Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/yNd0ffShqgA3gWe8cB620KXY--o.roa
File: yNd0ffShqgA3gWe8cB620KXY--o.roa (raw, json)
Hash identifier: jxFAiMRCggXvZNuwKjVs//dDMVm77IxsaQQFW8dSFF4=
Subject key identifier: C8:D7:74:7D:F4:A1:AA:00:37:81:67:BC:70:1E:B6:D0:A5:D8:FB:EA
Certificate issuer: /CN=0529e4de4bc11fed9101a50824aaa4e2638aba6a
Certificate serial: 01856F94AC45696BECD88E6A3FFB8028DD23
Authority key identifier: 05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSnk3kvBH-2RAaUIJKqk4mOKumo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/yNd0ffShqgA3gWe8cB620KXY--o.roa
Signing time: Sun 01 Jan 2023 23:04:52 +0000
ROA not before: Sun 01 Jan 2023 23:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211261
IP address blocks: 185.146.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:ac:45:69:6b:ec:d8:8e:6a:3f:fb:80:28:dd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0529e4de4bc11fed9101a50824aaa4e2638aba6a
Validity
Not Before: Jan 1 23:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8d7747df4a1aa00378167bc701eb6d0a5d8fbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:37:31:69:dc:b9:d9:8b:e2:8f:97:88:dd:
6c:4e:fa:54:bd:9a:cf:0e:57:c0:32:ba:27:73:d6:
4b:5e:09:17:3a:17:49:f7:2f:39:d1:0f:7c:89:1d:
73:2f:ad:da:f2:60:36:ee:74:70:49:81:0d:d3:1a:
f3:4f:42:18:a4:d3:7c:88:55:7b:48:55:22:c5:11:
8d:2f:3c:6a:56:cf:76:40:bd:20:7d:41:75:e5:67:
f1:b3:72:99:87:9f:b6:15:81:36:4d:6b:70:0e:aa:
ad:fb:b9:a5:e9:a2:4a:a6:32:4d:20:c3:0d:47:5b:
dd:f7:cc:56:6f:d9:33:26:6f:5e:a2:19:54:10:c2:
63:1e:03:c0:73:2b:7c:4f:81:e2:7e:51:fe:1b:3c:
a2:be:cb:88:e9:de:b4:5d:bc:f9:96:f6:d3:3a:ba:
d0:d3:9b:33:7f:e7:47:26:07:3d:1c:99:1b:ba:26:
82:f6:f1:0f:84:02:d4:83:16:c7:e6:d9:1b:4a:da:
d3:0c:33:26:2a:1a:8c:e9:cb:1a:72:19:d9:c1:8d:
4e:f6:f3:5e:70:77:9b:11:1a:39:24:2c:a0:52:f5:
d1:7f:81:2e:46:71:69:f8:08:44:b9:51:e3:dd:1e:
ac:f1:35:7a:79:3f:60:7d:c4:af:32:76:c4:97:ea:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:74:7D:F4:A1:AA:00:37:81:67:BC:70:1E:B6:D0:A5:D8:FB:EA
X509v3 Authority Key Identifier:
keyid:05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSnk3kvBH-2RAaUIJKqk4mOKumo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/yNd0ffShqgA3gWe8cB620KXY--o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/BSnk3kvBH-2RAaUIJKqk4mOKumo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.67.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:08:b7:62:e6:2e:a3:07:9f:35:d7:bc:73:e5:61:53:7e:43:
1a:02:da:d2:ba:9c:0f:63:8b:bd:12:b0:ad:5d:4d:c9:1b:95:
3c:30:c3:2e:d0:19:3c:3d:93:ca:59:f5:47:5a:a7:bc:f1:32:
d2:a9:c2:e5:6d:db:b9:d3:e5:fc:74:58:f5:45:ab:dc:d4:eb:
57:28:12:2b:b6:e1:e8:d1:38:86:6d:85:d2:3e:73:32:0f:aa:
d1:3e:44:e6:79:83:b1:b2:bb:0a:1c:3f:01:80:3f:20:4c:01:
79:34:c3:58:b5:a0:32:1b:0d:11:93:63:18:5b:e2:e7:f8:b7:
f9:09:74:a0:02:3d:cc:c8:48:83:ac:75:28:f6:ff:0e:f2:9e:
73:df:b7:0b:7d:2b:eb:ae:a8:b5:c2:2a:5a:e5:01:25:1f:16:
c8:f2:74:29:6f:ea:6d:5a:42:18:75:8e:39:54:70:e5:8c:47:
19:65:6f:92:fa:e3:d0:7b:4c:40:da:96:9c:d4:fc:c5:4c:42:
0c:0a:1d:53:66:be:bd:bc:36:44:94:93:57:e0:e9:8a:0d:12:
20:f6:54:96:6a:12:40:db:89:58:b5:43:76:c1:8c:9c:87:24:
c3:cf:cc:63:4e:5c:10:f3:db:7e:63:62:c0:06:75:c3:0f:0f:
e7:93:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org