Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/yHO8G0MjuGul1zj3LepA1yL-J6c.roa
File: yHO8G0MjuGul1zj3LepA1yL-J6c.roa (raw, json)
Hash identifier: h2kEEeYDEVKd1XR7KhU1BDmiisSZqc3lfs1amJQ6uWE=
Subject key identifier: C8:73:BC:1B:43:23:B8:6B:A5:D7:38:F7:2D:EA:40:D7:22:FE:27:A7
Certificate issuer: /CN=3b3fff71e59f35063f809fc5eb3af4c419f7bf33
Certificate serial: 018570428907886165E99019FA3339C92C80
Authority key identifier: 3B:3F:FF:71:E5:9F:35:06:3F:80:9F:C5:EB:3A:F4:C4:19:F7:BF:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/yHO8G0MjuGul1zj3LepA1yL-J6c.roa
Signing time: Mon 02 Jan 2023 02:14:46 +0000
ROA not before: Mon 02 Jan 2023 02:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.137.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:89:07:88:61:65:e9:90:19:fa:33:39:c9:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3fff71e59f35063f809fc5eb3af4c419f7bf33
Validity
Not Before: Jan 2 02:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c873bc1b4323b86ba5d738f72dea40d722fe27a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:2f:25:ff:4c:fa:0a:5a:d9:6c:fa:e0:ea:
95:ca:29:07:fe:48:73:11:ca:12:2c:7c:7b:e2:d4:
c9:19:a1:b7:ab:36:13:63:4a:01:ff:53:93:a4:4e:
54:23:ed:fc:f2:2d:49:87:a1:57:1c:8d:e8:9c:86:
93:9f:bd:fd:8c:c9:cf:a6:90:ae:4d:59:89:71:61:
dd:c7:93:bd:4a:7b:c8:28:d2:1c:70:82:a7:49:f3:
a4:59:2a:06:3f:ee:b3:a7:8f:ae:9a:07:7e:be:34:
ab:3d:24:dc:e1:d3:7a:c9:db:74:96:bf:9c:ab:1a:
f0:60:99:fd:e6:f3:80:79:a5:d6:42:fa:93:9d:3d:
6b:27:d7:b0:c8:19:a8:c1:c3:09:f4:da:6b:c2:dd:
6b:7a:b2:0f:7c:f9:45:7e:65:db:2c:1e:26:cb:9d:
7f:e5:9b:ad:ce:d6:26:c2:24:dd:a6:5c:22:6c:4a:
44:76:2b:5d:6b:45:a0:8b:20:cf:ea:73:16:a5:65:
af:34:87:3b:6e:3f:e5:97:7a:1e:3f:9b:7d:31:95:
89:44:7f:7f:a9:59:d8:30:a2:fe:ef:1a:25:25:4e:
ef:5d:c1:fc:9c:5c:3d:65:f3:84:d8:3c:bf:de:8e:
9b:cc:73:62:1e:6e:16:4d:13:36:eb:ad:ba:ed:95:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:BC:1B:43:23:B8:6B:A5:D7:38:F7:2D:EA:40:D7:22:FE:27:A7
X509v3 Authority Key Identifier:
keyid:3B:3F:FF:71:E5:9F:35:06:3F:80:9F:C5:EB:3A:F4:C4:19:F7:BF:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/yHO8G0MjuGul1zj3LepA1yL-J6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.164.0/24
Signature Algorithm: sha256WithRSAEncryption
67:13:18:1d:6c:17:7b:57:eb:77:d9:14:8d:ff:f9:48:ad:26:
3c:85:97:06:48:36:86:a1:51:52:9d:5e:56:9f:72:5d:fc:6a:
d4:de:c3:d8:e0:01:d9:bf:1d:47:e1:41:1b:35:f5:b7:d2:97:
cc:77:54:76:38:b9:fa:23:66:3f:3f:ef:35:5d:68:af:a6:4e:
d1:0e:f3:cd:4a:d0:2b:6f:ad:5c:42:28:57:58:1c:ae:d6:a7:
43:9d:d1:ec:20:0a:ce:db:bb:59:ba:06:7b:c6:30:06:c4:f4:
1a:17:9d:8d:ac:f0:ab:6a:ba:6b:14:6a:c9:e8:89:ec:e5:8b:
be:ae:aa:7e:a3:fa:ea:48:e4:46:e7:4a:55:23:58:b1:7e:71:
39:03:86:b8:fa:de:b5:92:58:d9:17:d0:a0:66:8e:80:43:54:
35:51:68:19:68:66:a8:3e:80:a9:bf:4e:95:ef:87:5a:01:19:
58:f9:8d:12:16:92:6d:f8:4c:9b:05:1e:85:15:31:3e:71:98:
e9:7f:18:a2:6b:ee:24:97:51:09:23:6f:1b:16:1c:f3:33:fb:
36:2c:6e:66:bc:af:b1:fc:93:34:c3:a4:ae:6e:c9:28:8c:02:
ff:0f:79:11:1d:08:aa:ea:c3:0c:33:01:e5:74:53:55:4a:cb:
31:72:64:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:35 2023 by rpki-client on console-ams.rpki-client.org