Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/yGOudCL7-sVSla9IiYhjEECGxYw.roa
File: yGOudCL7-sVSla9IiYhjEECGxYw.roa (raw, json)
Hash identifier: FAPCD8+hvYXdqepw4VwVOvDkey0xEqrXSKFLJPoWRQc=
Subject key identifier: C8:63:AE:74:22:FB:FA:C5:52:95:AF:48:89:88:63:10:40:86:C5:8C
Certificate issuer: /CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
Certificate serial: 0182AE83561C6098CD7BB72043761E96C104
Authority key identifier: C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/yGOudCL7-sVSla9IiYhjEECGxYw.roa
Signing time: Thu 18 Aug 2022 01:13:39 +0000
ROA not before: Thu 18 Aug 2022 01:13:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 146.255.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ae:83:56:1c:60:98:cd:7b:b7:20:43:76:1e:96:c1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cbb7ff069e70de0df56c4b748145aeb2d01ad2
Validity
Not Before: Aug 18 01:13:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c863ae7422fbfac55295af48898863104086c58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:fd:98:3f:0d:de:0a:b1:4d:d9:ee:2f:f2:
68:11:6e:c3:22:e0:90:9b:8f:09:75:38:ff:15:2f:
74:fe:6c:73:22:94:04:58:a6:fe:19:03:9d:1b:5d:
1c:99:6e:bf:df:78:2a:48:37:13:5f:54:3a:aa:0b:
ef:4f:26:bd:27:57:d1:9e:11:59:8b:fb:53:31:4d:
18:52:a2:97:fd:d1:b1:b2:99:36:c4:45:d4:d4:17:
57:3f:95:e2:68:a5:04:67:65:7a:c4:7a:38:bf:b8:
81:99:46:bd:67:8a:6f:b2:d1:df:dc:4c:43:b6:64:
ae:f5:ab:56:28:c5:53:93:a0:35:48:83:78:2d:dc:
de:e9:98:67:ad:84:91:d5:84:f0:fd:3a:a2:ec:a0:
d6:42:61:2c:4f:26:1c:c4:31:49:16:af:37:47:43:
f5:2c:1a:6f:1e:7c:38:65:33:f5:fe:44:d2:35:4f:
95:78:2e:a1:b7:5d:76:01:f3:d9:43:c4:9d:dc:c0:
36:05:85:3f:40:de:37:57:5d:25:bb:d5:86:a1:44:
14:e9:fb:1f:38:76:26:7c:92:fd:7a:fb:9f:f6:18:
76:9b:78:34:e1:e3:f7:e1:22:3c:1d:93:2d:eb:d4:
38:b2:1a:84:53:30:81:81:1f:1a:1b:9d:6e:60:e8:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:AE:74:22:FB:FA:C5:52:95:AF:48:89:88:63:10:40:86:C5:8C
X509v3 Authority Key Identifier:
keyid:C4:CB:B7:FF:06:9E:70:DE:0D:F5:6C:4B:74:81:45:AE:B2:D0:1A:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMu3_waecN4N9WxLdIFFrrLQGtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/yGOudCL7-sVSla9IiYhjEECGxYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/16e51f-5388-4d5c-aaf1-1200f21ba075/1/xMu3_waecN4N9WxLdIFFrrLQGtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.190.0/24
Signature Algorithm: sha256WithRSAEncryption
76:13:f0:69:18:37:63:b1:51:5e:1f:87:4c:06:53:94:e3:69:
0c:11:57:1b:fd:df:93:94:3f:33:d1:eb:49:c3:11:8c:92:28:
68:27:ad:cc:20:ce:d9:aa:51:b6:f0:09:c1:cd:9f:6c:3c:dd:
7a:cb:38:0d:46:27:ad:63:95:f0:18:c5:55:af:21:80:24:ea:
54:1d:5d:95:ea:6c:9e:0e:59:95:e6:50:3e:bb:1d:d4:30:55:
62:0b:47:98:6e:01:fb:0d:f3:2d:a0:93:65:a6:c7:60:29:a0:
9f:d5:83:ec:da:57:f2:92:9b:3e:83:a3:8e:97:73:1c:e2:dc:
aa:4b:5e:ca:4a:50:cf:e5:87:7e:b7:4e:74:44:1a:ce:5d:4d:
63:60:cd:55:b0:53:22:75:d8:da:d3:bb:38:af:67:cb:1a:ea:
82:87:5b:6c:8a:d8:68:38:34:c7:71:6e:f5:a4:b2:2a:1a:d1:
13:99:ad:5e:53:44:09:0b:8d:e5:bb:f9:fd:f2:a2:08:b5:28:
c4:92:84:31:a3:16:6b:8c:5a:82:19:79:98:27:63:5b:71:b6:
32:36:c9:8e:e4:a3:5b:47:0e:a7:0f:84:fa:e3:c2:38:03:58:
17:3b:b9:48:f9:e3:a7:10:99:b1:21:c4:e0:29:93:03:5f:6f:
6b:f7:7d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:14 2025 by rpki-client