Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4eafc3-4639-4ae9-80a6-4cc282441cf3/1/1yXzHpMyYLbWuY6OnQYL4tqF5zs.roa
File: 1yXzHpMyYLbWuY6OnQYL4tqF5zs.roa (raw, json)
Hash identifier: 1dyyFHmDqSY0D/0X4cR+4pvSfjB/4NTDUk/R2IskWBk=
Subject key identifier: D7:25:F3:1E:93:32:60:B6:D6:B9:8E:8E:9D:06:0B:E2:DA:85:E7:3B
Certificate issuer: /CN=c32aaf3ab4dea33b5ca1e22b45df6e9aa2d4a035
Certificate serial: 3CD3F8
Authority key identifier: C3:2A:AF:3A:B4:DE:A3:3B:5C:A1:E2:2B:45:DF:6E:9A:A2:D4:A0:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyqvOrTeoztcoeIrRd9umqLUoDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4eafc3-4639-4ae9-80a6-4cc282441cf3/1/1yXzHpMyYLbWuY6OnQYL4tqF5zs.roa
Signing time: Sat 01 Jan 2022 01:58:42 +0000
ROA not before: Sat 01 Jan 2022 01:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210506
IP address blocks: 194.26.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3986424 (0x3cd3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32aaf3ab4dea33b5ca1e22b45df6e9aa2d4a035
Validity
Not Before: Jan 1 01:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d725f31e933260b6d6b98e8e9d060be2da85e73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:51:c4:cb:43:1e:d9:9d:a4:fb:d5:e8:03:
e9:38:e5:47:7b:65:9d:68:d4:38:a1:32:6f:27:eb:
6c:38:87:a3:f7:fe:9f:22:16:d2:dc:0c:66:ea:a8:
dc:da:dd:f3:a7:6e:fc:4b:8d:46:89:c9:f3:b2:26:
87:59:ad:a1:37:ee:0b:83:71:5f:40:9e:40:8f:b0:
8f:13:c2:8d:d1:58:b8:de:35:81:67:0f:65:d2:88:
c9:38:a6:e9:73:22:94:b5:85:5c:00:05:10:20:3e:
41:14:48:df:77:69:bd:93:f0:b7:c7:e0:27:c9:aa:
b2:ab:50:9a:d7:aa:6e:5b:d4:de:51:e9:72:af:05:
1e:7a:74:ac:6b:5c:39:4b:ec:cb:92:c5:7a:d0:a5:
74:61:5a:d1:a4:61:ed:be:fd:57:71:cf:a2:82:ca:
de:06:f4:a4:66:a6:16:6e:ab:6c:60:e0:7b:44:ef:
43:41:83:7a:d8:2c:a2:f3:32:1d:54:b6:ce:2f:f1:
27:da:8c:97:a8:70:75:f2:88:18:d5:68:4d:ed:5c:
09:8a:7f:2a:4f:c1:b3:93:11:a8:c2:18:e1:e6:57:
da:8a:1f:c6:46:72:f5:af:ff:2e:58:a4:bf:a9:a5:
74:00:87:06:72:59:a3:2d:7d:74:79:ac:74:63:c5:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:25:F3:1E:93:32:60:B6:D6:B9:8E:8E:9D:06:0B:E2:DA:85:E7:3B
X509v3 Authority Key Identifier:
keyid:C3:2A:AF:3A:B4:DE:A3:3B:5C:A1:E2:2B:45:DF:6E:9A:A2:D4:A0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyqvOrTeoztcoeIrRd9umqLUoDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4eafc3-4639-4ae9-80a6-4cc282441cf3/1/1yXzHpMyYLbWuY6OnQYL4tqF5zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4eafc3-4639-4ae9-80a6-4cc282441cf3/1/wyqvOrTeoztcoeIrRd9umqLUoDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.201.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3a:95:0a:ba:2e:c7:1e:bf:d7:3f:e3:9a:ff:90:d7:ee:86:
2b:0b:95:a4:a4:5b:1b:4c:26:0a:ad:b0:7c:fc:0c:a8:bf:cb:
b5:65:bf:15:c4:b3:3d:d1:90:27:d5:5d:4b:c2:e6:df:2d:58:
bc:c5:15:dd:91:c0:1a:d1:fb:7e:7e:69:95:80:ff:7c:bc:0d:
fc:fb:ce:00:da:4e:05:a0:27:5a:a5:c4:c8:c0:5f:a3:a7:ee:
48:7c:3b:19:d7:ec:bc:35:ee:25:1c:b9:7a:d3:4f:13:a7:6f:
94:ea:ef:4b:a2:85:c7:2d:e5:c6:af:f2:03:1b:71:7e:50:34:
d6:c7:d5:3d:1f:3d:55:92:60:d7:a2:9a:d7:ee:0c:72:b0:0a:
1a:d9:ea:32:4a:2b:0a:b0:f7:3c:e6:40:e5:d4:be:d7:38:4c:
48:d3:6f:79:82:b4:c7:68:04:0f:0d:ea:61:34:d2:ab:bd:37:
76:e0:4a:61:71:a5:67:d1:3f:21:ca:87:6b:cc:75:4a:33:1d:
6a:37:0c:1f:06:3e:51:8d:69:0f:1d:91:e3:80:c2:ec:d6:18:
f1:a1:49:c9:cc:a2:36:3c:f4:40:c9:56:f6:35:02:22:b7:1b:
72:82:84:90:7b:16:4a:f3:dc:6d:4c:ff:21:ff:ed:8c:09:21:
16:71:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net