Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/yH_9FfPgMJKBnp1gOeTvMDsOkSw.roa
File: yH_9FfPgMJKBnp1gOeTvMDsOkSw.roa (raw, json)
Hash identifier: CkOnR4wUbiQ+ILxDCFexv8XL9VmgiYeZz84Ok5+BiJw=
Subject key identifier: C8:7F:FD:15:F3:E0:30:92:81:9E:9D:60:39:E4:EF:30:3B:0E:91:2C
Certificate issuer: /CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
Certificate serial: 0227C401
Authority key identifier: FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/yH_9FfPgMJKBnp1gOeTvMDsOkSw.roa
Signing time: Sat 01 Jan 2022 06:52:49 +0000
ROA not before: Sat 01 Jan 2022 06:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.163.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36160513 (0x227c401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
Validity
Not Before: Jan 1 06:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c87ffd15f3e03092819e9d6039e4ef303b0e912c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:2b:7f:2e:e3:00:2c:8e:bd:7b:42:01:20:
95:69:dd:8c:09:b3:ec:c6:06:c2:69:e0:1b:42:b2:
45:9e:e5:9e:ca:af:1e:6a:c2:48:e3:15:c1:03:28:
30:75:86:c6:1a:22:b5:30:89:b9:6a:1b:12:4d:ee:
27:a8:cb:bc:72:e3:24:b8:bb:ca:c9:c5:fd:cf:96:
0c:21:24:33:68:6e:74:7c:14:b4:83:2f:2c:8e:96:
34:fa:ba:d1:e8:e9:47:8b:b2:86:21:31:99:2c:24:
82:9d:0a:de:80:2e:45:f2:d1:b1:ad:bd:a4:38:b6:
ac:74:db:54:36:33:67:c8:c4:02:bf:c3:45:3d:d1:
fb:e2:53:4d:e2:f5:70:56:1f:8b:88:56:78:1d:71:
1b:08:ef:17:55:cf:5e:52:9c:08:b3:d6:57:89:cc:
6c:8e:2a:ae:c1:10:69:7e:cc:6e:2b:bb:7d:e4:5a:
47:9d:7f:32:46:3f:2c:12:72:55:1d:e6:56:d0:b7:
1a:92:72:62:31:ac:3a:b1:72:89:5d:de:b5:9f:ee:
0e:f8:e2:54:62:e2:b6:66:c6:7d:f3:71:05:78:1b:
50:ea:4a:92:cb:8a:40:b5:af:10:cb:37:0b:f8:e6:
9c:3a:ce:e2:1f:d0:ad:1a:99:9b:33:32:ab:7e:e9:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7F:FD:15:F3:E0:30:92:81:9E:9D:60:39:E4:EF:30:3B:0E:91:2C
X509v3 Authority Key Identifier:
keyid:FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/yH_9FfPgMJKBnp1gOeTvMDsOkSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/_3mX739_Hh2hDlwdmOoxR0ttuxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:41:d1:cd:d2:40:6d:2d:d2:ca:4f:63:ce:d2:f1:92:db:b6:
96:81:2b:02:95:af:46:f3:80:88:7d:21:7a:7b:72:ad:8c:2f:
2d:fa:f2:43:44:6d:9f:be:73:98:ab:8e:f9:4f:e8:5b:5c:cc:
97:96:75:13:93:c3:16:42:43:d5:d0:3f:53:d4:a1:59:61:5a:
a3:5c:3b:80:81:22:e1:e3:e7:44:41:cc:e0:32:ac:e1:a5:d4:
30:5d:7b:45:d0:96:82:62:b7:c0:2e:fd:8d:23:0a:69:73:c7:
b5:0c:7d:dc:4d:4e:a8:a3:51:af:42:36:2e:5a:0c:7c:1d:5f:
f5:c1:e6:7b:bd:3a:aa:00:6c:2f:6f:8a:82:bf:df:9d:45:6a:
fb:bd:ce:7b:d0:11:4c:82:ff:bc:24:f2:96:b9:87:41:a1:5a:
04:6b:b3:57:35:b8:fa:72:6b:aa:da:63:fa:df:ff:bd:7b:36:
1b:c8:61:2b:9b:d8:6c:b5:c9:9b:5e:88:de:91:27:d2:8b:88:
d3:9c:04:22:35:e8:09:8f:11:7b:07:7f:e9:70:45:d9:41:d6:
24:48:e5:6a:d0:90:ec:04:c0:cb:36:88:90:1c:61:c4:63:bb:
75:da:95:dd:10:72:84:42:a1:43:a5:7d:17:e3:15:17:bd:a8:
47:c9:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:05 2023 by rpki-client on console-fra.rpki-client.org