Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/YExiaarbuvH9TQzZ24egFcmAkD0.roa
File: YExiaarbuvH9TQzZ24egFcmAkD0.roa (raw, json)
Hash identifier: mt2m3RTRnmt9DmA4UJddV/a1P2ybagRmPkEyYSpRGrY=
Subject key identifier: 60:4C:62:69:AA:DB:BA:F1:FD:4D:0C:D9:DB:87:A0:15:C9:80:90:3D
Certificate issuer: /CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Certificate serial: 019427B58CBE0B3C9B9D8656D1A528404769
Authority key identifier: FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/YExiaarbuvH9TQzZ24egFcmAkD0.roa
Signing time: Thu 02 Jan 2025 15:49:56 +0000
ROA not before: Thu 02 Jan 2025 15:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41064
IP address blocks: 91.203.184.0/22 maxlen: 22
193.93.124.0/22 maxlen: 22
2001:678:bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8c:be:0b:3c:9b:9d:86:56:d1:a5:28:40:47:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Validity
Not Before: Jan 2 15:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=604c6269aadbbaf1fd4d0cd9db87a015c980903d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:d2:cd:87:15:42:7b:d2:c9:f1:9e:3b:5a:
3b:36:32:47:15:c1:e7:3f:22:8e:91:e1:67:04:5f:
e9:85:86:31:d4:05:3a:cf:09:2d:c9:fa:26:d5:69:
fe:62:f5:ef:3a:db:f8:9a:7b:99:0e:b8:ad:7e:bf:
19:a1:20:dd:3b:44:09:5d:bc:65:ac:7c:a7:e7:b6:
57:c5:00:1c:a4:e9:c1:d0:a3:36:14:89:b4:54:c0:
e0:f9:ed:3f:da:03:e5:aa:55:37:aa:3f:65:97:69:
bf:46:4c:ee:e4:4f:6d:fe:81:63:d8:42:c0:05:cd:
cb:27:63:00:ed:f2:49:f7:8c:0d:26:6c:2f:81:ef:
36:65:e9:fa:d7:e8:3d:95:24:ec:65:3f:b8:8a:b2:
bb:ec:82:7b:50:e9:89:bf:14:bb:05:e8:5d:e6:27:
56:9f:38:64:47:97:e8:f0:23:8b:80:d3:48:26:e4:
b1:48:6e:c9:bb:ad:bf:88:3f:af:53:47:93:8e:1f:
3e:fe:18:d3:12:8b:c7:29:98:34:37:45:45:e0:92:
a8:a8:74:17:3e:a8:c7:f8:d6:57:05:46:3c:83:99:
1c:8b:2c:1d:f4:fc:28:dd:af:f1:d6:c4:90:e2:41:
29:de:a5:1e:51:fe:78:c0:32:7f:ee:8d:34:10:ff:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4C:62:69:AA:DB:BA:F1:FD:4D:0C:D9:DB:87:A0:15:C9:80:90:3D
X509v3 Authority Key Identifier:
keyid:FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/YExiaarbuvH9TQzZ24egFcmAkD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.184.0/22
193.93.124.0/22
IPv6:
2001:678:bc0::/48
Signature Algorithm: sha256WithRSAEncryption
24:60:3f:83:9c:33:01:ab:a5:9c:b6:30:72:13:20:43:d3:be:
97:54:82:35:29:79:0e:c2:c8:0e:55:d4:bb:c4:45:29:26:bf:
35:3f:b4:38:8f:36:65:46:08:61:fe:ac:9d:4f:81:80:5b:2f:
dc:7b:5d:c1:6d:ec:20:46:88:ac:05:60:15:f1:13:74:a3:cc:
f5:a4:a8:20:0c:d5:6f:81:57:fe:2c:b4:98:28:68:ba:f5:6e:
af:4f:d9:6b:e4:f9:4a:e4:88:ad:cf:53:29:f9:32:f4:e5:cc:
ea:19:f6:de:8a:02:9f:64:42:c8:08:e3:be:51:19:85:6d:57:
cf:2b:27:ec:3a:3b:19:76:1e:5a:a4:ce:f4:4e:05:42:7f:43:
7b:36:be:68:d1:db:8a:39:06:00:b6:01:b8:f8:dc:c9:96:aa:
1f:03:e3:78:7f:d2:f5:f5:4d:0e:ec:21:73:00:77:2b:56:cb:
70:28:31:f1:eb:a6:6f:16:a6:fe:5c:03:4f:82:17:44:fa:bb:
63:8d:e0:2d:d2:65:21:6c:6b:9e:1c:29:ee:75:8a:69:9a:19:
05:dc:d6:42:f0:4c:18:84:d6:5e:88:29:56:31:c1:d7:91:96:
1c:a1:5f:93:eb:71:74:b8:3c:e1:b2:76:80:2a:be:76:c9:81:
cd:4d:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:19 2025 by rpki-client on console.sobornost.net