Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/y-eO_9criXuZgWBd2B0USsiHuhg.roa
File: y-eO_9criXuZgWBd2B0USsiHuhg.roa (raw, json)
Hash identifier: hzmystjAu/ypsrNOfiEgrKJ3XLu9/rPjsxf0fGli61g=
Subject key identifier: CB:E7:8E:FF:D7:2B:89:7B:99:81:60:5D:D8:1D:14:4A:C8:87:BA:18
Certificate issuer: /CN=ca99b3e8ba82d0d48f170c6ffd8e9daa3aa223d4
Certificate serial: 061C1DBA
Authority key identifier: CA:99:B3:E8:BA:82:D0:D4:8F:17:0C:6F:FD:8E:9D:AA:3A:A2:23:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/y-eO_9criXuZgWBd2B0USsiHuhg.roa
Signing time: Sat 01 Jan 2022 10:54:18 +0000
ROA not before: Sat 01 Jan 2022 10:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10122
IP address blocks: 193.148.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102505914 (0x61c1dba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca99b3e8ba82d0d48f170c6ffd8e9daa3aa223d4
Validity
Not Before: Jan 1 10:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbe78effd72b897b9981605dd81d144ac887ba18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:0f:85:fa:86:c5:62:fe:73:ab:2e:ff:cd:
b0:f2:7d:44:2f:b3:c3:00:91:b2:c1:03:a8:41:39:
95:ea:02:80:e1:8d:98:92:b5:f7:7f:16:e3:db:22:
7d:c0:70:0a:ed:f3:13:74:2c:8b:66:f9:dd:4d:46:
1d:b9:81:0a:b5:5b:88:09:df:92:97:69:49:cf:10:
44:cc:25:e9:ef:4d:9e:d2:fa:45:57:f8:2d:2d:20:
fe:e2:19:e9:c6:0d:5d:ec:33:86:e4:60:6a:46:72:
fd:85:2e:e1:db:d6:a7:f7:a5:34:b2:be:0e:f1:fd:
dc:e9:66:fa:d8:48:33:9e:a9:86:8e:c6:7a:6f:18:
bf:aa:36:66:fe:06:aa:32:d6:f3:43:70:3f:e7:69:
54:e6:eb:57:3d:1b:49:e6:b0:b3:00:15:b1:c3:7f:
53:7d:0c:d3:35:1f:2c:7f:93:23:36:1c:ec:86:ee:
28:96:19:d5:b5:b9:b0:d6:29:f0:48:31:73:1a:3c:
47:4f:50:c9:2f:58:4c:d3:e3:d5:03:e0:54:e4:2c:
2d:7a:6f:81:64:75:9f:52:3f:7a:18:10:58:73:75:
6b:96:6d:07:08:1d:39:59:f7:07:48:21:44:11:ad:
f0:d3:5f:b8:d2:9a:db:a7:c3:74:c2:a4:36:5c:a8:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E7:8E:FF:D7:2B:89:7B:99:81:60:5D:D8:1D:14:4A:C8:87:BA:18
X509v3 Authority Key Identifier:
keyid:CA:99:B3:E8:BA:82:D0:D4:8F:17:0C:6F:FD:8E:9D:AA:3A:A2:23:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/y-eO_9criXuZgWBd2B0USsiHuhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.94.0/24
Signature Algorithm: sha256WithRSAEncryption
67:41:76:dd:74:21:ed:fc:cf:38:9b:85:7f:ba:29:8e:0d:d2:
20:95:74:83:59:33:c8:f2:f5:22:0a:69:77:c3:35:01:97:f4:
93:ab:1f:14:e8:05:87:52:db:33:0d:d5:2f:80:ca:2e:cb:b0:
f9:9b:50:7a:5a:ac:27:18:a3:20:ee:d2:b6:17:cc:a7:1d:32:
2d:f8:c9:bd:91:fb:b5:df:16:7f:b3:d5:98:9c:5a:6e:26:5c:
de:d5:de:b2:16:b6:3f:a9:dd:06:7f:0d:48:de:1c:24:44:bf:
fd:3f:3a:52:d5:c8:7c:48:5c:72:33:85:b9:4a:04:6a:45:c3:
66:e9:8f:f5:25:9b:df:5a:cc:bd:92:27:b0:2e:a3:ff:00:d7:
cb:45:53:e3:31:00:f5:d4:4e:fd:79:cb:10:7e:bb:0a:97:4d:
4c:23:4a:1f:86:e3:27:17:d1:04:a9:99:aa:ac:9d:f8:2a:8e:
13:f3:4b:1f:58:e4:6d:95:37:02:49:fb:e0:5d:db:75:bd:47:
ba:f1:66:bc:bb:bf:ba:98:9a:8f:19:0b:bc:94:c5:74:42:e9:
11:5f:a4:12:56:e7:8b:aa:bd:94:f4:26:2e:70:ba:c4:22:44:
b0:04:67:1c:b8:f4:a6:6d:11:b3:3a:8a:e6:6b:be:8c:df:02:
da:c5:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:44 2024 by rpki-client on console-ams.rpki-client.org