Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/YFWEq7yH7wxUEcSVj01xZsC9BVM.roa
File: YFWEq7yH7wxUEcSVj01xZsC9BVM.roa (raw, json)
Hash identifier: oMglQ/MLmjXgm2FcANwqRnzRYVfoK9LO1WDSRCYmFrA=
Subject key identifier: 60:55:84:AB:BC:87:EF:0C:54:11:C4:95:8F:4D:71:66:C0:BD:05:53
Certificate issuer: /CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
Certificate serial: 0186702D398995E3316D6D5C327342CCABA3
Authority key identifier: C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/YFWEq7yH7wxUEcSVj01xZsC9BVM.roa
Signing time: Mon 20 Feb 2023 18:54:17 +0000
ROA not before: Mon 20 Feb 2023 18:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 194.48.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:2d:39:89:95:e3:31:6d:6d:5c:32:73:42:cc:ab:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
Validity
Not Before: Feb 20 18:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605584abbc87ef0c5411c4958f4d7166c0bd0553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:33:2a:53:8c:cc:8d:4f:c6:61:aa:72:55:
95:35:0f:ff:22:7a:02:39:49:db:66:af:63:c2:b3:
f5:5f:e7:06:4b:29:96:b2:88:cc:7f:6e:20:54:85:
a8:13:97:f2:e8:88:2a:a1:f0:50:40:3c:a8:06:a6:
0f:e1:b1:66:c9:d3:bc:30:82:ab:9e:03:5a:7b:a6:
73:c4:7e:5b:8f:13:72:c4:5a:82:db:f6:2f:a8:da:
ac:d9:c4:c7:f6:71:23:48:79:71:ed:a8:73:78:7c:
5d:0c:73:40:4c:fb:5a:27:25:a4:dc:6c:5f:2d:8d:
bb:27:f9:35:7f:73:b0:fe:9a:2f:54:79:26:d8:db:
c9:2e:af:79:0d:2a:e5:62:f5:6f:e6:b2:d0:b6:b1:
18:42:86:a2:35:35:5a:91:55:e9:6f:6d:f8:18:e4:
26:c7:8b:2c:b7:30:90:59:5f:b1:74:36:03:6f:f4:
41:ed:ab:34:43:cb:3a:65:11:66:fb:c4:d4:16:fa:
d3:61:72:48:2b:aa:96:da:33:12:11:1a:b9:31:df:
75:88:19:fe:d0:e6:26:b6:f1:c6:79:ae:2c:1d:1b:
69:77:1a:b4:ea:11:fa:b0:7a:ac:36:10:80:cb:fc:
d2:84:16:67:e7:f0:4e:27:2d:a1:fb:cc:f6:d1:77:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:84:AB:BC:87:EF:0C:54:11:C4:95:8F:4D:71:66:C0:BD:05:53
X509v3 Authority Key Identifier:
keyid:C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/YFWEq7yH7wxUEcSVj01xZsC9BVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/yaNv36QcdGnOc9yLvs6UYty4yCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.100.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:51:96:61:4e:df:5a:fa:c5:81:44:88:c5:d9:52:60:29:a1:
a5:c1:16:93:cb:71:7b:90:b7:4d:5e:c7:ac:15:ff:06:87:99:
06:ec:0c:ac:ec:dd:31:46:d7:c6:d9:63:48:04:d6:54:4d:2e:
1c:6c:40:4e:86:b8:57:b1:99:0e:da:d0:25:e5:66:b4:cc:01:
d6:50:66:06:03:6d:4d:d1:7f:a6:1b:e8:fd:f2:9f:c4:fd:d3:
83:57:7a:b5:85:7e:88:73:4c:f3:93:93:50:21:bf:df:7c:b7:
2e:2e:b5:be:cf:47:a8:24:de:3b:af:42:99:d0:81:ae:ca:d9:
03:35:71:89:8e:c0:39:52:db:be:29:80:e1:51:66:27:6f:e8:
79:29:97:eb:79:0d:94:d1:68:5b:14:bd:54:6b:fc:45:c8:c7:
b7:70:72:03:7c:cf:db:b3:fd:d6:53:55:00:40:ce:84:4b:88:
3c:cb:a0:97:ad:4a:4d:79:9f:04:8f:c3:32:01:fb:b1:d7:db:
aa:60:6d:dc:54:ed:a4:61:33:4f:95:e0:2f:a8:c6:05:49:10:
24:c0:18:36:d8:d6:2b:e0:a4:41:9e:4d:b2:8f:24:34:10:af:
6e:30:b8:b7:80:0f:a2:fc:82:37:28:fd:0a:a0:bb:97:2f:ae:
be:b6:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-fra.rpki-client.org