Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/YxaG2rzBw27D5jBTyAarnFEJRQw.roa
File: YxaG2rzBw27D5jBTyAarnFEJRQw.roa (raw, json)
Hash identifier: xHNzZXFg9Hy9BO1QnGdXrB6HpP3zaZaoEo/vWE1bRFs=
Subject key identifier: 63:16:86:DA:BC:C1:C3:6E:C3:E6:30:53:C8:06:AB:9C:51:09:45:0C
Certificate issuer: /CN=8d29a41e6f507a37458a49643a7be5790758f726
Certificate serial: 0185708CE2A3C4482B0580609A7485684376
Authority key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/YxaG2rzBw27D5jBTyAarnFEJRQw.roa
Signing time: Mon 02 Jan 2023 03:35:59 +0000
ROA not before: Mon 02 Jan 2023 03:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198560
IP address blocks: 185.107.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e2:a3:c4:48:2b:05:80:60:9a:74:85:68:43:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d29a41e6f507a37458a49643a7be5790758f726
Validity
Not Before: Jan 2 03:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=631686dabcc1c36ec3e63053c806ab9c5109450c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:7c:a5:fd:38:c1:96:bc:5c:4b:41:8d:a2:
20:04:d2:06:15:ef:18:72:dc:52:4d:4d:be:d4:a5:
e6:28:8b:2c:20:2d:cc:d8:84:27:51:3d:bc:cb:f3:
43:0c:c5:33:39:4c:43:5e:e8:23:cc:e0:c7:b0:ed:
f6:ae:c9:e5:77:0f:2f:47:45:86:a7:88:d0:dc:a1:
fb:96:5f:57:f7:02:14:c9:8b:a6:f2:d1:92:96:44:
97:55:c8:84:37:3a:d4:9b:b8:12:41:2f:d9:c7:55:
31:ac:b4:50:f5:98:b5:7d:39:95:f3:11:0e:d7:d8:
e9:16:73:bf:98:0b:b4:4a:47:84:aa:dc:ed:3c:e9:
d5:f0:03:aa:3a:50:aa:d9:4d:4e:99:68:7e:77:a5:
05:df:22:bc:71:fb:18:6c:2f:b6:30:cd:f8:d0:1c:
f9:71:aa:e3:96:50:69:f9:d0:6d:90:44:f7:e6:be:
99:b4:a3:da:27:92:68:b1:97:a4:f2:12:ab:84:c8:
79:5a:2c:f2:a9:59:5a:8c:7d:2f:f9:97:17:98:ca:
95:9e:f8:94:ff:ae:75:5e:ab:4a:f1:b1:6a:9b:47:
30:e9:b6:9d:4d:e2:e7:f6:02:48:ed:b0:c6:29:e1:
4a:32:73:96:48:43:ac:98:ee:41:35:42:28:53:26:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:16:86:DA:BC:C1:C3:6E:C3:E6:30:53:C8:06:AB:9C:51:09:45:0C
X509v3 Authority Key Identifier:
keyid:8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/YxaG2rzBw27D5jBTyAarnFEJRQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.64.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2b:04:a4:ad:1e:31:86:64:26:ae:63:e6:a4:66:f5:e6:0e:
13:57:73:13:8a:27:4e:46:43:94:2f:b3:de:22:4f:2a:b6:74:
7f:22:20:37:fc:22:9f:35:76:33:d3:38:fd:a2:9c:ef:5f:5e:
70:6e:3c:6f:be:a8:c2:a0:c8:48:91:6f:4e:e3:9d:07:cd:c4:
c9:7d:bf:6d:67:4d:56:fc:b0:06:d1:36:09:a5:fc:f5:27:4a:
44:e9:71:f1:46:53:e4:1c:9f:9f:b5:55:5c:d8:cf:68:42:f4:
6f:fe:0a:5d:62:e6:ca:de:0d:c4:3f:6e:fd:e0:19:c1:17:8a:
fd:3e:45:d0:46:f1:75:cd:0a:f4:95:1f:21:1b:ec:76:67:0e:
28:52:4f:a0:fe:e2:0a:2b:01:91:11:7e:d9:03:ba:d7:00:1b:
de:18:20:f7:14:b1:e9:68:f9:c6:4c:d3:17:12:dd:d5:88:99:
5d:da:31:4e:1a:85:7a:42:11:70:4a:a9:2d:9f:16:7c:96:38:
16:94:b2:3a:7e:e4:e2:5b:89:81:d1:00:9b:55:e6:81:79:02:
14:14:06:bf:c4:6d:9e:81:95:1f:8b:78:37:01:bf:3b:93:fc:
fe:23:af:2e:96:d9:cd:f6:4a:6d:e1:a5:c3:4f:c7:9d:a8:c5:
93:5c:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org