Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa
File: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (raw, json)
Hash identifier: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=
Subject key identifier: 61:3C:B2:35:D1:2A:B4:4E:D3:2C:59:DB:E6:44:98:B5:25:D0:E8:2D
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 0194266B49DEF478ABE005E0600CEDD07F33
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202934
IP address blocks: 213.59.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:49:de:f4:78:ab:e0:05:e0:60:0c:ed:d0:7f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=613cb235d12ab44ed32c59dbe64498b525d0e82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:95:3e:0e:d1:53:68:a6:a5:e5:d3:dd:57:
43:6d:af:9f:29:6a:51:65:26:8c:60:7a:5d:d7:fe:
1c:c2:09:5f:87:e9:9d:b3:e1:28:93:0a:1e:7e:96:
b6:b8:30:d6:bd:96:2f:f1:ec:d2:ea:56:47:cc:8e:
94:db:d5:f8:6e:82:92:37:ef:c6:7b:83:a8:d2:51:
41:38:7e:65:33:57:d0:47:6c:9d:f5:17:32:01:d7:
90:80:17:28:bf:fa:18:a8:aa:3f:95:9c:b7:c3:b1:
4e:f6:23:98:b5:9b:5c:ba:9f:36:da:92:6a:43:aa:
0f:11:2b:53:cd:82:90:99:d0:02:f4:ca:b1:49:8b:
c3:98:e3:84:89:5d:f6:e9:71:33:cf:3a:38:60:72:
f5:82:d0:2b:d0:18:23:4b:36:d0:f0:16:69:bf:ae:
0b:ec:08:e7:f8:4b:fd:a4:cd:d7:47:80:93:b8:25:
f3:4c:f8:6a:d1:50:e6:66:e9:c5:c5:b1:09:ac:41:
bb:f8:f2:19:e0:07:0e:ed:5e:91:3b:69:3f:85:d1:
67:14:9c:c5:6e:20:04:9d:01:79:3b:81:e8:5a:5d:
ac:bb:4a:9f:8c:31:1f:af:09:d6:6e:4b:ab:d9:7f:
95:89:5f:f6:62:11:77:6f:86:c3:ee:80:e1:6a:56:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3C:B2:35:D1:2A:B4:4E:D3:2C:59:DB:E6:44:98:B5:25:D0:E8:2D
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.59.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:90:87:57:f8:bf:0b:6e:31:02:8b:35:94:39:10:45:03:58:
cc:4b:ef:c1:28:87:27:29:a8:32:e3:f4:e8:92:d2:93:18:c9:
0c:f0:e7:ce:e8:34:8c:bf:f6:24:aa:ef:4d:3b:8f:83:1e:53:
35:f9:4b:97:17:1f:59:76:4c:e4:93:56:f7:18:b6:1a:9f:fb:
32:4e:c4:df:78:1e:65:11:c6:0c:50:ab:f8:8c:97:1c:9e:26:
52:13:89:3e:98:8b:2a:3b:1a:03:09:19:8a:84:c2:a0:61:30:
af:60:69:3c:8c:8b:03:ba:d3:0a:10:03:e3:4c:90:cd:13:85:
93:52:5c:ac:12:4d:12:2c:97:72:1d:cc:5e:76:c8:d1:91:c3:
c7:18:06:22:d2:e4:4a:1e:56:29:25:4a:96:9f:cf:39:0b:5c:
eb:1a:9d:9e:84:32:c4:b5:ad:31:49:26:b7:e3:09:bb:05:b5:
f7:c0:25:c0:45:75:dc:16:c1:e3:57:47:19:93:5b:12:29:54:
90:f8:90:64:d2:8a:01:df:c0:04:68:e1:c2:67:d7:74:81:ed:
43:4f:98:91:d5:d2:d5:a1:26:f5:23:34:18:5b:6c:17:bc:ea:
5e:b8:ad:3f:4b:15:96:d1:03:dd:be:96:29:e8:05:2a:2f:0f:
ef:99:f9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net