Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/yJts8iRe97z0LBku4nfeAAQmzuI.roa
File: yJts8iRe97z0LBku4nfeAAQmzuI.roa (raw, json)
Hash identifier: Kml13BMft8IVP0nzevzpw72P/X7Z+HrpFqQAw2Yg/rY=
Subject key identifier: C8:9B:6C:F2:24:5E:F7:BC:F4:2C:19:2E:E2:77:DE:00:04:26:CE:E2
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BA8A0DA0609AC309E8CF59C66984
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/yJts8iRe97z0LBku4nfeAAQmzuI.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200188
IP address blocks: 194.181.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ba:8a:0d:a0:60:9a:c3:09:e8:cf:59:c6:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c89b6cf2245ef7bcf42c192ee277de000426cee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:2c:e0:18:44:8e:9a:27:e2:c3:10:2d:19:
da:78:a0:92:86:0b:ba:b3:c5:50:7a:4a:90:c3:d0:
99:6d:22:ae:e4:26:c0:ff:77:16:f8:0c:67:e3:a8:
45:d3:b8:e9:21:52:e2:3d:88:00:27:0c:e5:ce:4b:
ef:65:9c:39:69:bf:e8:b0:f7:f0:fb:22:2e:6b:16:
07:f5:26:18:aa:db:a0:68:96:07:85:4b:99:d8:70:
42:22:c5:76:b1:b6:5f:ef:35:16:ac:8c:95:eb:d5:
6e:e5:8d:e4:b7:33:ad:74:8e:6a:88:a3:8a:87:00:
7b:fd:93:9a:12:56:17:3c:9a:b5:38:2d:20:08:e1:
1f:ed:65:94:81:77:ae:9c:c6:46:45:90:7b:2b:21:
c0:7b:5d:84:9b:3a:fd:ba:bc:26:61:fe:a5:da:e4:
a3:a1:1d:8f:c8:1c:a4:79:c0:61:11:90:ca:40:63:
e6:37:f5:ca:9b:5f:1d:bd:89:4a:13:51:dd:63:60:
ed:de:cc:28:b4:8e:c9:c3:46:97:d0:d5:f5:52:2e:
59:9c:16:94:52:d4:d1:53:ec:58:6b:51:9c:ac:fd:
49:89:c0:cc:af:51:bf:bc:e2:19:69:99:40:34:98:
12:1f:66:ec:de:b9:a0:41:b2:ce:1e:1d:42:e7:6d:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:6C:F2:24:5E:F7:BC:F4:2C:19:2E:E2:77:DE:00:04:26:CE:E2
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/yJts8iRe97z0LBku4nfeAAQmzuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.60.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d0:68:71:bb:8a:bb:9d:12:7e:92:33:48:9b:e9:8d:f3:4b:
c2:ad:8f:76:d5:db:55:39:cb:f3:71:07:14:39:8b:32:a0:5c:
6e:cd:4d:1c:20:97:ab:a3:c7:e1:29:44:4c:52:05:e3:a0:99:
a6:85:6a:fc:bb:8b:68:97:37:31:e2:29:95:4c:69:00:c2:8a:
e2:77:78:92:a4:6b:7e:bf:39:32:c3:4c:26:28:32:c2:fc:6a:
49:63:b8:d7:ff:50:2c:41:40:b5:0c:44:74:ff:88:8f:e9:17:
ff:6f:84:1e:e2:94:10:ac:12:2e:bb:f7:bc:36:69:cd:d7:19:
5d:2f:c0:66:c3:f4:53:7b:a9:1a:13:88:e3:56:e5:3f:14:18:
be:32:8d:a1:63:73:30:8b:87:be:d8:d1:2a:2e:be:28:d5:62:
06:7c:d9:37:f3:ac:77:81:b4:fd:f3:1e:fb:00:62:e4:6e:2e:
98:70:6d:28:9b:55:44:81:8a:f2:df:6e:e8:c8:10:c7:ce:bc:
b8:ed:c1:c8:6d:c7:82:19:3b:eb:1d:58:db:09:b9:93:24:9d:
1b:7a:9d:99:ba:9b:07:7b:66:03:5f:cc:c5:13:9b:c4:a2:66:
23:07:17:52:7e:63:cc:1d:77:e8:37:f8:75:d7:ae:fb:e3:1b:
72:36:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net