Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/yTwVST57WTT1XQVifT1V-3qyLg4.roa
File: yTwVST57WTT1XQVifT1V-3qyLg4.roa (raw, json)
Hash identifier: nCo49aPuDeBQi+wWl1ZvJ/bThbRz1b4k0poboekQXUc=
Subject key identifier: C9:3C:15:49:3E:7B:59:34:F5:5D:05:62:7D:3D:55:FB:7A:B2:2E:0E
Certificate issuer: /CN=3d9f9be20560347813141749a1795333999652eb
Certificate serial: 01856D78680D84E58694723AB5972E774861
Authority key identifier: 3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/yTwVST57WTT1XQVifT1V-3qyLg4.roa
Signing time: Sun 01 Jan 2023 13:14:45 +0000
ROA not before: Sun 01 Jan 2023 13:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6740
IP address blocks: 185.193.128.0/22 maxlen: 22
213.235.64.0/18 maxlen: 18
82.202.0.0/18 maxlen: 18
212.90.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:68:0d:84:e5:86:94:72:3a:b5:97:2e:77:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9f9be20560347813141749a1795333999652eb
Validity
Not Before: Jan 1 13:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c93c15493e7b5934f55d05627d3d55fb7ab22e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f1:36:3e:21:a4:b9:3d:ed:2a:f4:00:b7:b1:
21:78:8c:e5:f9:d8:73:dc:48:9b:fe:e0:9f:7d:a3:
89:ec:9b:61:99:b1:a0:33:b5:d2:92:60:8e:11:5b:
19:59:43:54:69:0b:f0:59:e2:d1:f4:95:9e:98:49:
ff:07:dc:e4:c9:e4:be:cf:99:7a:ea:49:52:44:fb:
a8:f2:ef:bb:2a:98:db:04:47:cb:f0:c7:c4:77:cf:
83:d6:11:74:e0:9b:c9:12:cf:df:99:04:7f:e6:e7:
d7:bb:04:6c:7b:49:fa:1d:1c:8a:e2:d6:bb:1c:5b:
02:15:59:62:d9:16:fa:6a:43:ad:0c:1e:fa:c0:3f:
88:d2:35:7a:b5:98:0f:4e:88:e0:44:fb:f5:24:4b:
a0:75:d5:8d:31:52:73:18:15:58:c1:91:b2:b4:26:
97:ee:83:02:12:32:04:77:33:0f:97:6b:24:06:32:
93:9b:e5:7c:e3:5e:ad:60:ac:f6:71:25:66:5c:ca:
91:51:ba:d1:e4:4d:8d:52:b9:33:46:f1:ab:a6:cf:
1d:a3:97:8f:60:d2:3c:ef:2c:b3:24:41:aa:e7:56:
48:df:fc:f3:11:1d:51:83:00:db:c9:16:a0:da:9d:
8f:a9:ff:9d:45:cc:cd:2f:21:7f:4e:ce:ae:73:5f:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3C:15:49:3E:7B:59:34:F5:5D:05:62:7D:3D:55:FB:7A:B2:2E:0E
X509v3 Authority Key Identifier:
keyid:3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/yTwVST57WTT1XQVifT1V-3qyLg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/PZ-b4gVgNHgTFBdJoXlTM5mWUus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.0.0/18
185.193.128.0/22
212.90.224.0/19
213.235.64.0/18
Signature Algorithm: sha256WithRSAEncryption
23:6d:2d:da:e5:c8:f8:60:5d:c0:f3:19:de:33:a6:4a:a3:0e:
9a:a0:82:1e:69:d0:b7:fa:48:40:3e:95:66:55:c7:16:25:e1:
c4:76:03:33:aa:ea:b0:e0:9d:ad:2d:f5:19:94:1c:bb:70:80:
55:2d:a6:e3:f3:74:56:7d:91:55:2a:1d:45:b0:de:c3:08:09:
5c:c5:7a:98:66:8c:40:26:d3:ad:f4:b4:a1:6d:0a:4e:0b:bf:
3c:d5:43:96:b7:28:8b:66:a2:10:5b:ee:f1:c9:ba:40:ef:a9:
5b:86:c4:a4:fe:8f:50:6e:3b:78:66:61:e2:66:e6:f3:bd:6c:
8d:90:8c:c9:8e:88:31:c8:67:94:27:88:f5:7c:3b:e0:89:dc:
96:70:44:a9:89:44:2a:cc:8d:90:8b:8a:36:18:fb:f3:94:1c:
06:9b:52:7b:71:d2:74:fc:ef:49:be:16:6e:57:0c:6a:64:f3:
35:89:ac:c5:3b:ed:ce:00:e2:36:4a:7b:94:05:dc:5c:df:60:
03:5d:da:c7:83:e2:67:d1:74:3f:29:ce:fb:58:60:d6:d9:a4:
72:df:4d:f7:ef:65:f4:cf:08:49:2e:cc:5c:11:cd:94:2d:15:
72:f6:ba:44:a4:5a:af:14:fc:fe:44:cf:de:fd:67:14:f5:e9:
76:29:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-fra.rpki-client.org