Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/NYFopwL-w_bBBIlHtowdWQDOW3Q.roa
File: NYFopwL-w_bBBIlHtowdWQDOW3Q.roa (raw, json)
Hash identifier: EzMEDN2SKUc84PC6U4alLMVfJNflvZxYBkbmcDdlxgg=
Subject key identifier: 35:81:68:A7:02:FE:C3:F6:C1:04:89:47:B6:8C:1D:59:00:CE:5B:74
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 018CC795454D389E85F5FADC1349A1B7C110
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/NYFopwL-w_bBBIlHtowdWQDOW3Q.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200190
IP address blocks: 185.169.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:45:4d:38:9e:85:f5:fa:dc:13:49:a1:b7:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=358168a702fec3f6c1048947b68c1d5900ce5b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:f4:4d:75:4a:a8:ea:c5:c0:d9:27:7f:79:
ff:9d:54:64:ae:52:1b:05:be:98:1c:a0:19:19:f9:
78:bc:56:6a:6f:ea:6a:2d:08:9c:e7:7e:05:8c:d3:
b2:bd:d4:34:8c:a4:f2:d4:5b:5e:8c:16:12:78:81:
ee:25:77:13:45:74:3c:42:b1:6a:02:31:a7:f0:39:
38:b8:ec:05:63:ef:27:63:ee:50:1a:c3:31:98:32:
e2:e5:94:39:7b:cd:48:1b:28:a7:3f:16:5b:8f:cf:
00:e8:52:8b:c8:93:3e:72:2e:de:87:56:2b:90:86:
85:5d:63:d1:dd:b0:de:73:64:ff:8b:ed:49:e4:e7:
38:4b:2b:66:54:67:7b:b8:12:fd:37:e8:d0:54:48:
3d:87:3d:73:d5:79:77:f8:79:52:c5:3e:f4:54:22:
cf:19:2e:3e:2c:3e:d3:27:26:ab:18:4b:18:c1:22:
68:22:4a:f2:72:3c:36:e0:f1:a2:59:f5:2b:15:6b:
33:c7:88:8f:f4:cb:b5:d1:60:3b:ac:fe:fb:5d:8b:
79:24:1d:9f:21:b5:3e:16:4a:b0:e0:e2:36:e4:fb:
06:21:60:de:a6:e6:f1:dd:92:d7:96:fc:68:5b:aa:
0c:2a:86:9f:07:1c:cc:f8:61:98:16:87:25:84:6d:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:68:A7:02:FE:C3:F6:C1:04:89:47:B6:8C:1D:59:00:CE:5B:74
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/NYFopwL-w_bBBIlHtowdWQDOW3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0f:56:78:fe:28:99:d5:af:ba:91:1b:78:f5:c5:8e:6f:01:
5d:69:29:73:16:ee:9a:eb:40:65:27:02:93:95:73:5b:9a:e3:
da:22:c4:9e:a3:21:46:4e:ae:71:f2:fa:25:ce:24:4c:d8:17:
b9:b3:98:66:50:d9:1a:43:5d:1f:e7:c5:c4:a6:68:7f:5a:71:
1c:ce:6d:0b:c2:a7:58:e1:56:8b:1c:2e:b7:a6:62:e8:57:24:
13:bf:ad:ac:db:f9:44:01:5c:cf:53:ec:bb:6f:14:bf:57:4a:
b7:10:21:b8:e6:8e:69:a5:48:59:77:e8:1a:f2:10:2c:a2:83:
f6:2b:5b:35:b4:6d:29:01:0a:86:65:8d:b1:39:87:33:60:e1:
9c:c6:ed:98:6f:fd:ea:47:9d:4b:8a:b4:50:8b:79:5a:36:83:
b9:e3:41:d2:a0:82:f0:ed:d1:23:58:9b:9b:03:a5:c0:07:fd:
d1:c5:eb:91:2b:18:4d:d5:ca:55:88:29:35:02:1a:df:f4:8a:
4b:4c:a7:b4:56:21:cb:e6:3c:68:91:2b:4f:a2:f7:f3:4c:22:
d6:63:b0:00:01:9b:44:5d:88:47:04:49:ed:b8:73:6a:ca:ab:
fd:d4:ae:76:1f:97:c5:64:d8:af:3e:1f:a3:87:06:b6:af:69:
e5:44:a6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:41 2024 by rpki-client on console.sobornost.net