Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/yZptXP-0oPwiFOHCGdHumH3qcBE.roa
File: yZptXP-0oPwiFOHCGdHumH3qcBE.roa (raw, json)
Hash identifier: omvVDcTIbl3OTpVBWNZLYMaiewkupGwI2pIEVIR680w=
Subject key identifier: C9:9A:6D:5C:FF:B4:A0:FC:22:14:E1:C2:19:D1:EE:98:7D:EA:70:11
Certificate issuer: /CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Certificate serial: 01856D2F2C2EFFC7E042E64CF4AB9DE42DB5
Authority key identifier: 58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/yZptXP-0oPwiFOHCGdHumH3qcBE.roa
Signing time: Sun 01 Jan 2023 11:54:46 +0000
ROA not before: Sun 01 Jan 2023 11:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 188.227.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:2c:2e:ff:c7:e0:42:e6:4c:f4:ab:9d:e4:2d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Validity
Not Before: Jan 1 11:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c99a6d5cffb4a0fc2214e1c219d1ee987dea7011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:6d:19:2d:4c:60:b5:21:bb:f4:4a:96:28:
4a:42:6c:c3:c9:12:67:2f:99:ad:33:41:52:e2:06:
a5:41:ee:0d:61:37:90:cf:6f:e0:b3:bb:fd:92:b7:
fc:c3:d4:96:e5:a6:b9:ea:68:e0:f2:6a:b1:02:84:
8f:86:24:69:35:c2:dc:53:9f:00:af:88:75:f3:48:
92:da:19:3d:03:5d:24:64:e0:d7:71:b9:c5:3a:76:
74:1f:79:40:42:a3:af:1e:2c:42:48:75:a4:67:3e:
52:34:7a:32:dc:a3:4e:6c:1d:d5:21:c8:f3:0b:84:
0b:94:83:3a:9d:4f:be:b1:1a:64:0f:99:9f:a2:3e:
9f:a1:46:35:f4:d9:e1:ee:86:02:3b:b6:42:cc:43:
a0:bf:40:9f:9d:15:a9:5d:08:9c:e7:52:6c:64:c4:
ce:2b:ee:b2:c3:fc:86:a3:ad:7a:47:1f:e0:1c:6d:
93:22:05:45:84:47:83:d9:a7:52:2f:5c:34:da:3e:
12:f8:14:1a:4b:2a:db:82:40:35:ea:87:f1:23:0a:
61:ca:f6:74:b3:87:60:7e:1b:43:86:c8:d7:fc:bf:
c4:92:f5:ab:9f:45:d6:f5:9f:27:b9:b9:06:da:a5:
f7:66:d8:dd:63:1b:9e:9b:6c:cf:f6:1b:13:42:9d:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9A:6D:5C:FF:B4:A0:FC:22:14:E1:C2:19:D1:EE:98:7D:EA:70:11
X509v3 Authority Key Identifier:
keyid:58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/yZptXP-0oPwiFOHCGdHumH3qcBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.196.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:f8:e7:80:99:09:e8:d4:0d:7e:d6:c1:91:9e:7a:59:de:92:
1b:25:0c:8b:b1:8e:58:27:cb:15:49:36:89:92:92:59:12:4e:
95:7e:a1:28:64:53:88:67:20:47:67:3e:7e:62:41:30:be:84:
2f:b7:06:5a:e2:5b:6b:b6:03:f1:7e:7f:af:31:c1:3d:29:88:
d0:96:c2:a6:dc:9b:2f:85:65:23:07:82:94:47:f2:74:f7:3a:
41:4c:3e:5c:c4:ad:b5:95:60:f1:3b:1a:fe:9e:7c:e6:bb:4a:
da:ff:94:45:8f:1a:1c:a4:e3:ec:d4:4f:18:f8:73:60:16:ae:
5c:ca:1b:d0:c3:f1:f8:14:fb:77:4b:07:aa:87:67:e2:63:b1:
c1:ae:5a:65:da:cc:26:fd:65:fd:14:57:83:a0:72:5b:cd:36:
58:5c:27:a2:76:54:06:48:66:6e:7a:ce:5c:01:1e:bf:fc:ef:
68:0e:d6:8e:0e:ba:a8:17:71:37:d4:5d:ab:d4:85:c2:69:d0:
38:59:4e:58:c1:18:b4:40:bd:75:b3:89:b9:53:3f:b6:c0:ef:
55:c4:de:ed:fc:ce:1f:e6:15:1a:73:64:1b:42:9d:f8:21:f6:
1b:77:ed:6d:37:c0:5b:99:5e:ed:20:02:b1:e6:19:1d:32:ee:
27:49:ba:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org