Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/yf3_R0XrhqfTpUtYHFrAYJTCITo.roa
File: yf3_R0XrhqfTpUtYHFrAYJTCITo.roa (raw, json)
Hash identifier: ioniiSKVY88m3zYXSG2s++UnwN3gJpkWPUN1BFzAAyQ=
Subject key identifier: C9:FD:FF:47:45:EB:86:A7:D3:A5:4B:58:1C:5A:C0:60:94:C2:21:3A
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 08DB9BD1
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/yf3_R0XrhqfTpUtYHFrAYJTCITo.roa
Signing time: Wed 16 Mar 2022 22:55:58 +0000
ROA not before: Wed 16 Mar 2022 22:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148610001 (0x8db9bd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 16 22:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9fdff4745eb86a7d3a54b581c5ac06094c2213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:ed:a8:98:13:65:8d:92:1a:6a:9d:57:e7:
c5:90:54:75:0c:a4:59:fa:fa:d2:9a:9a:3b:43:77:
ad:74:7b:03:14:72:29:ce:ae:6f:84:15:ae:28:a1:
1b:76:80:70:db:d3:3c:7a:d5:63:30:c0:f6:b5:32:
df:e2:9a:65:c1:d6:76:e9:cf:bd:a6:a0:ef:df:72:
ff:04:d4:42:d9:13:8d:c6:0f:ba:2a:9c:a9:c1:40:
38:4b:41:d7:d5:1e:5b:a3:3a:c2:fc:58:32:99:2c:
3d:cf:24:53:c1:7d:0a:c5:fd:68:ea:11:84:5e:a9:
c2:08:dc:e3:ca:51:f4:ab:1b:56:f6:98:7e:a6:2d:
f0:5d:fb:8f:b9:f7:a9:c3:44:c9:db:08:89:db:02:
13:a6:e9:3e:3b:83:fa:be:ed:ab:2b:26:6c:5a:53:
ea:6d:3d:71:f5:21:27:89:a2:c2:58:68:f2:b9:cd:
4f:4f:3d:b6:36:18:e5:a6:6d:70:df:24:77:36:e6:
cc:7f:c0:b2:a4:31:80:45:d8:8c:df:ea:c8:0a:ca:
60:3f:e4:75:ce:c7:8d:c4:c4:76:db:19:60:3f:8a:
79:46:5e:e2:f3:0c:a8:6f:d1:79:03:69:2d:e9:e7:
86:a3:9d:73:7c:a1:fe:9d:3c:23:1b:2d:21:c2:f3:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FD:FF:47:45:EB:86:A7:D3:A5:4B:58:1C:5A:C0:60:94:C2:21:3A
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/yf3_R0XrhqfTpUtYHFrAYJTCITo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.132.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:b0:15:df:bf:e6:a8:5d:cf:83:38:dd:90:d1:0e:68:80:f8:
38:b3:4c:52:82:70:1f:95:2a:3a:eb:c0:15:1f:bb:a9:34:0b:
48:15:c2:74:fd:e1:96:03:04:76:35:1c:c0:ac:22:d8:18:ef:
9f:c4:c0:d1:db:06:04:cb:5c:1d:70:a7:9e:8d:44:10:a5:6d:
c4:30:49:90:a5:5f:3a:dc:ff:7c:ce:6a:be:ec:79:35:d2:71:
88:ea:ec:fd:8c:18:f5:5c:0f:98:0c:4b:97:98:04:e0:09:fb:
27:d9:92:a2:67:5c:0d:23:02:55:d3:ed:6c:01:b1:77:11:8a:
0a:bc:17:ae:96:8d:b5:7e:7b:eb:f1:f8:cf:98:11:14:a1:cc:
a5:be:42:02:63:e6:94:f6:e7:58:9b:19:60:a0:33:e0:ed:d7:
bf:23:65:fc:7d:bf:4f:9b:ca:f9:c7:71:10:11:16:95:cc:9f:
fb:46:ce:fc:45:09:ae:3e:b6:83:bc:09:35:2e:c9:64:ff:0f:
e6:f5:bd:e3:64:42:b7:89:ae:fe:a9:6c:5a:38:5c:c2:40:09:
43:a9:6f:5a:1e:49:20:bf:a2:ca:a6:35:9f:ee:6e:30:ee:5a:
ed:37:e4:f5:1f:41:75:a2:89:94:bb:64:43:bf:da:3e:48:d0:
e7:51:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org