Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/Yyh-_Ntj6RI7hHlkJlMkXhCPMFw.roa
File: Yyh-_Ntj6RI7hHlkJlMkXhCPMFw.roa (raw, json)
Hash identifier: 7KSqOdOYTMAH14Cu58dfzaqlUgz8o/ogY/GfRVuj+TY=
Subject key identifier: 63:28:7E:FC:DB:63:E9:12:3B:84:79:64:26:53:24:5E:10:8F:30:5C
Certificate issuer: /CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Certificate serial: 528BE4
Authority key identifier: 71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/Yyh-_Ntj6RI7hHlkJlMkXhCPMFw.roa
Signing time: Thu 20 Jan 2022 12:04:43 +0000
ROA not before: Thu 20 Jan 2022 12:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 147.78.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5409764 (0x528be4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Validity
Not Before: Jan 20 12:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63287efcdb63e9123b8479642653245e108f305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:8c:88:a4:77:f7:ea:ff:68:2d:66:b9:4f:
dd:62:ab:6a:21:d7:46:e3:a4:8a:62:27:59:ee:86:
31:2a:83:66:39:6c:d6:d1:36:a8:b6:b8:2a:06:98:
6d:ad:3c:69:f6:ac:0c:4c:5e:59:a0:5f:20:00:b6:
21:0f:18:44:f7:e8:87:46:39:82:34:ba:05:0c:f7:
26:67:2e:72:99:36:a6:d2:d7:d8:b0:d4:cd:63:6e:
a8:66:fb:69:7e:40:06:27:86:19:f7:c8:f3:da:39:
99:05:cc:44:19:1e:de:fd:7c:0e:18:5d:66:3f:16:
53:9f:f3:d9:61:9d:c7:74:c1:35:90:ac:55:d4:9f:
8b:5d:a5:3c:bd:24:43:c9:a2:71:3f:d8:62:60:b4:
85:28:be:17:d1:48:b4:5e:3d:7f:f6:21:a3:0c:02:
96:6d:8c:dd:2c:8e:7d:00:e8:84:c7:31:18:f0:b1:
98:15:1a:7c:42:da:81:d3:a0:c5:e8:7f:be:34:de:
d4:69:c0:a5:f8:31:f1:71:db:ed:7b:3e:56:38:26:
30:5b:b7:d1:e5:0a:3e:19:c8:eb:2b:6e:47:81:1f:
e0:93:ef:bf:9f:b6:f2:04:52:67:05:a6:8c:ce:95:
77:30:52:29:4a:1b:18:6f:cd:54:c7:e4:7d:e3:e9:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:28:7E:FC:DB:63:E9:12:3B:84:79:64:26:53:24:5E:10:8F:30:5C
X509v3 Authority Key Identifier:
keyid:71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/Yyh-_Ntj6RI7hHlkJlMkXhCPMFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/cfbPBG3ABgzFPzmpT2JVfvAKiZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.100.0/22
Signature Algorithm: sha256WithRSAEncryption
22:04:f5:9b:ae:44:b7:fb:75:69:f4:ba:09:01:d9:5d:e2:aa:
03:d9:1e:b8:f1:bc:42:c1:06:a3:dd:0e:1d:e6:98:70:44:cb:
7a:ea:be:63:65:32:3d:a8:30:bb:16:b2:7c:d6:39:70:0b:a4:
3a:0a:5c:01:a4:48:a9:e5:df:86:32:f1:4b:83:f3:24:32:08:
39:fb:2a:16:e6:af:3a:e2:7f:4f:9f:36:f0:42:a1:a7:09:f9:
99:6e:4b:34:67:d5:eb:74:84:34:62:0e:f8:25:77:9f:de:d7:
76:d1:c2:1c:e5:dc:ec:6e:61:1f:ed:b4:92:c1:96:9c:71:2b:
4f:44:39:6a:67:fd:91:00:7d:fa:5e:c5:9c:c6:74:0a:50:9e:
0c:2a:21:66:95:f3:3f:45:18:c0:79:f4:8b:bd:bf:e6:56:65:
c5:dd:75:6a:b0:6b:66:d6:ae:87:77:d2:fb:e6:a7:77:5a:1a:
4f:78:8b:be:21:4f:da:80:ae:00:37:9a:56:40:c0:99:bc:04:
ae:cb:88:dc:82:73:14:d7:b9:63:f2:48:38:e3:9b:6c:76:6c:
8c:56:40:c7:92:fb:76:e7:a2:30:69:4f:25:f0:ed:ba:ae:f0:
36:77:56:7c:39:39:4e:ef:88:97:78:eb:23:c0:2d:6c:2f:1d:
58:89:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:52 2024 by rpki-client on console-ams.rpki-client.org