Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/YsKET3fE8VRVTzVsh-Af4SayUxA.roa
File: YsKET3fE8VRVTzVsh-Af4SayUxA.roa (raw, json)
Hash identifier: 21nFgg49ex5CmRu3KKwx9sILrA/6UYbyBSPliYrB+Qw=
Subject key identifier: 62:C2:84:4F:77:C4:F1:54:55:4F:35:6C:87:E0:1F:E1:26:B2:53:10
Certificate issuer: /CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Certificate serial: 0187A25266101357BC325C24DF45D2E5266C
Authority key identifier: A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/YsKET3fE8VRVTzVsh-Af4SayUxA.roa
Signing time: Fri 21 Apr 2023 05:38:41 +0000
ROA not before: Fri 21 Apr 2023 05:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.212.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:52:66:10:13:57:bc:32:5c:24:df:45:d2:e5:26:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Validity
Not Before: Apr 21 05:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62c2844f77c4f154554f356c87e01fe126b25310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:97:21:26:8b:4e:d1:56:5d:20:49:44:db:
aa:00:33:18:c7:1e:e7:e6:6f:12:79:c0:8f:9d:16:
13:57:71:c3:87:ef:9d:d7:50:b7:19:5c:0b:50:5f:
f1:62:11:4c:7e:5f:12:d4:36:b0:f6:75:7b:da:c4:
73:ac:4b:97:e5:00:c3:db:9c:b6:f0:a8:23:53:60:
cb:22:7d:64:12:5d:f2:bf:5e:13:0b:b4:00:ad:c7:
f9:7e:cc:18:08:90:a1:d4:8d:d9:93:ec:03:9b:85:
ae:b3:b3:b7:c1:7e:73:9a:f4:3a:1c:5a:8e:aa:07:
17:18:2a:c8:1b:c6:e1:0d:4a:33:73:36:48:c6:cf:
38:f8:ea:3a:0f:b8:2e:ef:65:ae:2c:a3:da:c5:4b:
a5:f3:c8:34:e5:9a:57:33:fc:2e:56:ac:c0:75:09:
66:dc:64:ea:8c:64:63:59:79:df:ed:ca:d9:70:ff:
d7:6d:fa:9d:a4:c5:07:69:b3:8a:05:0a:23:67:d0:
e1:ac:92:6d:8f:66:dd:e3:4b:fe:37:5f:09:b5:71:
16:bd:c9:c8:8d:39:fa:d5:43:73:aa:10:15:92:e0:
dd:a5:c2:a8:5b:11:71:5c:8c:1d:fd:be:47:51:62:
57:d2:9c:68:7c:e3:2d:b6:e7:dd:3b:8c:44:95:02:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C2:84:4F:77:C4:F1:54:55:4F:35:6C:87:E0:1F:E1:26:B2:53:10
X509v3 Authority Key Identifier:
keyid:A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/YsKET3fE8VRVTzVsh-Af4SayUxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/qR8eV3yh27jgXA9WpvZ4sepA2M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.224.0/24
Signature Algorithm: sha256WithRSAEncryption
43:86:69:c3:5b:ac:fe:39:7b:91:55:d0:8f:c3:3d:8b:7c:fd:
1a:c4:81:16:76:7b:94:58:22:a8:fe:b5:dd:7a:ee:4c:24:12:
bf:47:2c:94:b4:46:2e:10:00:0c:12:7b:72:21:4e:0c:be:25:
c4:ca:bb:67:b0:ee:ee:58:f2:b4:e0:77:a6:17:95:00:0f:3d:
c4:0c:aa:d9:04:49:b5:a2:c8:e7:6b:d8:4a:60:ac:34:2d:e5:
75:c8:5e:66:f8:b9:dc:5a:1c:b5:58:12:8c:f6:24:fd:60:16:
9b:1e:db:30:1e:14:72:54:af:ed:c3:52:6c:ed:b3:b3:14:20:
7f:74:29:78:a6:de:46:60:2d:1a:71:74:9c:4a:1d:15:35:58:
2e:7f:fe:ab:b7:b1:3a:de:fc:96:4f:07:11:ae:cf:b0:2d:35:
e4:19:6f:52:21:ca:18:ae:cb:9d:ea:35:30:44:60:21:3c:ec:
78:a6:15:30:82:10:41:d9:29:15:b1:9b:6c:ce:4e:cc:35:b9:
6c:ce:d0:8e:63:83:9e:72:80:1d:39:2f:92:eb:ae:e0:b8:74:
f6:e1:e8:78:b4:7c:23:e1:84:e9:f2:ee:a3:77:e6:2e:d9:1e:
ba:88:89:82:09:db:70:e5:8b:cf:8b:b6:8c:44:e9:e4:10:1a:
55:8f:f1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:36 2025 by rpki-client