Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/yVfH9A6-X9up8HNSdxqfWZLhsao.roa
File: yVfH9A6-X9up8HNSdxqfWZLhsao.roa (raw, json)
Hash identifier: Ncr7RHWrzqAI5IY2xwwHleb18tOaopEuDRHUNtHR+eM=
Subject key identifier: C9:57:C7:F4:0E:BE:5F:DB:A9:F0:73:52:77:1A:9F:59:92:E1:B1:AA
Certificate issuer: /CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Certificate serial: 01856CE643D6CC543B879C1931F8D23A8F54
Authority key identifier: 92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/yVfH9A6-X9up8HNSdxqfWZLhsao.roa
Signing time: Sun 01 Jan 2023 10:35:07 +0000
ROA not before: Sun 01 Jan 2023 10:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47869
IP address blocks: 185.144.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:43:d6:cc:54:3b:87:9c:19:31:f8:d2:3a:8f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Validity
Not Before: Jan 1 10:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c957c7f40ebe5fdba9f07352771a9f5992e1b1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:ee:16:99:d5:27:26:28:3a:6f:23:30:99:
e4:7a:9c:14:0f:c4:04:6a:32:50:8f:22:09:fb:d5:
32:6d:2a:b8:46:6d:6c:e7:9e:db:86:6b:fd:30:44:
4f:83:7c:dd:0c:20:4b:44:62:9d:7a:9e:ae:99:f0:
a7:6b:69:fb:37:2c:ed:eb:7d:46:75:d2:67:a1:df:
1e:8e:20:09:38:2c:5e:ff:37:e1:23:1a:2a:16:59:
b8:f7:2c:22:4c:2f:55:87:09:9a:dc:32:16:48:26:
f0:af:7b:f2:51:0e:ab:ab:eb:f9:f2:cd:6b:a0:9d:
62:b5:2f:59:a2:ec:7a:d2:d4:11:2b:cb:ee:3b:c9:
5d:5f:21:54:61:03:39:76:3b:82:e2:75:ed:4d:74:
e2:61:b6:3f:01:29:7b:b5:80:98:3c:c0:ab:ec:85:
02:9b:76:3d:15:a2:cf:b2:18:39:55:5f:0b:48:84:
07:c5:d4:2e:21:be:60:22:0d:e7:a1:73:87:cf:75:
79:96:eb:b9:7c:6c:fd:f1:de:2a:46:99:d3:68:8a:
92:f3:85:8a:4c:e8:41:02:e8:b1:12:f9:32:6b:4c:
28:f6:80:71:f9:b8:a8:ea:01:ab:7f:c1:24:18:57:
b2:07:09:43:50:25:b1:8b:a6:d2:f7:d9:6a:cb:59:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:57:C7:F4:0E:BE:5F:DB:A9:F0:73:52:77:1A:9F:59:92:E1:B1:AA
X509v3 Authority Key Identifier:
keyid:92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/yVfH9A6-X9up8HNSdxqfWZLhsao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:53:26:fb:a5:69:80:4d:be:cc:85:13:28:cd:2d:87:86:61:
a9:e8:99:a6:be:45:8d:72:ac:00:63:5f:f8:ed:d2:eb:f3:cb:
79:51:e5:26:1f:46:fe:fa:45:d9:57:72:2f:6a:b3:4b:65:b3:
1e:5d:6c:05:cc:73:34:c7:2a:37:6a:17:82:a2:69:7f:2e:d8:
c3:85:f7:44:fd:b3:21:1c:fa:75:50:70:f4:d2:d9:94:f9:31:
ce:7e:31:96:8b:c3:b3:64:4a:9d:20:d8:50:e9:b3:85:2a:14:
ea:5c:34:50:75:9a:93:84:f6:75:53:5c:ae:5a:b4:51:51:a4:
90:f3:6b:3a:92:62:ed:7d:be:61:5d:94:05:11:7c:3e:a4:2a:
96:f2:1a:53:63:0e:6d:80:bf:df:39:29:ed:6a:a7:a9:1c:c2:
77:da:84:45:d2:0f:cd:a8:7f:2c:06:6d:36:c2:7d:4b:82:77:
51:cd:7a:f2:d8:1e:5b:aa:8b:79:3e:9d:90:b8:24:18:ea:41:
bf:ac:63:82:1b:ff:08:94:35:0b:fa:9c:dd:a0:69:ee:2b:c4:
af:63:94:3a:dc:7b:1a:47:dd:bd:55:3b:49:36:bb:78:30:b7:
cd:c8:42:80:e0:fc:47:ab:ce:24:6a:a6:94:9d:4b:9e:2d:9d:
f8:d4:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:40 2024 by rpki-client on console-fra.rpki-client.org