Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/yvAAj-3ONavQkOgPRWSMODgB4Do.roa
File: yvAAj-3ONavQkOgPRWSMODgB4Do.roa (raw, json)
Hash identifier: ZDOQ9OG8XJajPeLHdg2kiSzoc5Xx25kJoAHFdqTMKsA=
Subject key identifier: CA:F0:00:8F:ED:CE:35:AB:D0:90:E8:0F:45:64:8C:38:38:01:E0:3A
Certificate issuer: /CN=2b3840b5d3c3525981c8616166679de920e350f5
Certificate serial: 01856EC20EF739D64FF321DD701BC1B15BDF
Authority key identifier: 2B:38:40:B5:D3:C3:52:59:81:C8:61:61:66:67:9D:E9:20:E3:50:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzhAtdPDUlmByGFhZmed6SDjUPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/yvAAj-3ONavQkOgPRWSMODgB4Do.roa
Signing time: Sun 01 Jan 2023 19:14:49 +0000
ROA not before: Sun 01 Jan 2023 19:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212376
IP address blocks: 185.184.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:0e:f7:39:d6:4f:f3:21:dd:70:1b:c1:b1:5b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3840b5d3c3525981c8616166679de920e350f5
Validity
Not Before: Jan 1 19:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caf0008fedce35abd090e80f45648c383801e03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5e:1a:a4:e0:68:25:02:5e:3f:36:48:03:eb:
72:ef:ae:c7:cf:a1:67:ea:70:73:72:23:ca:f6:f9:
4a:c1:07:b1:c8:25:78:86:a7:22:9c:49:b2:4b:d7:
12:00:61:d2:70:85:60:ec:12:95:1e:b3:52:d9:66:
40:75:22:30:35:d6:e0:e6:8d:22:fa:be:94:10:fa:
eb:0f:d3:0f:f6:ab:57:e7:a0:a4:94:34:f6:ad:af:
31:f6:2f:48:33:c6:d3:b8:ca:e4:c4:86:2b:91:1c:
27:d4:3d:e2:5e:b3:43:52:3b:c5:bf:a8:f4:eb:e6:
ec:9d:f1:a0:96:85:2c:af:e4:27:93:bd:cf:aa:88:
10:89:2f:5c:ae:f7:80:af:64:0a:b9:1a:b1:c0:c8:
58:d0:e4:39:9e:cf:d6:f6:65:09:96:f8:82:a6:99:
15:b6:31:7b:01:4a:08:9a:d0:22:8b:02:c3:a8:d8:
7b:62:b1:09:6b:a0:53:7e:2c:33:3e:cd:53:f4:41:
2a:1a:ff:bc:a9:fb:99:b9:86:16:14:ee:4c:17:60:
36:91:40:05:c2:ec:ac:b3:6d:98:a0:cf:cb:bc:c1:
cf:01:a8:0b:0f:84:4e:33:59:58:35:c9:6e:74:ce:
02:62:19:67:a8:63:18:d3:3a:c3:7a:0c:6e:73:59:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F0:00:8F:ED:CE:35:AB:D0:90:E8:0F:45:64:8C:38:38:01:E0:3A
X509v3 Authority Key Identifier:
keyid:2B:38:40:B5:D3:C3:52:59:81:C8:61:61:66:67:9D:E9:20:E3:50:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzhAtdPDUlmByGFhZmed6SDjUPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/yvAAj-3ONavQkOgPRWSMODgB4Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/KzhAtdPDUlmByGFhZmed6SDjUPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.196.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f2:f4:b9:2a:7e:c2:a6:0f:26:3a:c8:2d:4d:11:17:9c:4c:
74:29:4c:f2:bd:64:83:4d:e4:4e:6d:e8:6c:d0:ca:91:72:c8:
aa:46:03:07:63:9b:1f:0c:38:d6:60:74:3e:30:45:cc:94:0c:
14:d7:a1:6c:d0:5f:6a:3f:f9:4c:ab:e3:35:ec:78:e3:46:b0:
f2:eb:0e:82:ec:00:b5:69:81:9c:80:07:e0:f3:49:53:74:38:
0b:13:52:34:ee:1e:71:0b:7f:85:ee:4e:ab:a6:18:2b:10:f2:
2f:90:f8:27:4a:94:e9:c0:5e:c2:f0:8b:dd:e9:44:d2:78:29:
23:22:11:0c:ca:bd:3c:0b:5b:3b:35:9d:c0:f9:40:05:b0:4f:
e7:35:44:2f:bd:26:fd:83:09:71:e6:e3:c0:08:46:2f:2c:f7:
4d:fc:15:12:86:eb:0c:1a:93:fe:f8:db:0d:64:d0:06:76:45:
a5:49:da:0a:21:2e:bb:59:d3:d3:c8:bb:79:52:bd:6b:17:6a:
57:14:12:09:e9:de:24:ec:8d:06:8b:b9:df:c4:5c:aa:df:50:
81:19:d1:42:42:88:0b:30:39:ca:e4:23:92:96:c3:28:74:fd:
37:3c:55:dd:ec:ef:92:cf:b9:db:87:9a:e2:e9:7c:28:59:c6:
6a:95:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:16 2024 by rpki-client on console-ams.rpki-client.org