Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/Yzl-TsBruLbp6clu7Q2IexOaQIA.roa
File: Yzl-TsBruLbp6clu7Q2IexOaQIA.roa (raw, json)
Hash identifier: h8cj0MpyodNclAF4X/OllC8+HNKuBQ3B2EFgEqM9+5A=
Subject key identifier: 63:39:7E:4E:C0:6B:B8:B6:E9:E9:C9:6E:ED:0D:88:7B:13:9A:40:80
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 01941FFA599E173B0942C6922C148A056FC7
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/Yzl-TsBruLbp6clu7Q2IexOaQIA.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200896
IP address blocks: 185.92.84.0/24 maxlen: 24
185.92.85.0/24 maxlen: 24
185.92.86.0/24 maxlen: 24
185.92.87.0/24 maxlen: 24
2a05:f140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:59:9e:17:3b:09:42:c6:92:2c:14:8a:05:6f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63397e4ec06bb8b6e9e9c96eed0d887b139a4080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6c:c2:37:dd:69:3d:f6:88:b5:0a:37:6f:aa:
0d:a7:4f:3f:f4:95:ce:9c:2f:07:65:4c:fd:b2:65:
c2:06:71:5f:78:2f:62:7c:88:1e:e4:2f:91:f4:aa:
56:f0:73:82:cc:af:82:53:dd:9c:84:ef:8b:df:c8:
f9:82:5c:92:16:cf:5c:dd:52:f7:18:e4:96:cc:e4:
b6:d2:3e:99:48:54:37:a6:c2:f1:9a:0b:de:59:29:
c1:b4:29:06:73:a2:6a:2c:e3:cf:0b:ea:3a:d5:b4:
57:d1:d4:c2:0a:e7:ff:39:63:12:13:d7:4d:fe:51:
f9:ff:9c:90:72:35:e6:bd:9a:c2:db:8e:ce:4b:6f:
6f:e6:86:c4:2b:2a:81:a1:4f:21:c7:16:2a:1f:17:
cd:b9:10:3e:84:11:30:f5:bf:ef:64:d4:05:a3:61:
8d:de:9b:45:77:13:e5:51:37:ac:91:63:d1:9c:e7:
f7:31:dc:dd:31:d4:ee:61:62:82:dd:2a:f1:dc:b0:
36:e9:bb:d3:51:2c:ca:c7:40:8e:2f:72:e6:fb:3f:
ce:de:7e:ec:7d:ae:8b:86:cd:fd:4f:3d:00:6c:22:
7d:e1:97:bc:03:c9:a6:ad:b8:9e:8c:19:97:9d:24:
90:b6:cc:5f:ac:0b:3a:27:18:a0:96:77:bd:e0:28:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:39:7E:4E:C0:6B:B8:B6:E9:E9:C9:6E:ED:0D:88:7B:13:9A:40:80
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/Yzl-TsBruLbp6clu7Q2IexOaQIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.84.0/22
IPv6:
2a05:f140::/29
Signature Algorithm: sha256WithRSAEncryption
20:fe:08:61:a0:63:03:b1:80:e1:72:63:54:97:d2:22:2c:a8:
19:7e:13:0e:76:6d:59:9a:b0:4b:74:75:6f:6f:fe:78:7b:ba:
dc:f6:55:07:1d:03:ea:0d:81:d8:a3:1b:58:04:15:14:e4:ad:
4f:db:80:3a:b3:be:2f:4f:c7:75:0a:14:f4:48:2d:7d:b0:4a:
77:02:55:46:fa:97:f9:9d:41:cc:b3:b9:f1:da:c0:99:1f:5a:
df:e1:de:32:bc:c7:10:12:b2:e0:fe:17:a2:cd:c0:b7:9c:1d:
44:5e:16:98:9f:ed:bb:6f:9f:23:58:9a:be:20:82:77:7b:74:
16:57:98:9a:54:38:54:2f:9f:a6:57:bf:d6:f0:02:e5:09:93:
ce:ba:69:10:9e:3c:48:cd:d4:3c:d7:9f:d6:73:29:6a:86:6a:
8e:cf:aa:4d:96:a1:7a:d2:9b:87:61:1a:af:d2:85:64:0f:d2:
b4:96:af:fb:b4:77:98:d0:a0:81:6c:8d:cc:db:1e:32:4e:7b:
49:e1:83:c4:43:63:2f:98:d7:16:71:0b:b5:07:db:d9:a7:94:
1b:63:db:9b:29:19:fe:3a:b7:f8:b9:1a:12:b2:a7:cb:87:0d:
60:e7:cc:8a:dc:98:38:a8:5d:36:35:78:ec:27:2a:e2:e1:21:
88:49:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:48 2025 by rpki-client on console.sobornost.net