Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/Y6F0ORdIPasoch2VRxpo40B1eTo.roa
File: Y6F0ORdIPasoch2VRxpo40B1eTo.roa (raw, json)
Hash identifier: sG7FCsV/o+U7khqNnfzqu5KyLrMfgpCeprkk3Wi62IE=
Subject key identifier: 63:A1:74:39:17:48:3D:AB:28:72:1D:95:47:1A:68:E3:40:75:79:3A
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 01856F0B42F54A3D2CC92A5A5E10BFC4C979
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/Y6F0ORdIPasoch2VRxpo40B1eTo.roa
Signing time: Sun 01 Jan 2023 20:34:47 +0000
ROA not before: Sun 01 Jan 2023 20:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 195.8.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:42:f5:4a:3d:2c:c9:2a:5a:5e:10:bf:c4:c9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jan 1 20:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63a1743917483dab28721d95471a68e34075793a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:a0:c7:c9:32:37:a8:65:09:50:cf:f1:73:
52:1a:53:90:80:9e:70:23:bf:dc:43:26:d7:2a:8f:
1c:bf:e6:45:b2:29:7c:06:76:f8:ff:ab:58:e7:24:
7f:38:74:ee:5e:bd:6b:eb:88:1b:eb:b5:fa:f7:90:
3e:da:37:d3:c7:51:4c:39:ee:61:93:aa:59:71:b9:
44:09:28:8f:6c:60:a2:e2:e5:01:ee:70:ae:f6:32:
f9:32:00:a3:65:ee:ba:3a:06:c0:70:b4:b1:32:7e:
30:09:7b:0e:9b:89:28:d9:3c:81:8f:c3:b6:5b:2d:
b7:c0:86:ab:32:6a:aa:00:c6:8f:03:e7:19:e5:d4:
85:33:c8:17:e3:68:12:51:5a:01:b7:f5:2a:b3:07:
c8:40:f5:96:d3:2e:0b:5a:39:a9:ee:ba:95:31:21:
90:b0:9f:fc:81:72:27:79:55:22:83:7f:35:7d:48:
41:b0:89:e7:1d:d6:1b:39:34:1c:d4:ed:d7:c0:bf:
81:dc:f7:f1:89:eb:6e:43:d6:02:6a:63:ab:61:9d:
94:f2:de:2f:5d:db:4c:ad:5e:05:22:b9:15:ef:96:
78:d9:61:b5:0e:93:64:51:e0:ab:af:3b:61:ee:30:
71:79:f1:c7:ed:59:0a:91:fc:c7:e4:c2:dc:90:0b:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A1:74:39:17:48:3D:AB:28:72:1D:95:47:1A:68:E3:40:75:79:3A
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/Y6F0ORdIPasoch2VRxpo40B1eTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.208.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:a4:4f:30:c7:b2:e5:fc:83:24:5a:6d:5a:09:e8:11:a0:8c:
16:a6:51:16:67:17:df:fe:4a:8b:60:b9:30:4e:43:c5:33:a7:
b7:99:7e:33:a2:e0:a8:46:4c:92:dd:f8:45:a2:1c:1f:80:19:
ee:b9:2f:a1:9b:dc:9a:16:24:63:9f:f6:e9:8d:6a:9e:2e:74:
4f:96:1e:b7:1e:cd:22:1d:13:bf:c8:dc:6b:66:39:05:82:8b:
62:e3:4d:ec:92:72:69:0a:92:31:1a:61:f3:7c:a1:25:87:06:
18:e7:25:92:e2:66:7e:50:e9:20:00:c0:20:1c:d0:67:e4:16:
39:8f:9c:6d:5b:22:c7:5c:f0:c5:63:2c:90:0f:6f:e3:57:90:
e4:4c:79:2d:d6:03:7f:1f:dd:1f:b5:65:e4:f6:be:c0:ee:22:
19:5f:64:5a:07:77:30:d2:07:df:87:97:05:cd:06:a3:b1:e0:
dc:85:6d:c3:61:9a:cc:a6:02:63:f3:e1:91:c5:8e:9b:0e:44:
b7:e1:36:28:5b:6f:9a:24:3f:3a:fe:91:3f:45:05:34:be:da:
43:df:52:a4:61:40:17:ef:bf:57:96:5f:e4:af:8d:ba:ca:5a:
fd:c5:32:73:8a:61:3d:0f:4a:85:35:3c:84:1d:1b:63:81:99:
5b:03:bd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:03 2025 by rpki-client