Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/yQYzZwRyYy5VRVtgWBBBMsEwDCg.roa
File: yQYzZwRyYy5VRVtgWBBBMsEwDCg.roa (raw, json)
Hash identifier: Q1t9B2p2QSxvr1d/JOY8KR/8FEttNsw+bqwjljKFNYg=
Subject key identifier: C9:06:33:67:04:72:63:2E:55:45:5B:60:58:10:41:32:C1:30:0C:28
Certificate issuer: /CN=f5150a23aac420feecabfc9b5baf9f024056333a
Certificate serial: 01856DE6484B2EB973EB180DBA8B93036442
Authority key identifier: F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/yQYzZwRyYy5VRVtgWBBBMsEwDCg.roa
Signing time: Sun 01 Jan 2023 15:14:46 +0000
ROA not before: Sun 01 Jan 2023 15:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201366
IP address blocks: 185.77.14.0/23 maxlen: 23
185.77.14.0/24 maxlen: 24
185.77.13.0/24 maxlen: 24
185.77.12.0/24 maxlen: 24
2a05:5f41::/32 maxlen: 32
2a05:5f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:48:4b:2e:b9:73:eb:18:0d:ba:8b:93:03:64:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5150a23aac420feecabfc9b5baf9f024056333a
Validity
Not Before: Jan 1 15:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c90633670472632e55455b6058104132c1300c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:0d:50:94:84:2b:8f:f2:6d:42:01:01:11:
41:67:22:33:4a:2d:e2:70:e1:52:63:0e:eb:0b:04:
93:f8:7e:d5:3c:e6:8b:a9:ab:dd:e8:9d:a5:90:1f:
7f:b6:9d:69:0e:ce:05:cd:2c:2e:b0:4c:b9:89:4d:
6c:7d:0b:cc:4b:98:93:48:48:9a:7a:a3:05:31:e7:
a8:16:1c:a0:66:cd:f3:0a:24:db:8b:63:0d:20:83:
04:a1:d4:64:cf:7a:38:00:58:e0:0e:9f:8d:b2:f1:
1c:26:81:f3:5f:11:1d:a7:ee:ad:60:91:05:6a:66:
ae:f4:e0:38:c2:4f:86:d7:ee:48:11:58:89:6d:6c:
eb:64:ad:26:69:2e:a5:0c:53:ce:b3:ad:5c:7f:34:
07:67:b8:7a:8b:64:ab:36:71:fc:ba:8d:33:ef:e8:
7c:8c:2f:05:79:34:5c:0f:37:c6:01:46:2b:30:b3:
d6:7d:11:0e:10:60:a2:b0:bf:35:78:c9:28:a4:3b:
66:35:0f:02:bf:d1:4c:67:28:1e:b1:f4:67:bb:9d:
bc:3f:8e:7b:33:e9:0d:37:84:80:c5:71:2e:b8:03:
89:fa:eb:9e:0d:1d:be:51:c9:50:e8:a5:4e:2e:3a:
09:2a:bf:d4:3f:90:a8:c0:35:5b:d2:18:a7:ea:38:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:06:33:67:04:72:63:2E:55:45:5B:60:58:10:41:32:C1:30:0C:28
X509v3 Authority Key Identifier:
keyid:F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/yQYzZwRyYy5VRVtgWBBBMsEwDCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.12.0/22
IPv6:
2a05:5f40::/31
Signature Algorithm: sha256WithRSAEncryption
80:f7:f9:9e:12:e1:c4:e0:c6:04:c7:0c:a6:aa:d8:92:34:44:
f7:82:8e:23:0d:c1:73:0b:44:ff:d9:51:d2:1c:e6:23:c7:54:
ae:67:d2:7f:55:3d:c5:3e:43:45:75:03:a9:d3:80:3d:ef:9f:
1c:ab:70:da:84:24:2d:b8:28:36:12:ef:d7:fc:24:a2:bb:14:
0b:52:79:1b:9d:b8:f4:6b:0d:d3:8a:1a:95:f1:1e:78:8a:95:
df:f1:24:50:79:4c:b8:7c:46:59:10:f3:94:0c:b6:08:ae:14:
b0:7a:27:56:b7:a6:ef:d8:ab:e2:a1:a6:d2:c7:8e:65:72:28:
82:31:d8:01:fd:c0:b0:0e:ec:72:1f:68:59:e4:51:06:bb:56:
5c:37:94:8b:59:8c:c5:36:a9:8c:6d:20:16:8d:4a:c8:72:69:
bc:5d:95:b9:18:06:90:5f:72:15:1a:e6:5a:78:65:3e:00:20:
a0:a7:27:e0:b5:11:65:f4:d0:f7:90:bb:d3:7b:dd:13:d7:0c:
f7:c8:1d:f4:f8:fc:73:a6:7a:85:05:b5:ee:5a:9f:25:46:b0:
61:d7:cc:3d:e5:58:eb:f1:87:54:f9:68:53:6e:fe:5c:f0:a0:
d7:f1:aa:ca:37:73:05:b3:2a:07:93:b1:42:ff:42:ab:99:47:
38:6a:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:56 2024 by rpki-client on console-ams.rpki-client.org