Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/yxRcMjCK_F7-O83rJ_ecbfOGULA.roa
File: yxRcMjCK_F7-O83rJ_ecbfOGULA.roa (raw, json)
Hash identifier: mMOxRVu615Gb5feA1ABne7bo3PaxYudYcf/2Wv0yEUs=
Subject key identifier: CB:14:5C:32:30:8A:FC:5E:FE:3B:CD:EB:27:F7:9C:6D:F3:86:50:B0
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01858462228593CBE7C352187B7DA82085B9
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/yxRcMjCK_F7-O83rJ_ecbfOGULA.roa
Signing time: Fri 06 Jan 2023 00:01:41 +0000
ROA not before: Fri 06 Jan 2023 00:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.229.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.215.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:84:62:22:85:93:cb:e7:c3:52:18:7b:7d:a8:20:85:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 6 00:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb145c32308afc5efe3bcdeb27f79c6df38650b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:d7:51:98:8b:76:0e:14:f9:52:ef:c6:ee:
b8:bf:08:fc:fd:db:6b:4e:bf:54:93:4c:6a:12:87:
00:a9:82:f0:ce:47:ab:69:da:8d:f1:87:52:ee:d3:
72:7e:78:7a:f8:00:a6:f7:92:d9:6e:95:e7:05:8a:
e6:8e:ee:0e:0a:7c:2a:4a:3d:6b:41:73:be:ce:3a:
72:02:82:f6:f4:ed:d3:e1:e1:27:78:40:25:63:6d:
62:d7:ef:11:bf:74:70:a2:23:c8:a0:b5:ae:c7:af:
bf:d7:ec:dd:39:80:ce:07:e4:ed:57:85:16:44:8c:
ce:c6:92:0e:e5:b6:4b:56:47:b9:1a:1e:0e:6c:93:
c9:85:88:1c:2d:73:57:7c:d7:ce:eb:fd:20:8f:90:
a1:22:25:6e:f8:89:93:b6:a8:5b:1a:5a:6e:bb:38:
7a:81:87:f5:70:fb:47:d4:1c:01:76:87:8c:a5:cc:
09:21:b2:50:43:c1:26:25:93:69:39:56:e1:e2:94:
53:38:94:6d:3d:91:9f:01:4a:40:d2:d3:89:63:b9:
87:2d:b4:09:fb:fc:6f:92:2e:7e:22:8e:65:ea:bd:
7b:8e:a4:2c:2f:29:aa:1b:9d:7b:d5:66:cc:5f:25:
c1:f3:ae:84:05:18:7a:be:15:22:9d:3b:ec:89:48:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:5C:32:30:8A:FC:5E:FE:3B:CD:EB:27:F7:9C:6D:F3:86:50:B0
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/yxRcMjCK_F7-O83rJ_ecbfOGULA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
45.95.215.0/24
85.209.229.0-85.209.230.255
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
85:48:dc:27:fb:94:79:f5:9a:53:1d:ab:06:1e:1b:6e:c1:e4:
c3:9a:23:d6:b8:3f:3f:ec:83:e7:dc:6d:7d:e1:fc:f4:21:57:
c0:9f:b7:f5:49:e7:0b:28:f5:41:fb:67:de:d6:c6:f2:f6:81:
e8:81:9a:23:04:b7:89:85:37:f5:ea:cf:0e:66:9f:0f:94:d2:
56:43:de:46:48:0f:ba:9d:e9:95:db:ad:2e:aa:d7:7b:aa:97:
da:2c:c3:30:0e:74:60:45:dc:fb:31:42:7d:b3:0c:30:0b:c7:
70:3d:98:21:0a:9d:37:11:75:14:13:48:6d:e8:9e:59:be:fb:
42:3b:8e:31:d9:d2:bd:39:0d:45:41:19:a2:ec:b3:d0:c6:f6:
fb:c8:e8:01:73:e9:3e:39:ce:e4:55:b7:c1:1f:38:05:05:97:
c1:7b:0b:65:c0:0f:eb:a6:5c:b6:6e:b2:45:a0:17:b3:18:8b:
7d:3a:29:45:89:9e:ca:31:8f:81:cd:29:7e:86:fb:62:95:b5:
c9:ad:3d:70:bb:fa:d3:7a:49:c7:71:41:21:e8:4f:c1:9e:6b:
f9:7b:32:cb:b6:66:f8:19:44:78:2f:14:e4:f4:48:84:d8:26:
51:09:25:a0:96:ec:42:67:01:b3:31:26:44:35:a0:d2:d3:db:
44:70:19:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:43 2023 by rpki-client on console-fra.rpki-client.org