Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/y5YnB8Rl1024Tp-psVAG1OMUkR8.roa
File: y5YnB8Rl1024Tp-psVAG1OMUkR8.roa (raw, json)
Hash identifier: 19kPZlFHI0gZducswQjP/RIk/LwXXoKIwFeSO+zU4cc=
Subject key identifier: CB:96:27:07:C4:65:D7:4D:B8:4E:9F:A9:B1:50:06:D4:E3:14:91:1F
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 018573F17F8EC91BCC9ACF4129816A4E5935
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/y5YnB8Rl1024Tp-psVAG1OMUkR8.roa
Signing time: Mon 02 Jan 2023 19:24:44 +0000
ROA not before: Mon 02 Jan 2023 19:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12502
IP address blocks: 194.55.100.0/23 maxlen: 23
193.96.243.0/24 maxlen: 24
212.71.192.0/19 maxlen: 24
2001:14f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:7f:8e:c9:1b:cc:9a:cf:41:29:81:6a:4e:59:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Jan 2 19:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb962707c465d74db84e9fa9b15006d4e314911f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:07:46:50:19:02:da:ca:3b:20:b5:c5:26:
44:56:f4:62:34:dc:c2:4e:70:d0:2d:cf:e2:bf:f0:
b0:b4:6a:c6:3e:57:91:8e:a4:5a:bb:b2:d7:01:ab:
b5:4c:41:d0:21:ce:5c:de:14:7d:f4:89:f5:3f:20:
b0:14:48:e7:1d:7f:22:f9:44:08:52:d7:92:be:cf:
97:ae:62:82:e2:c0:e0:b1:e3:93:ae:61:c2:12:c9:
01:0b:31:fa:e1:f2:ba:fa:04:f4:10:9a:e0:a1:ae:
02:08:f8:82:26:f4:7d:7e:36:d7:14:3a:9b:ce:e2:
ef:ab:c3:cb:b4:51:5c:09:83:16:4e:64:6c:47:ce:
6f:65:73:af:ab:b8:99:d5:f6:3b:b2:b5:56:5d:e8:
b4:9c:a7:82:55:ee:21:ae:8b:d7:a6:15:38:34:04:
55:50:c1:14:0c:89:55:1c:0e:6a:10:ce:ee:d9:6c:
c3:14:a4:80:b9:c3:23:96:cd:5b:98:c3:61:9f:5f:
5a:a3:e0:3d:28:46:20:c3:a9:bf:02:17:cf:80:1b:
5a:48:10:7a:b2:8c:0b:c9:84:e1:39:46:b3:fe:60:
83:b7:f1:d7:f8:a9:5a:e0:2a:7e:c2:64:e6:78:22:
21:de:5a:eb:f8:ee:de:9d:14:fb:58:81:ff:e4:fc:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:96:27:07:C4:65:D7:4D:B8:4E:9F:A9:B1:50:06:D4:E3:14:91:1F
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/y5YnB8Rl1024Tp-psVAG1OMUkR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.243.0/24
194.55.100.0/23
212.71.192.0/19
IPv6:
2001:14f8::/32
Signature Algorithm: sha256WithRSAEncryption
79:e5:35:9d:4c:7c:36:f9:b1:68:1b:ec:4b:81:be:b6:64:9f:
0d:44:a0:32:7e:a7:36:75:73:de:cb:3d:46:ed:50:53:4e:6d:
49:0b:11:5c:b9:2b:44:eb:6c:67:ca:17:b0:13:ab:38:f6:4d:
e9:a7:96:0d:72:40:8c:88:b9:49:a8:48:4d:3d:0c:92:c4:a8:
5f:3b:a2:21:ca:dc:f5:3e:4c:53:8f:5f:46:56:a5:69:ea:00:
ba:4e:4b:e6:49:cd:2b:3e:5b:a3:bc:a6:75:cf:18:a6:e1:d7:
21:bc:76:91:e0:45:b5:70:93:63:01:10:69:ee:71:2d:d6:de:
eb:03:22:78:60:4c:72:9b:b4:ac:db:a5:26:37:0d:96:36:94:
97:13:30:e9:9d:67:ba:57:59:6e:a8:01:5e:c3:2e:29:52:b1:
4e:14:86:f6:14:99:39:4d:59:f9:c8:a6:bd:79:e8:0c:b5:c8:
4c:cc:1f:71:5f:0f:6e:a6:6f:d5:a5:1f:53:b4:f7:62:2c:65:
96:89:4d:0d:8d:65:78:58:ad:28:9f:7e:60:2c:d5:94:41:ec:
a3:f8:db:84:0e:0c:b7:18:71:66:02:05:a1:df:d5:95:28:72:
9a:6b:77:b1:4d:8f:98:40:ed:62:a7:9d:02:01:4d:d2:1a:fe:
18:98:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:01 2025 by rpki-client