Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/yahhWPPLgAtiEKcYQM7kSQEU_1U.roa
File: yahhWPPLgAtiEKcYQM7kSQEU_1U.roa (raw, json)
Hash identifier: 4VHF9zEF5vSMlHHW+SvBQuyvEF5dZZV7bXlltXAbfXc=
Subject key identifier: C9:A8:61:58:F3:CB:80:0B:62:10:A7:18:40:CE:E4:49:01:14:FF:55
Certificate issuer: /CN=44feb89c6c725df1e9f1497d2307f86926b70f11
Certificate serial: 02E7685F
Authority key identifier: 44:FE:B8:9C:6C:72:5D:F1:E9:F1:49:7D:23:07:F8:69:26:B7:0F:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/yahhWPPLgAtiEKcYQM7kSQEU_1U.roa
Signing time: Sat 01 Jan 2022 11:02:47 +0000
ROA not before: Sat 01 Jan 2022 11:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62423
IP address blocks: 93.159.232.0/21 maxlen: 21
185.36.60.0/22 maxlen: 22
185.165.160.0/22 maxlen: 22
2a00:ebe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48719967 (0x2e7685f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44feb89c6c725df1e9f1497d2307f86926b70f11
Validity
Not Before: Jan 1 11:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9a86158f3cb800b6210a71840cee4490114ff55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:2e:75:32:56:4d:da:89:42:f9:9a:33:93:
0c:e1:72:e0:32:08:75:54:4f:bd:61:3e:3a:df:2b:
d7:5d:0e:b9:b6:88:da:f1:db:98:97:a2:a7:d2:87:
f2:6b:be:d6:06:69:3b:9f:c4:42:1f:af:ea:b2:ac:
d5:5f:f6:29:2c:fb:71:ab:00:3b:d3:16:1b:6c:fc:
74:b9:e7:fd:f9:a5:06:46:85:49:e2:b8:8d:0c:3a:
a7:0e:42:62:6b:97:7f:4f:ff:44:e6:5c:89:d0:c2:
4a:19:15:ca:c1:a4:72:a8:cc:89:e8:ac:16:b4:68:
4a:ce:5e:a3:2b:62:86:a6:ce:31:91:82:97:d3:77:
dc:8f:99:0f:9f:a6:78:83:73:f9:33:62:13:83:58:
86:db:78:33:6c:a3:22:c9:3b:e1:c8:2c:38:9b:d8:
e3:38:62:e6:a4:20:eb:fb:be:4f:da:fe:06:55:88:
2d:8e:f2:15:c6:c7:8c:2f:1d:0f:ff:09:2e:7e:3d:
38:e9:a4:38:db:e7:bf:43:23:9a:11:69:0f:ce:af:
bc:26:4a:86:e6:b5:ea:88:31:8d:8b:d8:be:31:f3:
d1:f1:8a:ad:d6:40:5a:ba:86:5e:2d:06:0f:97:59:
6b:4b:16:41:7b:14:7a:48:95:b3:56:a6:d1:6f:c8:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A8:61:58:F3:CB:80:0B:62:10:A7:18:40:CE:E4:49:01:14:FF:55
X509v3 Authority Key Identifier:
keyid:44:FE:B8:9C:6C:72:5D:F1:E9:F1:49:7D:23:07:F8:69:26:B7:0F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/yahhWPPLgAtiEKcYQM7kSQEU_1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.232.0/21
185.36.60.0/22
185.165.160.0/22
IPv6:
2a00:ebe0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:8a:f8:ec:db:d7:98:57:56:91:cc:0a:bf:42:3d:21:93:dd:
71:64:0b:ae:3f:45:22:8c:35:da:a9:f9:86:e6:cb:3b:52:11:
11:a0:26:bd:f2:b0:20:c3:a5:5a:5c:4f:09:69:63:2c:9e:67:
f1:99:7e:10:d2:5f:3e:e2:1d:62:80:45:c8:37:e3:33:d7:e5:
e5:3e:8d:fb:e8:a4:59:0c:4d:ef:4a:b6:41:c4:c8:4c:ea:49:
07:48:50:5f:b9:f8:0b:67:f1:bd:b9:11:f3:24:d4:bb:77:6c:
41:04:89:6a:4f:e7:fd:30:c0:53:df:40:4e:bd:24:63:ab:ba:
d7:3a:fa:4a:57:59:5b:c1:ee:45:56:53:97:47:fa:23:ee:45:
1a:fa:4e:c0:88:96:50:d7:17:33:e6:42:3f:b6:e1:6e:71:78:
9f:7f:06:ce:74:29:54:fc:56:97:e4:6c:a4:9d:31:f9:9c:cb:
1f:55:40:b9:f2:c4:1a:9e:9e:af:bf:01:67:cf:ad:ff:bb:83:
bd:55:2f:89:58:95:94:e3:a3:61:52:5e:a2:0d:e8:2c:94:e4:
94:06:bb:67:bc:cf:3a:ba:1c:f2:69:e5:7b:cb:6b:b9:94:c8:
eb:53:58:d7:3d:03:2c:f1:eb:01:7a:da:0f:6f:85:d8:d8:80:
4d:d5:d5:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:33 2024 by rpki-client on console-fra.rpki-client.org