Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/1-ykn2DQkL7xY79cXKlTrCd1V2IA.roa
File: 1-ykn2DQkL7xY79cXKlTrCd1V2IA.roa (raw, json)
Hash identifier: 0SL9Ajn1h8MBg41PxW1Lhz0xqi1MPAlviayJZB54YJY=
Subject key identifier: FB:29:27:D8:34:24:2F:BC:58:EF:D7:17:2A:54:EB:09:DD:55:D8:80
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802C8362956B427456B0CABE542787B
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/1-ykn2DQkL7xY79cXKlTrCd1V2IA.roa
Signing time: Tue 02 Jan 2024 02:31:14 +0000
ROA not before: Tue 02 Jan 2024 02:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42285
IP address blocks: 188.241.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:c8:36:29:56:b4:27:45:6b:0c:ab:e5:42:78:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb2927d834242fbc58efd7172a54eb09dd55d880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:92:50:ce:1c:87:b2:89:28:fa:13:09:bd:
f3:ef:b7:df:75:b1:d8:e2:66:1f:2b:52:40:a1:2b:
71:c2:83:59:ea:d3:87:61:81:92:f4:aa:9e:71:ae:
06:13:e9:b8:a4:cb:36:46:a5:69:cf:a7:f0:f5:eb:
e1:e0:e3:c4:8e:ed:3a:eb:9f:10:ac:1b:80:dc:26:
f2:3f:b1:32:5f:8e:1b:1e:fe:86:c5:22:de:d3:ed:
87:0c:03:3f:51:cb:39:e3:81:a3:c9:58:c0:40:e8:
27:0d:a0:fc:6e:0e:5a:60:c0:c3:a9:39:05:a3:43:
df:2d:33:89:2f:c2:ff:c1:07:4a:3c:b3:36:47:d1:
06:20:94:de:7a:0a:3c:00:51:5d:1f:95:f2:a4:a1:
2f:8b:89:c1:b2:44:22:5e:88:37:62:63:f1:46:59:
44:c7:1e:a9:bd:e6:03:6c:1d:25:b3:5f:e8:a1:1a:
71:26:92:a7:af:9e:d3:c0:ea:df:f1:53:93:d2:fd:
59:cd:cf:a6:3c:f0:04:20:f2:46:a9:09:c1:8f:13:
4e:1d:42:d7:ff:ed:3c:21:8c:06:d6:ab:b3:44:82:
e1:e0:8a:14:fd:92:44:be:5b:dc:87:a6:e2:0b:3d:
0f:34:18:cd:81:85:6a:89:14:1f:5e:4f:2b:09:91:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:29:27:D8:34:24:2F:BC:58:EF:D7:17:2A:54:EB:09:DD:55:D8:80
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/1-ykn2DQkL7xY79cXKlTrCd1V2IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.71.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d3:32:86:6a:50:fa:f0:a0:b5:5f:f8:b2:80:f0:49:58:da:
e6:ea:0f:1a:b6:2a:5b:14:02:ae:67:1b:52:f4:4c:91:41:b9:
24:c3:8a:56:51:b6:1c:98:78:31:96:98:3c:23:89:b9:7e:96:
e3:80:6c:56:7d:28:d9:5f:2a:8a:4a:69:e2:7a:0d:ee:19:27:
fd:51:c6:96:26:1f:b9:0c:34:95:a7:27:35:d7:c7:7f:24:97:
44:71:52:f0:6c:4c:8d:d8:a1:b0:67:a6:28:31:f5:71:0c:48:
6b:b6:bc:24:eb:95:5e:7d:64:10:a3:d4:06:d1:d9:5c:f6:48:
b5:02:4c:dc:7e:6c:59:17:de:4b:32:c9:ce:60:15:5d:6e:de:
37:60:fc:61:89:0e:fd:30:b5:d0:e8:09:05:e6:77:2f:62:b0:
f1:70:17:de:2d:45:76:c1:47:57:9b:d8:54:a0:9d:a6:a2:c0:
d4:d4:e7:5e:d2:0c:2c:88:cc:9d:ba:d9:33:cf:1b:70:14:a9:
4c:45:a5:82:11:60:86:1f:fe:cf:6c:82:74:9e:f1:b9:2a:c7:
03:1a:b2:1b:d0:4d:e0:0c:56:71:9a:8e:e1:f5:41:0a:5d:a7:
f8:da:21:0e:f9:52:0b:bf:ff:f4:4a:9e:aa:09:c3:41:ce:c1:
44:29:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 00:59:56 2024 by rpki-client on console.sobornost.net