Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/yl65_yG8PI8B0mzgROgHxn61CbI.roa
File: yl65_yG8PI8B0mzgROgHxn61CbI.roa (raw, json)
Hash identifier: T/mRR7yARNHyxolF34M1UU2binRzYljT50NFVhgTuek=
Subject key identifier: CA:5E:B9:FF:21:BC:3C:8F:01:D2:6C:E0:44:E8:07:C6:7E:B5:09:B2
Certificate issuer: /CN=ac89582220b58417a3a9459f55c5b947cc357c25
Certificate serial: 32E0D65E
Authority key identifier: AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/yl65_yG8PI8B0mzgROgHxn61CbI.roa
Signing time: Sat 01 Jan 2022 13:58:44 +0000
ROA not before: Sat 01 Jan 2022 13:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197190
IP address blocks: 80.243.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853595742 (0x32e0d65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89582220b58417a3a9459f55c5b947cc357c25
Validity
Not Before: Jan 1 13:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca5eb9ff21bc3c8f01d26ce044e807c67eb509b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:f3:ff:64:50:11:a5:e1:f4:3f:e0:b7:19:
90:2a:07:64:d4:92:8f:f7:45:d5:91:43:6a:dc:d7:
c7:75:05:46:b4:7b:40:8f:4e:03:14:17:6e:98:a3:
a3:40:1b:86:ae:fe:10:34:dc:6c:1f:79:31:a3:7c:
6d:24:54:0f:83:82:87:e5:6b:5a:9e:ac:f4:f9:9b:
7b:41:20:37:4c:fc:ec:c0:d1:f3:bb:3b:09:30:c8:
3f:05:4e:70:f2:b4:e1:ea:5e:9e:e5:ca:b9:f1:e0:
86:15:0e:24:e6:1a:cb:ee:f2:3c:15:fd:c9:48:ef:
c2:c8:7e:82:69:1e:15:c4:d8:f6:45:e0:e5:42:b6:
42:ed:3c:2e:db:0f:da:c1:34:5d:33:51:84:34:d6:
19:de:c0:3d:c4:5d:c8:64:b7:af:13:d4:cd:a1:84:
bc:22:fa:96:69:71:60:f2:ad:09:ed:81:36:27:05:
59:6c:43:81:c4:90:e6:41:8c:3a:81:61:d3:9a:5e:
31:bc:f8:16:6c:4a:34:25:d5:45:56:58:cf:a3:1d:
59:69:41:df:cd:83:59:11:80:d2:d0:69:2f:7d:b3:
97:b3:5e:f0:ca:22:9d:a7:73:71:f8:6f:13:ed:af:
96:32:53:ff:45:5f:cc:50:44:d5:67:86:a7:8b:81:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5E:B9:FF:21:BC:3C:8F:01:D2:6C:E0:44:E8:07:C6:7E:B5:09:B2
X509v3 Authority Key Identifier:
keyid:AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/yl65_yG8PI8B0mzgROgHxn61CbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.118.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:36:66:f8:d4:e7:51:97:ae:c1:a7:dc:fe:71:1a:c6:30:1b:
3b:f8:c9:9d:17:b4:6a:80:56:90:bd:09:16:62:e6:91:f8:05:
dc:4d:d4:1c:bf:50:d3:11:50:20:98:8b:28:9f:82:6c:52:cd:
7b:04:20:e2:84:83:5b:89:57:9e:28:c9:cd:12:50:4f:78:29:
07:65:50:2d:55:be:c4:a8:a2:df:15:3d:d4:f8:37:45:36:ff:
3e:ef:75:91:f8:c1:82:65:23:c2:6a:6c:6e:4a:fe:82:db:4b:
a3:0b:5b:15:a4:a1:ea:d9:b9:8a:e9:7d:6f:e9:eb:79:d9:9d:
44:8c:5b:42:7a:8e:35:a9:a5:89:35:06:0d:2b:a7:e8:a7:d3:
7b:a0:60:64:56:2c:16:8a:99:f2:7b:63:25:6d:f2:12:2b:29:
f5:7d:f0:d2:ba:88:31:8e:7f:d0:00:40:8f:2d:3f:03:c1:f6:
ca:7b:42:c8:c5:b8:03:b9:52:01:85:af:95:f1:4f:a5:90:7d:
9d:23:8b:6b:09:f5:0e:89:4c:78:1b:aa:b7:15:8e:99:11:c5:
cf:37:87:31:72:c1:b2:e7:c4:35:54:81:79:1e:29:af:4a:8c:
4f:dd:a9:36:9f:70:06:8a:b6:52:d3:8e:24:a2:d3:59:38:4c:
42:fa:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:24 2024 by rpki-client on console-ams.rpki-client.org