Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/ybcsowuz6TSRSd5pF8Tq1ROer4w.roa
File: ybcsowuz6TSRSd5pF8Tq1ROer4w.roa (raw, json)
Hash identifier: Iyct4jm/LRoZMqmvwOL2P134LTYxy62Ne1K29sHOXhs=
Subject key identifier: C9:B7:2C:A3:0B:B3:E9:34:91:49:DE:69:17:C4:EA:D5:13:9E:AF:8C
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 08F5850E
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/ybcsowuz6TSRSd5pF8Tq1ROer4w.roa
Signing time: Tue 22 Mar 2022 22:01:35 +0000
ROA not before: Tue 22 Mar 2022 22:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207795
IP address blocks: 194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150308110 (0x8f5850e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 22 22:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9b72ca30bb3e9349149de6917c4ead5139eaf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:7d:4b:3f:52:79:29:7d:d7:25:65:72:d6:
40:e6:c9:ae:56:68:15:80:60:f6:eb:f6:42:f8:a1:
82:c1:42:28:8f:7c:ea:fa:77:05:49:ad:a7:15:ff:
2e:58:19:e1:99:e7:b1:b4:dc:47:d7:c3:92:a8:27:
b5:fb:f9:12:1c:54:77:e3:db:0d:57:6c:e5:72:77:
cb:c0:d4:15:23:28:95:00:13:55:24:b8:75:c6:7c:
2e:a7:90:50:cc:e0:b3:44:2f:d5:38:65:f1:be:cf:
83:8a:77:2c:f4:24:8e:b5:49:55:e2:41:e6:62:df:
06:31:f9:1b:c4:4c:df:66:41:7a:bc:a4:d6:7e:27:
10:5a:e4:00:34:32:d4:8a:c3:65:ed:07:36:de:5c:
ff:59:da:e5:c8:17:68:c6:de:3b:a6:1c:ba:c3:8a:
1e:8d:fb:01:f9:15:6b:e6:cd:11:1c:e6:2b:2f:6b:
d8:47:c1:c6:b7:95:d1:85:3d:5b:cb:36:9f:24:8f:
bd:24:82:a0:65:57:fd:cb:b6:50:63:a7:f8:00:b8:
99:43:24:34:e8:02:a7:c2:37:10:f8:9c:5f:45:11:
83:50:d6:17:04:ba:a3:d2:5d:36:86:1a:50:bb:e5:
7d:bf:d0:82:a1:aa:c9:1c:ca:9b:e3:3d:19:de:00:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B7:2C:A3:0B:B3:E9:34:91:49:DE:69:17:C4:EA:D5:13:9E:AF:8C
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/ybcsowuz6TSRSd5pF8Tq1ROer4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.4.0/24
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
30:b3:e8:ad:b5:ff:19:16:b7:ce:37:3d:18:a3:bd:63:af:1b:
b9:be:85:41:92:53:a7:70:d6:ca:1b:22:18:0d:60:ea:80:a0:
65:69:bb:46:74:88:28:5b:14:b1:a6:b4:01:69:63:d1:79:ae:
7e:34:bf:3f:c3:ec:ec:42:ff:7a:b0:60:55:22:61:6d:a3:dd:
10:20:65:1d:1f:78:65:04:36:dd:0d:ce:1a:32:52:57:cb:6f:
78:c3:3a:3b:cc:b4:38:cc:cf:d2:c8:97:85:6a:33:b1:53:12:
f0:e6:10:ed:19:b0:4b:76:02:3f:c0:a3:15:cb:af:80:63:96:
c7:fd:3e:40:e6:45:fd:3a:3d:64:12:06:07:60:01:9c:e1:4d:
2a:3b:42:33:6e:4a:9f:63:79:79:d6:ac:9c:ca:14:34:a8:7c:
b6:40:b8:03:a8:c6:77:a4:ec:1d:19:fd:08:b1:6b:5f:fd:cb:
9f:cd:75:8c:01:54:db:f4:37:aa:46:31:ac:04:15:77:6a:85:
28:cb:ff:0b:4b:fb:fd:67:2c:16:c2:4c:e7:bf:08:87:02:bd:
8d:e0:dd:9f:2b:52:9d:52:fe:24:f2:5d:f5:ff:a5:fe:36:cd:
a5:90:9e:44:45:75:ed:f1:06:82:75:34:2a:b2:9b:a2:35:d0:
0d:41:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org