Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/YtiBNFVKqhnJp0ull_fEFfm8ZoY.roa
File: YtiBNFVKqhnJp0ull_fEFfm8ZoY.roa (raw, json)
Hash identifier: yoPo3yRBC5RnGrsLEHpxuZQNi8Mm8zm8MuPh8vObITs=
Subject key identifier: 62:D8:81:34:55:4A:AA:19:C9:A7:4B:A5:97:F7:C4:15:F9:BC:66:86
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 01857246C94C0D0836B64A3AEF04691849CE
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/YtiBNFVKqhnJp0ull_fEFfm8ZoY.roa
Signing time: Mon 02 Jan 2023 11:38:39 +0000
ROA not before: Mon 02 Jan 2023 11:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.172.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c9:4c:0d:08:36:b6:4a:3a:ef:04:69:18:49:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Jan 2 11:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62d88134554aaa19c9a74ba597f7c415f9bc6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:2a:cb:37:8c:2e:90:bc:7e:f4:46:48:65:
34:a4:58:48:32:2a:6f:f3:a7:8a:16:d2:9b:e2:48:
56:7d:b7:42:02:e6:f7:f0:ee:1b:da:07:cd:d3:ae:
3b:7f:a6:a9:d4:33:4d:6f:84:fb:f6:09:cb:fa:8d:
a3:5c:6a:2d:28:5f:95:5d:2d:d3:13:56:2f:d4:4b:
75:0b:05:f7:ae:1d:9a:37:64:38:66:88:df:33:a3:
9c:b1:a4:4e:2c:5f:1d:b5:a9:8b:ea:56:27:e8:84:
63:9b:82:ab:31:72:fb:81:36:54:4b:d5:29:3a:3b:
ff:80:2a:e2:a2:d9:5e:a4:e4:33:62:db:34:9f:cc:
30:b6:40:23:1a:d4:d9:62:b5:5c:4f:a9:3b:4e:75:
f2:67:03:e5:20:c8:80:4b:3d:be:c0:fb:4d:31:73:
3d:8f:1e:df:5c:44:a8:61:4e:de:2e:28:c9:eb:25:
b1:37:72:d2:2d:b5:1a:6b:79:4c:2b:a3:3f:a8:a1:
82:e7:89:8c:07:ac:aa:99:f5:94:a8:a0:97:98:9d:
6a:be:24:22:24:fe:6f:dc:b0:9f:1d:40:10:28:7a:
11:55:51:cd:b5:44:54:73:0c:2f:29:33:16:24:2b:
e6:e3:bf:65:ff:4f:7a:5f:31:5b:f1:58:65:ce:52:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D8:81:34:55:4A:AA:19:C9:A7:4B:A5:97:F7:C4:15:F9:BC:66:86
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/YtiBNFVKqhnJp0ull_fEFfm8ZoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b4:5b:ce:56:9f:8a:6b:61:4f:77:fe:6c:5a:7d:3c:ea:27:
c3:d3:d5:eb:d5:bf:ad:b5:10:5e:8e:ef:75:a7:f1:da:61:b0:
17:e9:c3:10:60:49:02:7b:02:b0:6a:dd:b5:d5:13:98:49:73:
ea:47:8c:f2:3c:cd:1e:f6:a9:55:fc:81:c8:3f:90:b2:91:65:
f9:80:f6:51:d7:02:41:07:1d:38:67:a6:71:0b:89:c4:c6:23:
dc:0e:c2:d1:48:f7:e0:02:94:d8:c5:4b:5a:fe:45:b3:aa:d2:
a2:f8:73:02:be:0c:22:e9:bf:4d:88:42:6d:6c:81:b2:76:e7:
06:a0:4d:ee:cd:e7:6f:bb:82:40:72:2d:03:12:7a:73:3e:d7:
06:7e:23:78:bc:aa:b0:07:78:1f:86:40:97:09:71:00:2c:49:
1a:29:44:88:25:35:01:fc:e1:6a:45:6a:1a:1d:a3:11:96:fe:
95:e1:46:5f:bd:30:2a:bc:9d:fb:58:56:21:c9:b0:42:1c:fa:
d1:ba:43:7a:7e:54:83:34:cf:83:09:0b:52:58:53:2f:15:08:
ca:6c:b7:fe:3c:66:1d:77:cd:a9:bb:e5:c9:58:37:5a:94:40:
37:38:ee:98:0b:44:bf:5b:7c:7c:cc:71:62:72:f7:6e:2e:ef:
75:9c:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:42 2025 by rpki-client