Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/yza_t7-O6APvb2kMcASyuhEUeFk.roa
File: yza_t7-O6APvb2kMcASyuhEUeFk.roa (raw, json)
Hash identifier: tsarCqLSpAe3VW+go20D07uAXxYOwShijoOfF80vjoA=
Subject key identifier: CB:36:BF:B7:BF:8E:E8:03:EF:6F:69:0C:70:04:B2:BA:11:14:78:59
Certificate issuer: /CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Certificate serial: 018CC2DB20EF15FFFFDDFC174D7B94077D92
Authority key identifier: 3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/yza_t7-O6APvb2kMcASyuhEUeFk.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 178.211.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:20:ef:15:ff:ff:dd:fc:17:4d:7b:94:07:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb36bfb7bf8ee803ef6f690c7004b2ba11147859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:89:12:ed:70:1f:6f:bf:f2:88:c7:67:57:
91:c8:35:d9:2e:a1:27:8c:59:61:49:9d:ca:bd:e4:
f3:1c:24:5d:1f:f8:81:9f:e9:3b:ff:2a:15:07:06:
7e:8f:98:2a:7a:89:a4:7e:36:f9:d7:12:01:b2:c7:
92:c3:16:c0:db:2a:1d:f0:d7:c6:88:c7:c4:a7:a9:
61:77:a1:66:a9:1f:1c:8d:14:f1:88:c0:d6:66:21:
a1:89:f5:08:49:4d:45:5f:a6:86:8a:f4:16:87:6b:
54:69:56:c6:70:d1:23:97:73:76:f7:47:9a:2c:c0:
42:1a:3a:c1:01:0a:4b:68:07:3f:20:29:eb:e7:de:
8a:29:96:be:68:61:fa:2c:9e:96:35:db:d6:7f:3a:
eb:01:4f:79:56:d6:e7:b2:b9:a2:98:f7:d0:cb:d9:
01:61:13:be:f9:eb:bb:55:e3:26:86:09:27:ee:7b:
b7:f5:e6:0d:53:c7:50:c5:84:cc:20:7e:87:91:05:
d7:f6:7e:aa:47:b9:b5:70:72:bb:a4:36:5e:f7:16:
0e:20:b1:ac:41:0e:fb:1c:62:32:5c:14:a0:1c:01:
85:c9:4c:cc:99:1b:35:d9:88:3d:fb:5f:19:7e:a0:
40:bf:36:31:55:52:47:06:40:4e:13:b2:b8:ba:94:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:BF:B7:BF:8E:E8:03:EF:6F:69:0C:70:04:B2:BA:11:14:78:59
X509v3 Authority Key Identifier:
keyid:3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/yza_t7-O6APvb2kMcASyuhEUeFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.149.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:41:71:a9:b6:f9:b7:c8:89:5e:c6:f3:ff:e9:39:4d:18:e0:
a0:20:27:2c:8e:8b:c1:f3:a4:b7:71:b7:13:d7:20:c0:a9:b6:
b6:a7:84:a1:70:f4:23:26:cb:a1:79:05:41:e5:bd:11:d7:bf:
8e:1c:27:86:89:ca:24:b6:12:2f:ec:d0:b9:5d:a6:02:ac:c2:
6d:ee:f9:9a:30:4d:cc:37:5f:4b:ff:8e:27:5d:6c:a0:da:d4:
0e:c1:b2:6b:8b:bb:7d:09:3f:0d:f4:58:f0:26:f3:3d:cf:e0:
38:61:ad:dd:eb:5e:70:a2:94:f8:1e:2b:b9:d8:fa:9f:59:77:
a1:0b:ab:03:7d:0d:a8:c0:9d:66:dd:85:67:88:7a:5f:f3:30:
96:34:ce:7c:f3:3a:cc:eb:f0:ec:ee:16:e8:22:3e:3f:60:91:
e6:ed:84:12:94:13:88:24:6e:fc:0a:bb:d8:30:c2:76:8b:5b:
7e:d0:c1:8e:c1:f2:41:d4:83:72:c1:9f:36:2c:43:0b:85:63:
e6:98:12:e2:2f:69:0a:14:ac:95:c4:a5:f3:b0:5b:42:d0:35:
de:c0:e9:7f:57:ea:1d:13:1b:e4:09:18:f2:7d:4b:d5:39:7c:
69:b6:b0:e9:63:ad:2a:1c:22:3c:e4:1e:5a:b4:20:2a:89:b1:
aa:fc:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:26 2024 by rpki-client on console-ams.rpki-client.org