Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/yN8wZbi-2yuTpuicineEuN84KKM.roa
File: yN8wZbi-2yuTpuicineEuN84KKM.roa (raw, json)
Hash identifier: 0sp6yten0lc+MTurB+nwLOCXosYROqXoNkJeoE8ucqQ=
Subject key identifier: C8:DF:30:65:B8:BE:DB:2B:93:A6:E8:9C:8A:77:84:B8:DF:38:28:A3
Certificate issuer: /CN=615fea39cea84e99359ca9d040161fa510179265
Certificate serial: 018CC6B93DB574A5D83ACEA235B8B29CA5C7
Authority key identifier: 61:5F:EA:39:CE:A8:4E:99:35:9C:A9:D0:40:16:1F:A5:10:17:92:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV_qOc6oTpk1nKnQQBYfpRAXkmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/yN8wZbi-2yuTpuicineEuN84KKM.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9085
IP address blocks: 185.83.232.0/24 maxlen: 24
2a03:6e60::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3d:b5:74:a5:d8:3a:ce:a2:35:b8:b2:9c:a5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fea39cea84e99359ca9d040161fa510179265
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8df3065b8bedb2b93a6e89c8a7784b8df3828a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:99:43:40:e8:97:b3:7d:a5:f1:af:e2:8a:
6e:1e:6c:82:3b:b8:0e:4e:0b:cb:69:2e:94:80:66:
4a:dc:f5:32:d5:de:d1:55:49:56:5d:d4:64:39:d3:
dc:03:f4:21:df:17:48:39:4a:89:89:c0:2a:96:2b:
d2:5d:0f:2a:6c:2d:a5:24:6d:a2:38:86:4f:96:6a:
dc:6d:02:b2:b1:a7:0f:81:c0:05:b1:e5:57:b9:8c:
a2:86:84:2c:ee:0e:b3:59:06:70:ca:82:97:14:be:
a0:05:e7:36:bc:61:25:71:c9:bd:8e:eb:cc:cd:e9:
3b:11:6e:b0:a2:f5:91:71:44:2c:1e:e6:9a:68:fc:
49:90:ae:ae:d8:7a:d0:e4:50:e1:49:ff:e3:ac:88:
65:62:f2:06:61:d0:f8:a5:22:c9:1e:ee:ae:85:df:
56:0b:ea:d5:04:43:82:eb:fd:28:0f:9c:70:fa:f7:
df:6d:a7:d8:a8:e1:51:a6:09:b2:27:95:28:b6:16:
03:46:27:15:0a:31:bc:9b:35:b1:1e:19:c6:7a:12:
dc:70:11:6e:4f:80:fe:11:3e:e6:0f:50:12:5c:79:
83:18:5c:77:07:af:5d:dc:00:6e:f6:08:09:fb:95:
52:a8:10:be:ff:cb:23:ca:f3:3e:d9:89:55:ba:a1:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DF:30:65:B8:BE:DB:2B:93:A6:E8:9C:8A:77:84:B8:DF:38:28:A3
X509v3 Authority Key Identifier:
keyid:61:5F:EA:39:CE:A8:4E:99:35:9C:A9:D0:40:16:1F:A5:10:17:92:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV_qOc6oTpk1nKnQQBYfpRAXkmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/yN8wZbi-2yuTpuicineEuN84KKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/566989-01a6-407d-ac85-e5a8e49e893b/1/YV_qOc6oTpk1nKnQQBYfpRAXkmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.232.0/24
IPv6:
2a03:6e60::/48
Signature Algorithm: sha256WithRSAEncryption
1d:42:a5:13:8e:c3:fa:87:80:16:42:17:7b:8b:ca:5a:1d:16:
fa:35:8b:a9:d8:95:04:bf:f9:03:a1:7a:39:5c:1a:61:93:e6:
5e:90:5a:35:89:9e:0b:55:ef:fe:e1:b9:75:bc:0e:ce:76:c6:
fc:be:0d:4f:80:b2:23:c6:a3:7f:86:a2:44:df:a0:1f:49:4d:
f4:7d:e8:a5:14:38:2c:13:7f:c1:7b:7c:d3:31:f7:29:c1:5f:
ea:73:56:4d:4a:dd:5d:08:7b:d9:33:1d:6a:d9:42:49:ec:81:
2b:e4:f6:61:8a:92:5d:93:a2:29:b6:37:35:3e:f7:8a:7b:80:
ab:ad:29:6c:6c:e4:2b:a6:95:22:c7:c5:01:cc:a5:d3:9a:23:
88:7d:8e:38:61:5a:a7:7b:81:22:cb:96:bd:0f:3e:2d:ab:d4:
d5:66:ef:2b:8b:e2:09:59:35:3e:7c:76:a3:70:dd:8d:48:44:
f2:09:45:c1:e0:63:bf:ec:92:92:06:57:c3:d0:0b:50:98:28:
6d:40:b3:62:d2:40:ea:69:55:f7:b1:6e:79:d3:cb:23:c3:00:
18:01:0e:c6:97:f8:55:6a:13:4a:90:c9:01:dc:74:da:63:21:
90:32:78:97:4e:87:08:9a:6e:b6:45:29:3f:3b:d8:03:cc:87:
18:96:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 14:25:04 2024 by rpki-client on console-ams.rpki-client.org