Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yVCAMKhEQ6ywsqXndGgJUL_GHC4.roa
File: yVCAMKhEQ6ywsqXndGgJUL_GHC4.roa (raw, json)
Hash identifier: Z49tiy4ZhvHCrdrIc69ZFE1D9vPXRUPuVnjUADiLcSA=
Subject key identifier: C9:50:80:30:A8:44:43:AC:B0:B2:A5:E7:74:68:09:50:BF:C6:1C:2E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAFF49039A390FD12F61F3CF108D33
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yVCAMKhEQ6ywsqXndGgJUL_GHC4.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198568
IP address blocks: 194.132.6.0/24 maxlen: 24
194.132.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ff:49:03:9a:39:0f:d1:2f:61:f3:cf:10:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9508030a84443acb0b2a5e774680950bfc61c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:f4:b8:9c:08:18:50:15:8f:ca:5c:5a:4a:
3f:4f:e1:17:5f:ff:3a:ef:62:61:81:61:31:8d:ee:
0a:27:e0:f3:27:ac:e9:da:66:9a:8e:86:5a:fd:16:
7b:da:88:9f:4f:95:30:a6:d4:18:b8:85:e6:ee:ff:
5a:1a:43:ed:6f:3c:4a:99:d4:d6:a5:0c:0c:42:f1:
81:79:d0:0e:cb:a0:6b:31:85:5c:99:77:cd:90:b4:
55:10:08:00:45:88:d3:a3:f2:6e:13:e7:13:26:07:
05:56:ed:38:b2:8f:f1:f7:18:65:70:94:df:dd:33:
b8:40:a3:1f:e3:09:49:86:67:f7:2d:d6:b3:5c:bc:
b5:ad:07:f8:e9:67:f1:02:24:6f:03:3e:dd:8f:60:
4a:94:81:29:6c:b8:7a:07:ef:d8:83:77:46:a3:e1:
a2:81:9e:bb:c1:e2:6c:7a:b9:f9:f5:14:fd:e5:7e:
52:85:26:6a:9c:67:c2:ef:c8:94:3f:f6:ac:5e:08:
53:d6:25:15:11:cb:78:7f:3b:c0:d1:2a:a6:ca:9c:
37:d5:23:39:cb:6a:24:ce:2d:ec:3b:40:bb:5a:e9:
e8:ea:ad:85:07:77:09:08:c1:59:28:c0:a5:07:0a:
b8:25:62:6e:11:04:0d:a0:4d:d0:54:de:94:81:37:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:50:80:30:A8:44:43:AC:B0:B2:A5:E7:74:68:09:50:BF:C6:1C:2E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yVCAMKhEQ6ywsqXndGgJUL_GHC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.5.0-194.132.6.255
Signature Algorithm: sha256WithRSAEncryption
07:36:39:a2:46:80:b4:97:a2:73:75:fe:31:8c:42:86:3f:80:
04:ec:bd:33:42:1b:05:7a:78:67:24:f5:43:de:8c:8d:11:d5:
ec:29:35:8e:83:a6:f3:df:02:0f:19:be:61:85:e5:ec:77:02:
8b:b2:6b:8a:f1:56:c3:4c:ff:d5:32:2d:1b:97:6e:0a:c5:14:
2d:de:dc:b3:0b:b3:98:99:69:02:01:7d:90:d1:0d:2d:fd:db:
35:fd:48:26:76:e0:8d:2a:41:ac:d2:c6:9a:00:66:6b:03:cc:
5a:be:72:38:36:41:d7:88:01:c3:b6:d6:11:eb:2c:49:bd:8e:
79:0d:7c:fd:b4:c6:d8:c6:5f:f2:0a:d3:89:f3:4b:dc:28:bf:
ca:be:cd:43:5b:78:4d:b0:1f:b8:c0:06:f9:b9:3c:aa:7f:d4:
36:bf:d7:b5:26:c4:6e:19:ed:cf:89:3e:8f:db:c8:8b:4d:af:
94:12:df:bb:0c:f3:c6:2c:89:1c:05:3c:18:e4:67:c5:1a:1d:
38:d5:7d:b6:76:fb:ea:8c:4b:d0:3e:77:78:bf:f5:ac:37:c8:
51:86:bc:ae:30:dd:bd:90:9f:0e:5c:4a:f2:cc:c7:2c:0e:eb:
2f:34:11:e0:bf:08:a5:55:d0:32:17:4b:7a:e4:1d:67:d1:c6:
ae:3b:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:42 2025 by rpki-client