Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/yEufTejDOePfTdDHEJFmxZmQuTw.roa
File: yEufTejDOePfTdDHEJFmxZmQuTw.roa (raw, json)
Hash identifier: sO0RAagvFCoXnnNdKSKavf0j46h+ueZzJ1F4+mepg6w=
Subject key identifier: C8:4B:9F:4D:E8:C3:39:E3:DF:4D:D0:C7:10:91:66:C5:99:90:B9:3C
Certificate issuer: /CN=df84f759a661f69f2acf1b7233fadc944920c557
Certificate serial: 018CC493A03A28BF7677948F792AD3C87FF0
Authority key identifier: DF:84:F7:59:A6:61:F6:9F:2A:CF:1B:72:33:FA:DC:94:49:20:C5:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34T3WaZh9p8qzxtyM_rclEkgxVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/yEufTejDOePfTdDHEJFmxZmQuTw.roa
Signing time: Mon 01 Jan 2024 10:30:58 +0000
ROA not before: Mon 01 Jan 2024 10:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50214
IP address blocks: 91.198.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:a0:3a:28:bf:76:77:94:8f:79:2a:d3:c8:7f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df84f759a661f69f2acf1b7233fadc944920c557
Validity
Not Before: Jan 1 10:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c84b9f4de8c339e3df4dd0c7109166c59990b93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:ab:e7:48:04:43:96:a3:f4:e8:a5:96:85:
93:b7:7e:0b:f0:fa:45:fc:89:79:27:55:86:a0:e0:
70:01:b7:8d:51:2b:77:9d:cf:ca:bf:1a:b8:11:b3:
3c:8b:56:d1:3e:53:e5:93:b1:29:3c:a5:c1:eb:16:
18:24:82:ee:16:48:e3:f3:df:bb:9c:b3:7c:21:ea:
19:28:e5:1d:0d:4d:39:87:a6:b2:4c:6a:11:7b:2d:
50:05:41:d1:7f:ef:d9:5b:be:96:4c:f4:8a:73:60:
c9:ed:c4:6f:b7:c0:6c:d7:07:0b:c8:9c:47:a9:42:
1c:a8:58:c3:f8:12:e8:55:2d:9a:85:a1:c7:af:7e:
b1:a7:e3:59:a3:27:7d:94:8a:63:56:fb:2a:e8:4c:
e2:5f:3f:50:0b:6d:0b:24:f5:3b:66:88:23:9f:6d:
9c:38:2e:b5:19:67:bf:09:21:f3:1f:e4:e6:99:a7:
ea:33:76:48:56:79:45:d5:ba:85:31:a5:be:0a:14:
fc:0e:b6:17:7f:70:05:23:b0:21:02:1e:e8:ab:e3:
ad:34:2f:e5:e3:90:21:d9:33:67:13:81:9b:b4:a8:
45:63:e3:88:04:de:18:65:73:bf:49:e6:0d:6e:8f:
ea:c2:22:c1:72:89:b1:81:c5:d1:33:fb:f2:84:1d:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4B:9F:4D:E8:C3:39:E3:DF:4D:D0:C7:10:91:66:C5:99:90:B9:3C
X509v3 Authority Key Identifier:
keyid:DF:84:F7:59:A6:61:F6:9F:2A:CF:1B:72:33:FA:DC:94:49:20:C5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34T3WaZh9p8qzxtyM_rclEkgxVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/yEufTejDOePfTdDHEJFmxZmQuTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/34T3WaZh9p8qzxtyM_rclEkgxVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.211.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fa:78:ad:7c:be:e5:b1:a4:e5:84:04:26:68:4d:64:e2:e6:
5e:bd:99:d4:07:6f:05:33:9a:80:d6:f1:95:79:eb:ec:a2:88:
72:ef:cf:82:f0:2e:cb:21:9c:79:1d:fd:02:8a:c6:95:0c:ba:
b4:62:4f:32:6c:d3:7b:cc:ad:c5:1e:76:39:b2:ae:98:87:36:
4e:d1:01:45:74:6d:83:c4:a6:cd:37:56:10:3a:41:c9:de:57:
09:b9:14:37:a5:69:bb:6c:bc:a2:78:de:68:a2:28:67:5f:59:
55:5b:6c:4a:20:12:62:b2:1a:09:a2:cf:b0:65:dd:5f:06:98:
2b:ae:f7:20:7f:3a:c8:aa:6f:77:53:49:2f:63:0f:04:90:e1:
96:0c:f4:30:a5:54:8d:a8:3a:99:2f:3f:26:a6:29:42:39:b4:
69:37:35:b7:27:53:7c:c4:34:6b:d3:c7:74:b3:c6:40:2e:8e:
43:52:95:56:88:38:06:ce:96:09:d6:7c:f2:06:e5:23:f7:ad:
20:ae:3b:1b:3a:a6:78:ce:28:26:d7:ab:59:56:30:70:d4:eb:
7c:0d:5c:dd:03:89:3f:9e:1c:97:84:7e:b9:20:b7:2c:9d:89:
5c:da:b6:82:9a:20:61:72:55:5e:ec:78:eb:11:89:35:21:19:
6a:0c:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:49:16 2024 by rpki-client on console-ams.rpki-client.org