Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/yzuKCsRbsf0EXzepOqRJWqXFRBE.roa
File: yzuKCsRbsf0EXzepOqRJWqXFRBE.roa (raw, json)
Hash identifier: WLToO/D4aoCfLdmRRMRiHzpeYEnGwbzm5pco+m+YgOQ=
Subject key identifier: CB:3B:8A:0A:C4:5B:B1:FD:04:5F:37:A9:3A:A4:49:5A:A5:C5:44:11
Certificate issuer: /CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
Certificate serial: 018572C37396C15DB4C16E65D9AE2FF5F2BE
Authority key identifier: CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/yzuKCsRbsf0EXzepOqRJWqXFRBE.roa
Signing time: Mon 02 Jan 2023 13:54:49 +0000
ROA not before: Mon 02 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.57.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:73:96:c1:5d:b4:c1:6e:65:d9:ae:2f:f5:f2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
Validity
Not Before: Jan 2 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb3b8a0ac45bb1fd045f37a93aa4495aa5c54411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:c3:48:4c:2f:2c:99:8a:27:48:ae:ec:66:
d0:4a:f2:33:20:cf:27:50:f9:05:5f:c2:2e:9f:a9:
e7:8a:64:a0:93:34:8e:19:77:46:eb:1a:35:09:56:
7a:92:01:53:d7:7e:42:af:55:50:18:ed:47:4e:c9:
bf:36:9e:bc:98:45:8b:5a:68:b3:26:c7:51:87:4a:
c8:6b:bb:51:1e:9e:0b:e3:a2:e9:7f:69:83:18:33:
72:56:4a:16:ef:c6:a2:69:76:75:9a:14:5d:ca:32:
cf:62:c1:1a:47:f7:83:9e:6b:54:5d:04:5b:74:0b:
fb:e4:ea:4a:9e:a1:3f:3f:79:e4:be:d8:88:cd:ba:
0d:31:93:8b:7f:95:da:f2:e8:f3:37:02:e9:17:aa:
70:0e:01:81:8a:57:84:90:12:2b:15:bc:80:7d:50:
11:61:5d:c2:62:2f:5b:55:52:16:d4:10:38:4d:68:
a4:8a:ee:f7:71:d8:12:eb:f6:56:c2:c6:c9:b6:26:
96:ee:43:7b:1a:92:b5:4f:d2:8f:75:74:e2:91:fc:
08:6b:1c:ec:f6:b3:19:81:36:72:66:26:53:38:7e:
34:c1:88:93:c2:1b:10:84:ba:de:d8:eb:9f:ae:27:
2b:0b:f7:52:c7:bb:b5:cd:bc:cf:f1:79:16:a9:07:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:8A:0A:C4:5B:B1:FD:04:5F:37:A9:3A:A4:49:5A:A5:C5:44:11
X509v3 Authority Key Identifier:
keyid:CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/yzuKCsRbsf0EXzepOqRJWqXFRBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.166.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ce:c4:54:a3:0c:81:74:ee:53:0c:3b:25:72:69:af:8e:b6:
1c:1f:e3:01:49:54:9b:eb:ab:24:38:c2:d2:98:e8:7e:3c:33:
81:c7:0a:85:88:f5:0e:59:d8:60:10:17:f8:e8:98:40:81:37:
4a:f6:6c:af:b8:62:35:f3:f4:77:e5:46:43:dd:a5:3a:ed:ab:
57:0b:fd:51:4c:91:85:2c:77:f4:f6:6a:cf:41:3e:09:86:51:
74:c5:61:dd:43:2c:30:df:83:b0:d9:ab:1c:05:a3:e5:7e:76:
f8:3d:bb:fa:7a:8b:55:97:24:80:a3:10:99:bd:a6:6e:1f:96:
f6:98:b0:d2:85:aa:5b:67:4b:71:a8:7a:e8:6c:1b:e5:c7:4d:
a1:58:86:4c:f9:c0:c1:8e:aa:c2:a7:ff:a9:10:5f:64:6b:a0:
3f:8d:6f:32:a7:28:bb:60:b7:f2:79:2d:d9:2d:bb:29:81:5c:
63:11:08:87:c4:f8:7e:b9:c5:11:81:0c:b1:1c:ff:2e:44:ca:
7d:c0:e1:15:cb:49:10:e0:05:d4:e5:87:4f:d7:0d:bf:13:4f:
24:2e:5d:3c:c3:78:a3:b0:75:a1:9f:07:81:36:d6:d0:50:cc:
5d:18:1a:46:21:97:61:77:73:1c:bc:8d:87:f2:7a:99:d3:42:
8e:c8:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org