Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/YId1d4gZSLN5hXeZOzpw52ncWeM.roa
File: YId1d4gZSLN5hXeZOzpw52ncWeM.roa (raw, json)
Hash identifier: h/FEfXNi964JtSdotyVhWjOu5OHf+Ce0bILYwB/gIbE=
Subject key identifier: 60:87:75:77:88:19:48:B3:79:85:77:99:3B:3A:70:E7:69:DC:59:E3
Certificate issuer: /CN=cada870dbf7ba5df91fd909ed3d6380316656254
Certificate serial: 06DA3D6D
Authority key identifier: CA:DA:87:0D:BF:7B:A5:DF:91:FD:90:9E:D3:D6:38:03:16:65:62:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/YId1d4gZSLN5hXeZOzpw52ncWeM.roa
Signing time: Sat 01 Jan 2022 08:55:14 +0000
ROA not before: Sat 01 Jan 2022 08:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25017
IP address blocks: 193.201.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114965869 (0x6da3d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cada870dbf7ba5df91fd909ed3d6380316656254
Validity
Not Before: Jan 1 08:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60877577881948b3798577993b3a70e769dc59e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:bc:05:c5:38:c5:76:75:05:42:76:63:d0:
85:e7:35:be:88:8b:ff:de:5a:1b:c1:83:f7:be:46:
77:c8:f3:5f:3a:a3:b2:fd:16:67:58:23:f0:6d:5c:
16:e7:a9:ef:a8:e6:a8:1d:79:cb:3a:bd:96:bd:f0:
8f:a9:26:31:bc:db:60:ac:8f:c8:f2:69:59:d7:99:
c5:e4:99:73:02:84:04:d7:a2:59:56:d6:fd:0d:e7:
24:f1:76:31:d8:73:8b:34:5a:75:d5:8d:eb:c0:cc:
1f:26:10:b4:8d:a5:b8:52:ad:a3:04:83:ad:45:71:
43:70:e7:93:0f:73:4e:b6:f2:70:89:62:76:6c:75:
20:29:7c:af:70:da:f4:42:2e:36:09:c5:22:b4:4d:
f4:17:ff:d0:32:60:f4:46:02:7f:90:92:a4:49:f4:
94:a6:bf:a0:9d:29:ac:68:aa:90:e5:21:c8:6f:2c:
33:95:03:75:92:64:88:eb:c3:35:de:93:56:1e:3f:
a2:80:23:89:14:f7:3c:9d:ec:3b:d9:63:62:ed:e8:
5b:85:25:9e:64:7c:d5:7d:23:72:72:5f:14:9b:9f:
47:79:c2:6d:e1:22:0a:5c:c3:56:cb:e0:44:f1:96:
c3:90:3d:cd:55:57:9a:c4:6e:59:37:4c:8f:ab:72:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:75:77:88:19:48:B3:79:85:77:99:3B:3A:70:E7:69:DC:59:E3
X509v3 Authority Key Identifier:
keyid:CA:DA:87:0D:BF:7B:A5:DF:91:FD:90:9E:D3:D6:38:03:16:65:62:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/YId1d4gZSLN5hXeZOzpw52ncWeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.101.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:02:3a:ea:4b:cf:50:a2:a4:37:92:d2:46:9f:e7:bd:29:7f:
49:a4:eb:df:c6:60:1f:c4:34:64:22:8e:41:c6:34:94:f1:37:
47:be:9e:cc:89:6a:46:40:74:d7:ed:2a:48:a8:2f:ec:4b:7a:
db:ee:a1:36:48:62:2c:f0:7e:6b:bf:76:c1:cd:f2:cd:11:81:
44:2c:f6:76:88:13:7e:de:47:23:a5:20:31:ba:d0:59:96:75:
31:5e:87:10:cd:b6:dc:9b:8d:ca:3b:88:d2:95:89:4e:89:6c:
53:4f:4b:49:90:0b:3d:c4:cb:12:a5:c9:c4:23:74:9a:a7:1e:
51:29:ae:8a:4b:d7:3e:23:54:b1:24:b1:a0:34:d8:c4:27:16:
22:90:6c:4a:b3:0e:25:8b:64:ec:c6:08:ed:84:2d:54:a9:21:
68:d1:b3:f9:28:6c:46:91:47:4f:f7:f2:12:b6:76:38:5b:a0:
7d:b5:7b:70:50:22:f6:e2:08:a8:1c:0f:76:48:50:9e:da:76:
30:1e:91:a9:69:59:32:02:c0:bc:b6:1c:ad:cf:1c:7d:c1:ee:
7d:bc:67:28:66:ca:02:ce:17:ee:91:18:c8:8b:e0:79:7a:ea:
a5:dd:0e:22:fc:99:f6:56:d0:01:50:18:58:8c:38:be:00:9c:
64:dd:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:16 2024 by rpki-client on console-ams.rpki-client.org