Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/yjDO6MAj5nxCQkDRkNWl5irAniA.roa
File: yjDO6MAj5nxCQkDRkNWl5irAniA.roa (raw, json)
Hash identifier: 45QBYlWI2JB3Fxc2L0BhIbS4lINQWFox/9zJhJSgUv4=
Subject key identifier: CA:30:CE:E8:C0:23:E6:7C:42:42:40:D1:90:D5:A5:E6:2A:C0:9E:20
Certificate issuer: /CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Certificate serial: 5922
Authority key identifier: C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/yjDO6MAj5nxCQkDRkNWl5irAniA.roa
Signing time: Tue 25 Jan 2022 11:49:31 +0000
ROA not before: Tue 25 Jan 2022 11:49:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 185.81.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22818 (0x5922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Validity
Not Before: Jan 25 11:49:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca30cee8c023e67c424240d190d5a5e62ac09e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:4f:9b:d7:d2:bd:c8:84:41:f5:5e:70:49:
bc:79:0f:63:42:da:68:dc:e7:3f:55:92:a6:88:1e:
de:3b:ab:69:62:8a:96:5c:7f:10:23:63:29:15:9c:
34:53:b9:b5:e6:77:d1:a9:fb:45:1f:33:52:6d:bf:
cb:b0:dc:a0:97:5d:e8:2b:27:94:16:81:13:00:81:
4d:b9:ca:28:b8:0f:f1:91:34:1f:0c:c3:25:72:6b:
77:4a:8f:ce:70:b1:e5:de:e7:77:5a:75:d0:f0:66:
ae:c3:1b:be:0c:8b:31:d8:39:98:e0:8f:32:b9:7d:
7f:e4:e3:27:cb:06:fa:86:08:2a:c8:75:17:47:14:
c3:99:b0:79:44:21:73:95:63:3b:5b:8e:2c:ac:de:
be:9e:24:20:d8:4c:b9:8a:96:17:b4:85:60:ad:fd:
59:c2:0c:a8:2c:42:b4:fa:35:a2:d6:07:b3:39:b1:
a9:b3:6b:de:79:c8:18:d0:d5:48:af:9f:7a:86:49:
b3:38:fd:a2:bc:52:ff:8d:6a:fc:ed:21:99:e1:b0:
86:8d:8d:0f:b3:c9:f6:8b:5f:6f:6f:70:39:8c:2c:
c7:c6:07:df:7c:5d:2a:7f:88:2f:96:60:5f:3e:4d:
b1:f3:44:de:ac:50:f2:d7:25:a1:e9:e9:74:d9:83:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:30:CE:E8:C0:23:E6:7C:42:42:40:D1:90:D5:A5:E6:2A:C0:9E:20
X509v3 Authority Key Identifier:
keyid:C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/yjDO6MAj5nxCQkDRkNWl5irAniA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.68.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3d:c6:b5:a4:8f:9d:63:a4:15:18:fb:78:e0:da:05:6d:3c:
4d:d6:ab:28:b1:63:0d:52:e6:79:ef:5d:0a:34:d2:a6:ec:34:
88:a5:cf:04:40:18:45:ea:9c:e3:18:bc:7d:6a:93:3b:81:7d:
ee:35:33:02:de:54:dc:d1:7b:18:9e:6f:c9:46:b8:da:ca:49:
e5:c2:78:60:89:a9:ec:88:2f:53:5a:10:6e:1a:6a:54:ae:dd:
ff:3d:d3:5e:e4:8c:70:e7:dd:13:81:20:f4:8e:af:45:da:3e:
6f:7e:c5:4f:08:55:3e:88:09:d3:5b:7d:21:d2:ff:c9:6d:d5:
18:c8:dc:d2:c2:62:ff:d6:87:8c:63:f0:b7:55:45:e8:1c:78:
4f:93:8f:ff:4a:7e:f2:9e:f7:56:00:7c:86:a0:e4:27:c7:51:
b1:b4:09:1a:2b:12:ab:41:b3:8e:84:18:16:df:1f:a9:d3:28:
11:bd:21:91:d3:0a:dd:19:29:06:42:b1:2b:dc:6e:ab:ea:a5:
64:78:0c:a1:83:d1:a7:87:61:c4:8e:08:c8:6c:57:ce:5e:0f:
82:c1:d4:9c:53:6b:d2:36:35:8f:33:b2:d5:0e:8f:48:31:a0:
9e:50:5d:99:de:b9:06:eb:44:ca:c9:b9:c1:50:5a:80:b4:c5:
fd:8d:3d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:35 2024 by rpki-client on console-ams.rpki-client.org