Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/YimIoWdVkxE_XZevKSVapQ-CpD8.roa
File: YimIoWdVkxE_XZevKSVapQ-CpD8.roa (raw, json)
Hash identifier: MvWp0zJE8+u2PDVbTKwJSGyaoUHNPFwFhnWrUycyy3M=
Subject key identifier: 62:29:88:A1:67:55:93:11:3F:5D:97:AF:29:25:5A:A5:0F:82:A4:3F
Certificate issuer: /CN=b1a3b0de59596a64edfa659da3b2abe8420668e8
Certificate serial: 018C68EC9D6922FA14FC9F2BE629A073B91E
Authority key identifier: B1:A3:B0:DE:59:59:6A:64:ED:FA:65:9D:A3:B2:AB:E8:42:06:68:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saOw3llZamTt-mWdo7Kr6EIGaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/YimIoWdVkxE_XZevKSVapQ-CpD8.roa
Signing time: Thu 14 Dec 2023 15:23:06 +0000
ROA not before: Thu 14 Dec 2023 15:23:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209910
IP address blocks: 185.200.77.0/24 maxlen: 24
185.200.78.0/24 maxlen: 24
185.200.76.0/24 maxlen: 24
185.200.76.0/22 maxlen: 22
185.200.79.0/24 maxlen: 24
185.236.248.0/22 maxlen: 24
45.65.64.0/22 maxlen: 22
193.84.48.0/23 maxlen: 24
193.84.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:ec:9d:69:22:fa:14:fc:9f:2b:e6:29:a0:73:b9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a3b0de59596a64edfa659da3b2abe8420668e8
Validity
Not Before: Dec 14 15:23:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=622988a1675593113f5d97af29255aa50f82a43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:3c:78:c8:ad:9d:2d:05:39:04:57:47:c2:
46:32:96:1c:d2:57:fd:a3:aa:80:c0:93:86:ce:fc:
96:c0:66:9f:82:40:a3:a8:53:2a:46:d8:1a:3d:0a:
9c:1c:d4:ac:ba:88:e3:6e:9d:3d:96:d0:36:c4:5d:
7b:6d:0c:13:de:c3:b0:03:be:9b:73:e1:00:d4:6a:
7d:68:2b:d5:d1:22:62:a4:45:5f:21:ba:68:29:f7:
0f:7c:39:e4:59:2f:b8:9f:c2:9d:26:70:86:99:3b:
5d:9e:0b:cd:cc:52:53:41:e8:5d:e0:0a:73:92:3f:
b3:8c:42:51:60:3f:f3:6e:83:a6:52:8c:ca:b9:34:
88:60:65:71:89:80:12:83:9e:3c:bb:06:ce:9b:dd:
02:d6:6b:27:dc:71:d7:52:21:2a:10:e3:a7:9b:c3:
e7:06:bd:43:1d:ee:54:ce:da:88:e0:63:c6:2c:2b:
79:12:a2:02:6c:df:c7:c1:62:37:fd:7b:9c:47:23:
44:fd:5d:6b:9c:9b:d8:d9:7c:ff:99:99:5d:fe:53:
50:62:9c:cf:64:e5:41:46:78:bc:31:3c:17:d8:2c:
19:af:a9:09:72:1d:66:84:f6:2e:4f:f8:8f:5b:d5:
b4:ba:9d:ba:c4:73:28:ac:ee:60:54:e9:aa:ae:05:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:88:A1:67:55:93:11:3F:5D:97:AF:29:25:5A:A5:0F:82:A4:3F
X509v3 Authority Key Identifier:
keyid:B1:A3:B0:DE:59:59:6A:64:ED:FA:65:9D:A3:B2:AB:E8:42:06:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saOw3llZamTt-mWdo7Kr6EIGaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/YimIoWdVkxE_XZevKSVapQ-CpD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/saOw3llZamTt-mWdo7Kr6EIGaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.64.0/22
185.200.76.0/22
185.236.248.0/22
193.84.48.0/23
193.84.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:0f:26:1f:7b:30:86:e4:20:0f:27:6b:49:96:86:c2:55:af:
53:3a:8b:b0:91:7e:6a:54:c1:c4:23:ac:99:9c:09:36:fa:26:
5a:b1:38:66:c9:e5:6f:c0:32:02:d9:48:6c:9e:e6:f0:85:0d:
37:92:31:c6:30:34:84:c1:04:91:9d:87:7b:6e:03:29:6f:04:
ce:40:fb:2f:2a:36:ab:ad:ba:61:51:4c:55:8c:2b:49:c7:ed:
95:e9:c6:59:ff:f6:a3:99:09:56:c8:8d:68:10:df:7f:75:23:
f8:59:1b:78:38:95:37:ee:ca:c4:7d:35:5e:1e:3f:f6:e5:bd:
37:ad:d8:7d:e3:4d:0c:3a:55:a3:1c:eb:ed:74:67:65:d9:e7:
ea:1b:e5:29:f4:43:3a:ea:da:b5:ad:ae:58:66:62:d9:3f:8e:
78:ff:38:f2:53:3a:d6:d0:39:fa:3b:07:60:f5:90:cb:02:cb:
2d:1c:7d:00:14:bd:23:0c:4a:8c:15:41:2a:02:6b:1f:fb:3f:
e1:3d:4a:26:30:30:8e:97:3e:3a:77:df:07:ad:bb:ac:75:70:
ad:4f:75:74:01:92:c0:65:8c:c5:f2:1e:ad:2c:80:a8:12:6d:
3d:44:9e:3e:fa:ac:2f:c1:9a:14:63:d0:83:82:2d:b4:0f:62:
6b:d6:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org