Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ycl5K775T9HSQWshQqWwVNRFue8.roa
File: ycl5K775T9HSQWshQqWwVNRFue8.roa (raw, json)
Hash identifier: XFEP8/d5jfgNlaVlBseoNO9to1d6lQfGTr7ttsuudW0=
Subject key identifier: C9:C9:79:2B:BE:F9:4F:D1:D2:41:6B:21:42:A5:B0:54:D4:45:B9:EF
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018E50A613DB8A28CA4205A1AC8A212673AB
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ycl5K775T9HSQWshQqWwVNRFue8.roa
Signing time: Mon 18 Mar 2024 08:20:45 +0000
ROA not before: Mon 18 Mar 2024 08:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.194.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:a6:13:db:8a:28:ca:42:05:a1:ac:8a:21:26:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Mar 18 08:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9c9792bbef94fd1d2416b2142a5b054d445b9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:6d:09:4f:7f:79:e0:97:4a:67:7f:3d:18:
77:06:d0:d7:b0:1d:a9:66:a8:58:a1:3f:9e:0e:a2:
d4:48:27:f8:ef:3c:34:a4:a3:d6:d4:89:e2:0f:40:
7d:9c:f1:b9:aa:f3:e6:0d:7a:72:bf:c6:9c:3f:83:
dc:0a:7f:14:25:7e:b5:61:a2:69:58:5d:f8:1a:74:
96:32:86:10:48:33:ff:2c:0c:ed:80:71:6e:04:c3:
4c:17:69:91:75:18:8c:51:37:08:b8:9a:65:c7:ea:
ce:90:3c:c1:6e:e4:bd:08:93:40:70:81:17:a3:0d:
e7:92:1f:2d:f9:5b:06:8e:ab:c1:2d:5f:6d:76:68:
31:d2:95:4d:87:3e:04:44:66:08:ad:d8:4a:c7:65:
18:1c:34:82:52:e0:61:57:59:bb:af:f6:fe:e6:6e:
80:8a:09:14:53:08:91:bc:ed:38:23:76:f5:87:9a:
be:40:22:90:ed:2e:55:57:9e:98:5c:47:47:ca:9c:
a8:cb:bd:05:89:68:90:9d:4d:81:0d:27:7b:24:24:
64:e1:92:ab:45:67:31:52:91:86:26:c7:48:79:46:
b9:8d:16:c5:63:e4:72:cb:bd:0a:10:4c:03:75:87:
dc:53:b2:5c:dd:72:b7:16:00:61:2a:f4:60:bf:e4:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:79:2B:BE:F9:4F:D1:D2:41:6B:21:42:A5:B0:54:D4:45:B9:EF
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ycl5K775T9HSQWshQqWwVNRFue8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.206.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:f1:58:40:98:ab:3f:76:b2:c8:13:86:0c:71:29:01:39:02:
48:cf:01:ae:7b:68:85:ab:75:f5:38:b6:06:53:8b:99:48:bc:
29:15:63:2a:65:1c:7a:7c:ac:3a:21:70:89:8d:de:98:30:aa:
c0:05:a3:1a:de:a8:18:e9:1f:d4:59:2e:35:f4:c7:a0:65:fc:
22:da:2e:ec:91:bb:81:26:9a:89:88:8d:f0:0a:c3:77:cb:3d:
4d:02:2e:e6:60:91:1d:cb:3c:b0:5d:f4:3c:31:3d:30:68:7f:
87:2b:9f:29:9c:d4:58:f0:f8:69:7a:05:49:90:8e:43:ac:c3:
26:e3:c2:f1:98:e4:5f:56:18:8d:9e:44:31:a8:ae:a4:26:c9:
ac:36:22:5c:f7:02:7a:5f:ef:4f:6c:0e:1f:0c:c0:f7:fb:fd:
51:98:d8:87:37:28:23:1e:c7:16:7d:84:fd:ea:25:7d:5b:de:
0b:65:54:c2:62:7d:c3:e4:cc:4a:96:ea:6e:62:10:ed:43:97:
2e:be:aa:39:c7:58:89:a4:9a:9f:44:3c:ca:f6:37:e9:52:67:
09:72:3e:12:31:44:bd:1a:20:75:84:03:68:c6:0f:f4:b4:64:
10:17:c4:9e:67:69:70:21:3f:47:78:cf:9f:61:ae:7d:21:9e:
56:1a:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:58 2025 by rpki-client