f7:3c:90:1b:b6:cf:10:
fd:b0:f8:00:5e:65:0a:cb:5d:ac:3d:47:3d:83:35:
00:7c:a0:80:4d:6e:01:0d:26:fa:3d:92:41:e3:8e:
b0:36:36:a7:13:73:5f:db:16:8d:79:e1:ae:0d:1b:
55:db:bc:40:70:5c:94:b2:11:66:5c:56:42:58:e1:
c2:5b:dd:d0:db:10:eb:e5:9b:39:6a:3c:eb:d2:93:
73:8a:1d:fe:df:d9:1d:42:b0:f4:88:eb:28:5e:b6:
dd:c0:01:c9:b3:81:16:3e:52:b1:99:4e:7c:27:9b:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:24:54:89:12:12:DA:F2:E0:0E:65:92:25:0D:00:69:F0:20:03:3B
X509v3 Authority Key Identifier:
keyid:A0:61:89:B3:84:DA:B7:B9:B0:82:6D:03:14:FA:66:C3:FF:2D:5B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/PyRUiRIS2vLgDmWSJQ0AafAgAzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:72:66:02:7f:85:29:40:21:2f:ef:e8:14:f6:79:f6:b0:4d:
e1:de:02:c2:db:d4:0a:85:b4:1f:59:fa:11:65:67:1f:de:ff:
e0:a2:14:9d:13:5f:42:52:ca:94:15:bc:ee:9d:69:48:58:13:
48:20:71:4a:f1:a1:4c:b6:2b:d6:5b:35:01:1a:62:5b:9b:85:
a4:39:71:be:90:34:22:ac:6b:f6:78:f3:82:d3:d0:3b:80:ef:
70:d8:f4:ef:23:a3:02:d5:11:70:2a:49:a4:27:c3:50:89:d8:
56:25:9e:90:4f:e3:8e:ea:32:40:d5:73:d6:4c:50:8e:39:ec:
26:be:e3:33:7f:12:71:8f:9f:25:70:42:15:63:8d:3e:d6:9d:
3f:03:37:c0:e5:53:7e:ed:65:fc:17:28:17:81:ba:43:6c:95:
79:66:07:4b:b9:b7:9e:9c:5c:04:46:d5:46:9e:a9:29:19:69:
03:23:6e:19:8d:a1:71:d8:1f:5b:fe:b1:23:39:c5:48:c2:cd:
19:e9:85:ae:0a:66:17:14:a0:8a:cb:0f:0f:c5:af:38:f4:90:
ad:68:c0:ee:47:52:8b:2c:f4:88:d1:a2:25:80:b6:71:dd:37:
af:ab:64:a8:24:3d:c7:bc:5a:16:08:2d:14:91:51:d7:c3:2e:
8b:59:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:07:55 2023 by rpki-client on console-ams.rpki-client.org