Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/y3IYbrgVKY0topNIqr8Qp58kfsw.roa
File: y3IYbrgVKY0topNIqr8Qp58kfsw.roa (raw, json)
Hash identifier: iyv8s+LIMwU8lLIzmWq4MUE9qxunWRGYg8B6S4knkz4=
Subject key identifier: CB:72:18:6E:B8:15:29:8D:2D:A2:93:48:AA:BF:10:A7:9F:24:7E:CC
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 01856B6EB0E070C3F839DA08D238FE8745D5
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/y3IYbrgVKY0topNIqr8Qp58kfsw.roa
Signing time: Sun 01 Jan 2023 03:44:54 +0000
ROA not before: Sun 01 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 185.127.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:b0:e0:70:c3:f8:39:da:08:d2:38:fe:87:45:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: Jan 1 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb72186eb815298d2da29348aabf10a79f247ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:9a:d5:6f:88:df:3e:5b:fa:40:cd:0c:85:
65:a6:f5:ce:7a:aa:2f:a8:0e:07:c0:a8:7f:98:8e:
73:50:80:17:fd:92:5e:80:a7:2b:71:98:69:bb:88:
75:37:88:aa:bd:4e:b6:9b:6c:90:b4:c0:c9:8f:8f:
46:8d:90:12:62:65:98:81:ca:17:e8:d8:bd:da:ed:
40:b6:7b:c1:00:03:53:f9:e9:00:a7:0f:c6:ad:5b:
80:9a:ba:14:6b:1e:4e:20:03:c1:3c:1e:6f:2b:59:
00:28:e8:40:0b:77:5d:8d:e7:5e:ee:a9:c7:71:47:
35:d1:98:72:df:d4:e1:cb:00:58:56:6a:c2:f6:2d:
02:64:ff:5a:20:f7:14:01:92:5c:59:81:9a:50:b0:
6b:50:94:89:43:9b:a7:dc:2a:a6:06:62:c8:ce:05:
d5:8e:8e:4f:1b:e8:00:fd:c8:1b:79:bb:57:c2:a4:
4a:ba:c6:e4:da:c7:3f:7e:49:54:01:cc:3d:26:f6:
e2:8e:2b:8a:0b:2f:00:b0:3d:63:62:22:e4:a6:43:
19:1a:f3:42:76:e7:a8:bd:50:75:67:93:03:e5:95:
63:ae:89:0a:b3:3d:8b:b8:5f:bf:e2:23:92:4d:84:
ec:69:54:69:c4:39:5e:c8:af:2b:4f:8d:f4:0f:e7:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:72:18:6E:B8:15:29:8D:2D:A2:93:48:AA:BF:10:A7:9F:24:7E:CC
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/y3IYbrgVKY0topNIqr8Qp58kfsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.166.0/23
Signature Algorithm: sha256WithRSAEncryption
70:68:af:27:4f:b9:0e:ab:06:45:5a:64:65:ec:f8:1d:af:f1:
f6:58:58:70:e6:ba:f5:e6:19:89:f0:07:6e:9e:11:a9:fc:e5:
7b:ea:a5:6a:99:6c:e7:96:3b:0f:53:99:24:cf:ec:ea:11:bf:
df:fe:6e:cc:a4:30:64:8e:07:0b:48:05:f7:27:5e:73:16:ab:
b4:19:43:ce:77:78:de:84:44:57:04:aa:cd:39:dc:97:ec:56:
11:1f:fc:b0:a8:4f:45:a5:e6:d9:a5:3b:7d:65:ea:91:c0:88:
43:28:59:8c:39:fe:c0:ef:22:be:28:a0:b4:9f:f2:46:a8:9a:
b4:80:cb:e9:44:7f:5c:f8:c4:51:81:21:13:d5:86:68:97:22:
08:1e:c7:7a:7d:d1:94:1a:2e:e2:7c:96:3c:13:17:dd:10:f4:
fa:ad:46:05:de:c4:54:b1:c6:e1:9f:d1:dd:bd:22:f0:29:bb:
a6:b2:ba:10:d7:0d:34:e4:3a:b2:70:1e:18:48:88:aa:71:43:
2c:32:e8:c1:b9:68:12:3d:1b:34:d0:45:39:f5:13:0a:f7:c8:
21:f5:f8:a6:43:d7:a5:3d:52:ad:3c:b3:90:99:89:90:0d:79:
c7:f3:e9:d3:3b:c5:2e:b0:0f:08:0d:4d:9c:9e:e8:96:34:95:
58:1d:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:51 2025 by rpki-client