Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/YhjwWL0mabHax6Lxwsp5WAP91h8.roa
File: YhjwWL0mabHax6Lxwsp5WAP91h8.roa (raw, json)
Hash identifier: STA1lBmAfrYVkxzE7W77tCly61JLil28VCzm8Fvhs7g=
Subject key identifier: 62:18:F0:58:BD:26:69:B1:DA:C7:A2:F1:C2:CA:79:58:03:FD:D6:1F
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 07F08DE8
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/YhjwWL0mabHax6Lxwsp5WAP91h8.roa
Signing time: Sat 01 Jan 2022 07:01:59 +0000
ROA not before: Sat 01 Jan 2022 07:01:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200020
IP address blocks: 185.102.26.0/24 maxlen: 24
185.102.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133205480 (0x7f08de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 1 07:01:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6218f058bd2669b1dac7a2f1c2ca795803fdd61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:a2:1f:35:84:0f:52:25:bb:1c:cb:24:8c:
c2:0f:f0:07:a7:d2:75:ae:52:68:a0:d8:38:af:05:
f1:8f:8a:15:90:0f:08:7c:20:93:10:4b:ad:d9:b7:
2d:56:41:81:d0:6d:63:dd:95:d5:6f:90:bb:7e:5e:
05:33:8f:97:51:2a:51:53:d8:c7:dd:39:f1:1b:b3:
6c:ac:02:95:ea:23:44:ac:ad:65:bc:8e:b5:f6:8d:
d4:f5:4a:3f:4d:5b:98:61:d9:4a:9f:a4:dc:b3:10:
ad:8d:f7:17:b8:7d:c5:2e:c2:47:19:0d:06:32:ac:
aa:f9:d2:13:3d:7f:da:e0:99:f8:ce:e5:b4:20:7d:
39:02:23:65:f0:c6:5f:27:84:2c:c2:d5:b9:8f:f1:
45:4b:23:52:ea:02:d6:52:c9:a9:59:a8:a7:99:7b:
db:88:26:a9:39:1c:19:fc:a1:b0:63:59:15:5e:c1:
a8:ed:7b:11:4f:8b:e9:ea:1e:3b:8c:cb:42:51:6c:
66:f4:72:fe:a9:f2:a0:6a:40:11:f6:7a:96:77:35:
88:47:70:d6:2f:60:f1:ba:af:af:2f:f6:d4:eb:68:
69:cb:ae:8c:e9:0e:d2:c5:7f:0f:dd:8f:d4:5a:ba:
38:cf:9a:24:d9:73:96:eb:5b:2c:c2:20:fa:fd:c8:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:18:F0:58:BD:26:69:B1:DA:C7:A2:F1:C2:CA:79:58:03:FD:D6:1F
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/YhjwWL0mabHax6Lxwsp5WAP91h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.24.0-185.102.26.255
Signature Algorithm: sha256WithRSAEncryption
6f:5e:93:45:47:cf:a8:fd:25:98:80:42:1a:2d:f3:43:1e:fd:
73:92:0a:33:bc:75:e1:07:1c:57:21:4c:3b:a6:4e:86:ff:74:
68:77:9f:f8:8e:fe:70:85:35:14:06:94:d5:50:a0:08:78:27:
70:35:43:f8:62:00:22:cf:53:0b:2d:a5:5a:3b:61:bc:0e:87:
f0:d3:fb:ff:2f:44:2e:c8:87:32:e0:8f:04:a8:19:fb:d7:21:
eb:70:db:6d:60:5f:39:25:5a:90:b2:26:f7:60:5d:8c:65:33:
2b:42:da:12:27:82:6f:ba:6d:86:1a:85:c3:0f:fa:1e:ab:c9:
b1:d3:a8:32:b3:8a:bb:79:f7:2c:06:06:22:4c:8d:3c:e2:da:
aa:7e:60:3f:ea:d4:a5:2f:96:30:21:63:6a:64:a7:1c:22:32:
38:c7:d9:63:25:8b:46:c3:a0:35:6d:0b:b2:7f:ca:9f:a0:9b:
76:e6:98:5e:f3:4e:7b:02:6b:a5:41:c6:6a:f3:97:86:20:06:
5c:f2:ec:e1:5f:19:b1:22:96:75:22:c2:03:e3:6a:7a:b8:a7:
ed:ba:d9:58:18:33:1c:eb:d0:2b:2b:e9:5f:71:b7:49:5a:4a:
d6:33:38:21:8d:fb:d8:a3:28:7c:b6:39:6f:3d:13:33:d0:93:
01:30:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:43 2025 by rpki-client