Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/yslx6H8CxkmB5eJ6GsJ00aKGHvc.roa
File: yslx6H8CxkmB5eJ6GsJ00aKGHvc.roa (raw, json)
Hash identifier: C1F/5vxIilaeDaJGXcioovy5J1zB7GHCUZGFv6IDVZw=
Subject key identifier: CA:C9:71:E8:7F:02:C6:49:81:E5:E2:7A:1A:C2:74:D1:A2:86:1E:F7
Certificate issuer: /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial: 019427A392F685A6FEEC9BC66C06CBEBD7CD
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/yslx6H8CxkmB5eJ6GsJ00aKGHvc.roa
Signing time: Thu 02 Jan 2025 15:30:18 +0000
ROA not before: Thu 02 Jan 2025 15:30:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.204.26.0/24 maxlen: 24
31.204.49.0/24 maxlen: 24
31.204.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:a3:92:f6:85:a6:fe:ec:9b:c6:6c:06:cb:eb:d7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Validity
Not Before: Jan 2 15:30:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac971e87f02c64981e5e27a1ac274d1a2861ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:f8:27:f0:2d:55:4e:d8:e8:13:e2:0a:db:
ff:06:1e:36:6d:b4:fd:e6:f3:62:08:f6:87:7d:58:
a0:3a:6b:f2:b1:2c:ad:97:58:95:e3:5d:06:ce:6c:
84:12:1d:f5:dc:1a:cc:17:3e:bc:95:e0:d8:2c:57:
2e:39:1c:c2:77:fb:61:1b:b3:fa:67:66:3a:1e:07:
f7:71:3f:58:bf:f2:79:43:1d:81:8d:be:14:c5:84:
02:b0:2a:10:48:b2:90:b2:41:71:b3:a2:ed:b6:2e:
a9:33:d4:ea:c1:e2:3e:d8:69:44:af:fe:97:9c:33:
cf:cd:8a:b9:9f:a4:73:78:22:3e:ec:ef:b0:2a:1d:
7c:58:e9:33:d1:9d:92:45:f0:a3:45:7f:f7:7b:41:
97:de:43:c7:d6:2c:53:87:79:48:34:76:c4:b8:0a:
12:39:c0:7b:e2:1f:ae:33:3f:3c:31:38:50:e0:ba:
d5:4b:8a:a0:5f:98:6e:d5:8a:c9:ab:c9:a2:cf:cb:
f1:c9:f9:c2:05:53:72:af:de:c4:fe:7b:25:75:56:
76:7a:65:6f:46:ef:e0:c4:93:17:b7:6a:d4:ed:ce:
e5:13:3a:11:19:b5:f3:4b:57:46:97:d1:b4:8b:51:
5b:e6:86:6c:b0:51:c8:63:a1:5c:f3:ee:1b:3c:23:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:71:E8:7F:02:C6:49:81:E5:E2:7A:1A:C2:74:D1:A2:86:1E:F7
X509v3 Authority Key Identifier:
keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/yslx6H8CxkmB5eJ6GsJ00aKGHvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.26.0/24
31.204.49.0/24
31.204.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:cc:b5:0c:b0:c5:4d:3b:2a:25:7d:94:3c:59:fc:83:2d:a5:
b5:d1:6e:47:7d:bd:5e:0c:05:9b:cc:c6:89:6f:82:7b:1e:08:
da:42:03:1c:42:8b:28:0d:83:a5:88:0e:09:9e:93:4e:49:cc:
26:a2:57:8b:81:51:9c:f2:06:ca:89:f7:ae:c7:dd:3d:14:ab:
87:4e:35:77:7a:59:f4:1e:96:f0:38:f3:92:fb:15:8b:a1:aa:
d1:2b:6e:7e:c8:47:2a:16:9d:0d:80:f9:56:8b:c7:4f:e3:d1:
44:d8:71:f4:07:e8:aa:95:45:d0:f6:19:9d:e2:36:d2:73:81:
11:d9:3b:53:0c:60:ac:80:21:3a:20:76:e1:ca:26:dd:56:97:
18:83:75:89:8c:b2:4d:c7:9a:78:e9:29:79:29:52:32:dc:0c:
e8:8b:5c:58:96:9c:43:e2:c0:e8:fb:7c:c0:3a:b7:c6:77:fc:
74:c0:32:7f:03:3a:96:d6:62:fe:dc:2e:db:c4:0f:1e:e3:c4:
7d:11:0e:5a:86:0d:3d:f1:ae:29:c4:79:86:d5:23:08:ae:4e:
af:5e:db:1c:e4:6b:9c:19:f4:0a:d2:4c:b3:8e:ac:cf:47:f7:
a4:c6:ac:b2:4a:be:94:40:a8:94:8b:ba:d1:50:98:19:09:88:
80:7c:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net