Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/Y5o3JVo3dNIv5Q-O8dardzPKvL0.roa
File: Y5o3JVo3dNIv5Q-O8dardzPKvL0.roa (raw, json)
Hash identifier: lI9GzOUg6DT8UvGP+8cPUqEMnhH8q0PgTP869NqFYCU=
Subject key identifier: 63:9A:37:25:5A:37:74:D2:2F:E5:0F:8E:F1:D6:AB:77:33:CA:BC:BD
Certificate issuer: /CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
Certificate serial: 01856CE60F3EA3940099A156E1AE0A39B4EB
Authority key identifier: 82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/Y5o3JVo3dNIv5Q-O8dardzPKvL0.roa
Signing time: Sun 01 Jan 2023 10:34:54 +0000
ROA not before: Sun 01 Jan 2023 10:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39052
IP address blocks: 144.57.128.0/17 maxlen: 17
144.57.64.0/18 maxlen: 18
144.57.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0f:3e:a3:94:00:99:a1:56:e1:ae:0a:39:b4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
Validity
Not Before: Jan 1 10:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=639a37255a3774d22fe50f8ef1d6ab7733cabcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:01:94:fc:3d:06:36:5c:2a:ba:32:c2:95:
19:03:93:ad:7c:f2:6d:3b:37:67:ab:48:f5:12:fc:
ec:97:c1:18:c8:d4:85:83:b3:98:d2:62:d5:59:71:
8d:ea:d3:d9:6c:14:65:c4:41:50:cd:73:a2:e4:c0:
c3:b3:88:4b:0f:c6:83:1a:b8:8b:0c:8b:ca:93:33:
d9:ed:d3:6e:c7:93:e4:6a:a2:9d:6f:5c:78:89:63:
68:58:49:bc:79:0c:6f:34:83:d6:4b:17:c5:03:84:
c9:6d:26:92:21:61:e9:3e:9e:0b:57:b6:8b:2f:5b:
78:f8:9a:51:86:22:5c:fa:f9:eb:00:bb:a6:56:3c:
9c:8c:8d:16:e5:50:47:13:63:17:f9:c7:4d:9a:2f:
68:a8:02:ca:22:0e:a9:2b:ab:50:a3:aa:23:7f:58:
93:ca:cc:b3:29:32:1b:f9:16:15:d2:32:db:2d:b4:
88:74:66:43:c8:0d:e3:cc:67:c6:99:10:92:85:29:
7a:6f:73:04:f8:64:28:48:79:25:ce:01:5c:80:fc:
00:dd:e6:d9:f8:8a:cf:d9:d1:ae:cc:c3:6e:f8:1d:
94:02:bf:8e:a3:8e:d4:94:56:7f:cd:75:6a:8f:49:
a4:ba:ae:5d:eb:43:b1:00:2a:0d:0b:82:46:39:5f:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9A:37:25:5A:37:74:D2:2F:E5:0F:8E:F1:D6:AB:77:33:CA:BC:BD
X509v3 Authority Key Identifier:
keyid:82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/Y5o3JVo3dNIv5Q-O8dardzPKvL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.57.0.0/19
144.57.64.0-144.57.255.255
Signature Algorithm: sha256WithRSAEncryption
1f:cd:27:73:ca:bb:0e:04:66:bd:88:79:93:cc:bb:3b:6d:71:
32:d1:87:32:b9:44:47:37:0f:b3:fb:e7:54:b5:1f:bf:38:49:
f1:15:3e:0b:07:71:38:6f:03:9b:ef:51:40:6e:1b:ec:77:70:
98:39:00:1a:50:cb:de:2b:07:b7:9e:7a:a7:2d:62:23:b5:0f:
61:fe:85:72:be:e6:7e:20:d3:18:88:af:04:0b:74:82:a2:7d:
a3:39:b1:21:c1:3b:14:05:32:77:dc:5a:3d:7c:33:ab:ff:dc:
6c:85:25:d8:1a:1d:28:bd:4a:6a:40:e1:a6:3b:b0:46:65:1e:
e6:37:26:db:aa:3c:4b:f3:50:ac:65:ef:22:3e:ad:0d:87:b5:
b7:52:85:ab:19:05:2b:8b:ba:66:f0:b8:17:13:9c:c9:be:13:
bc:94:e2:0b:c9:dd:03:9c:e7:43:fc:6f:00:d6:b2:49:a0:b6:
85:76:03:e4:88:99:c6:4d:a2:bb:ac:bd:3e:97:76:69:06:85:
5c:8c:34:6b:fc:3e:e5:b2:57:b8:89:64:92:22:4c:9f:b1:5b:
72:ee:b4:45:c7:bb:fc:17:4f:c2:aa:10:a6:99:a7:aa:05:e9:
5b:85:2f:0d:6d:30:a9:6d:e3:e1:e7:d6:fb:85:c6:e2:95:6c:
78:fd:b3:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:24 2024 by rpki-client on console-fra.rpki-client.org