Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/71eeb3-4482-43c2-a99d-09349383f222/1/KYyZDj6TaTXZIhMMALMnxh8D54M.roa
File: KYyZDj6TaTXZIhMMALMnxh8D54M.roa (raw, json)
Hash identifier: jFLLODzutAGp/k9K1fpnrcmdQtUNft0UwfO3fYKOfjA=
Subject key identifier: 29:8C:99:0E:3E:93:69:35:D9:22:13:0C:00:B3:27:C6:1F:03:E7:83
Certificate issuer: /CN=e44f62f836e56a94737c7e030eff36e3b3e052ba
Certificate serial: 01857227E8679AFD9B4308DB3F6F041D5503
Authority key identifier: E4:4F:62:F8:36:E5:6A:94:73:7C:7E:03:0E:FF:36:E3:B3:E0:52:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5E9i-DblapRzfH4DDv8247PgUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/71eeb3-4482-43c2-a99d-09349383f222/1/KYyZDj6TaTXZIhMMALMnxh8D54M.roa
Signing time: Mon 02 Jan 2023 11:04:56 +0000
ROA not before: Mon 02 Jan 2023 11:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 185.226.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e8:67:9a:fd:9b:43:08:db:3f:6f:04:1d:55:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e44f62f836e56a94737c7e030eff36e3b3e052ba
Validity
Not Before: Jan 2 11:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=298c990e3e936935d922130c00b327c61f03e783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:fc:ca:3b:22:10:90:b9:71:fa:fb:e8:28:
cf:e1:f1:f5:42:10:de:a5:d0:83:41:2c:63:6d:d7:
c0:b7:92:ea:cc:fa:b8:c5:c1:af:03:02:51:8a:7b:
5d:05:f3:57:f4:1a:47:45:71:bf:66:2a:37:59:fe:
a9:cf:cc:3b:4b:5c:0f:97:fb:05:ee:6f:19:a0:6d:
4f:df:35:0a:d4:c3:fb:c6:5f:a9:1f:95:96:95:6e:
05:91:8e:82:da:d4:92:5e:e6:a5:17:14:7f:e2:80:
4e:5b:52:50:f4:73:6b:fe:b6:97:85:ac:b9:11:4d:
a8:63:85:a7:09:9e:07:5b:8c:e8:47:00:56:e8:4b:
d7:fd:25:c4:6e:e3:fb:9f:89:85:b2:86:86:31:40:
fb:83:23:d9:e0:d6:c0:2e:b6:19:1b:83:dd:84:a6:
5e:00:83:3d:99:af:91:3a:3d:e1:9a:57:8b:d7:54:
aa:79:48:1a:f4:1d:9b:6e:80:5d:47:13:41:69:31:
7b:ef:99:e7:34:51:87:ac:3d:d3:25:ef:c4:69:c2:
6d:92:ed:c0:d8:80:51:3b:fe:29:8c:d0:70:6f:d7:
9d:b3:b6:f1:56:40:80:0e:4a:6a:42:20:43:42:40:
3b:09:73:17:48:c1:62:fa:d6:1d:67:b1:5a:52:d4:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8C:99:0E:3E:93:69:35:D9:22:13:0C:00:B3:27:C6:1F:03:E7:83
X509v3 Authority Key Identifier:
keyid:E4:4F:62:F8:36:E5:6A:94:73:7C:7E:03:0E:FF:36:E3:B3:E0:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5E9i-DblapRzfH4DDv8247PgUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/71eeb3-4482-43c2-a99d-09349383f222/1/KYyZDj6TaTXZIhMMALMnxh8D54M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/71eeb3-4482-43c2-a99d-09349383f222/1/5E9i-DblapRzfH4DDv8247PgUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.242.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f2:6f:42:ca:87:48:2f:a2:6c:64:be:3d:90:36:3d:d4:47:
59:9d:cf:59:8c:25:6d:b1:fb:e2:16:ab:96:f2:90:50:dc:18:
01:02:7a:71:3e:1e:af:48:f9:4b:f3:fc:0b:13:88:de:6d:27:
1a:fc:c9:4f:bd:a4:5c:45:99:45:cd:d2:c8:a6:83:ab:83:3b:
e6:ca:38:22:ec:51:c3:ad:0d:98:cf:ea:cd:55:a2:72:55:31:
a2:e7:07:12:cc:f9:86:5f:ca:b1:b3:14:3e:a0:24:31:85:dd:
15:de:ac:83:f3:2d:e9:f1:7e:78:b5:19:c1:59:34:24:4b:0b:
99:ec:79:bd:c7:d9:c2:a5:88:58:c2:11:c9:71:bd:75:19:c1:
be:a3:f1:b1:ff:37:7c:06:2a:ac:6c:23:41:13:95:3c:1d:9c:
ba:4e:df:18:3e:39:34:41:b8:9a:24:78:b8:dc:e2:c3:15:61:
e4:f9:57:2d:98:8f:fa:a6:91:0c:31:48:a3:6e:b4:74:96:17:
95:7c:39:0c:c1:35:41:36:82:1d:56:5e:20:b0:26:fc:2f:c4:
db:66:c4:8a:5c:f0:38:55:57:88:98:a7:3d:36:c9:c2:91:e4:
24:cf:87:fe:fb:61:86:b2:8b:6e:4c:a8:d2:db:70:a8:01:89:
04:0a:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:46 2025 by rpki-client