Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/y-4-j0EnnzIK4yOw1v5CM7N96pw.roa
File: y-4-j0EnnzIK4yOw1v5CM7N96pw.roa (raw, json)
Hash identifier: UM1dnqNHkU6CUN+Z1KRbwzINC8wpXjX8WMCYv5GqlqA=
Subject key identifier: CB:EE:3E:8F:41:27:9F:32:0A:E3:23:B0:D6:FE:42:33:B3:7D:EA:9C
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 01839937B6DEC8DE6E4CF09593879E84A0D0
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/y-4-j0EnnzIK4yOw1v5CM7N96pw.roa
Signing time: Sun 02 Oct 2022 15:01:48 +0000
ROA not before: Sun 02 Oct 2022 15:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 185.127.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:99:37:b6:de:c8:de:6e:4c:f0:95:93:87:9e:84:a0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: Oct 2 15:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbee3e8f41279f320ae323b0d6fe4233b37dea9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:54:43:ea:5d:d1:e9:8c:53:02:38:23:07:
95:73:a5:c6:77:ec:18:26:52:67:8d:14:64:be:f1:
cd:5f:07:96:f9:d0:82:25:28:19:76:99:66:08:a3:
77:81:a5:e4:e8:45:64:a8:2a:54:90:39:aa:df:da:
0b:cd:d3:df:0c:1b:67:49:0b:7b:b9:f1:04:f3:03:
fe:fd:7a:b7:71:b8:d6:73:0e:cb:bc:d2:c5:33:9e:
2b:33:3a:ad:fb:73:75:23:24:65:95:63:4f:6b:81:
df:45:5d:a1:86:ba:8b:d3:6a:58:08:40:1a:1e:19:
ac:44:37:6e:d3:ca:16:72:3d:3c:f2:87:6a:72:fb:
38:aa:d6:c3:6e:b9:f5:2e:5d:4d:ac:59:1e:59:59:
5f:14:7e:19:1e:f6:97:c9:70:4c:8d:bf:32:67:4d:
7b:29:9d:ef:d1:8b:b8:16:ea:df:24:ed:a0:2b:5a:
7a:cf:55:3a:85:a2:15:08:77:cc:8d:c6:78:c8:72:
97:e8:a4:a7:96:74:03:7f:ff:73:23:ea:ef:0a:1c:
26:95:7e:4c:43:fa:88:12:28:52:92:b1:fd:6c:18:
29:6c:0d:fd:a3:66:07:f5:97:f7:cb:88:3e:9f:c2:
d8:84:98:7c:1b:8e:69:c3:f1:9b:b5:27:a1:e5:68:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:3E:8F:41:27:9F:32:0A:E3:23:B0:D6:FE:42:33:B3:7D:EA:9C
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/y-4-j0EnnzIK4yOw1v5CM7N96pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.166.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:75:67:7a:4b:85:d2:61:6f:4a:5b:0e:5f:f7:ac:c4:2c:7d:
15:59:80:b6:8e:16:d8:f8:60:15:a9:89:06:ea:86:66:25:64:
6c:14:2e:31:a6:14:c4:67:0e:4e:37:cc:26:b0:1e:94:49:14:
b0:37:10:03:34:1a:19:bc:a9:f4:ff:b6:5e:7a:c1:4e:bb:9b:
a0:29:29:66:46:40:f6:05:ab:ba:25:fc:30:03:64:8c:86:61:
98:56:01:da:29:df:a5:95:d6:2c:39:06:fb:90:7a:e4:f4:a6:
87:56:e4:c7:5b:6a:7c:6a:cd:29:99:37:83:30:9b:de:77:f0:
b0:01:c3:33:d8:08:54:b9:1b:e5:b6:e9:02:54:8b:b1:ca:33:
5f:cf:6e:1e:5c:c9:0d:e7:b3:73:fd:05:6a:aa:bd:d2:1f:60:
20:e0:18:47:67:71:bb:ac:d2:f7:4a:a9:c1:7c:76:3e:e6:67:
0f:71:89:11:c9:24:1a:05:d3:43:da:17:01:81:7b:02:3e:b5:
a6:31:13:f1:d7:06:55:c7:94:cc:6d:dc:28:dd:ee:6e:61:94:
8e:6a:c4:3c:b7:f0:2d:b9:f9:f1:47:83:31:a8:32:20:1a:9f:
94:76:2c:31:b3:af:c6:0f:df:db:f8:a6:23:ad:2f:d7:24:a4:
5f:b2:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:17 2025 by rpki-client