Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa
File: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (raw, json)
Hash identifier: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=
Subject key identifier: CA:54:3F:61:5B:D2:9A:30:B8:C5:87:C3:83:A3:65:7E:B2:31:B4:9B
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 019421B1B6CF43848DFCF34A504DD5BAECA5
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35691
IP address blocks: 147.78.4.0/24 maxlen: 24
147.78.5.0/24 maxlen: 24
2a09:19c0::/48 maxlen: 48
2a09:19c0:1::/48 maxlen: 48
2a09:19c0:140::/42 maxlen: 42
2a09:19c0:180::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b6:cf:43:84:8d:fc:f3:4a:50:4d:d5:ba:ec:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca543f615bd29a30b8c587c383a3657eb231b49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:3c:80:00:5f:6f:29:b9:40:8c:88:85:68:
d3:b6:56:c1:2d:5a:c9:cc:d7:1f:85:c3:a8:19:aa:
e4:16:0a:f7:b7:ba:41:01:88:6c:97:60:07:b5:cb:
41:be:7c:38:3f:f9:e9:74:be:76:91:ac:97:00:79:
cd:d2:40:79:3c:01:dc:70:9e:40:f6:af:e8:55:c9:
10:58:22:d2:12:a9:d9:f8:18:5f:70:a7:77:e1:88:
0d:53:18:3b:f0:4b:17:9f:8f:17:f7:91:f7:69:77:
65:f4:ca:0d:70:d9:3d:11:56:00:ff:b6:82:8d:d8:
05:0e:ab:3b:96:52:d1:f8:7e:e8:95:3e:f4:fa:73:
b9:0f:9b:10:a3:80:db:c0:0f:6c:b3:b4:1d:6a:0c:
7c:c5:60:ae:96:28:f9:82:81:be:f2:ea:49:47:2b:
89:a4:ca:8a:0b:03:ba:e3:ac:03:fa:6e:75:ff:f9:
e0:aa:81:fc:f8:72:bc:83:97:41:92:45:d1:74:79:
58:cb:14:99:91:e5:3a:34:38:fa:f0:8a:ec:d6:db:
0d:06:ab:fc:fd:0e:60:36:e0:3f:37:23:91:44:5d:
df:95:e4:28:30:0f:95:ff:fb:a8:62:d0:8c:51:8e:
1e:9a:ac:ec:a8:46:5d:36:01:f4:0e:55:4d:84:f8:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:3F:61:5B:D2:9A:30:B8:C5:87:C3:83:A3:65:7E:B2:31:B4:9B
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.4.0/23
IPv6:
2a09:19c0::/47
2a09:19c0:140::-2a09:19c0:1bf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
36:bb:26:24:2c:81:54:61:bb:75:32:16:9d:25:2f:01:3d:06:
73:8a:3a:ca:f7:0f:13:f5:27:09:45:97:49:13:63:24:fa:9e:
f5:fc:7e:f3:0c:be:31:33:52:2b:9e:6a:12:7e:42:cb:4a:bd:
97:1e:29:2e:7e:b1:25:42:4b:46:6f:41:ae:30:87:fd:9c:c0:
8e:a8:92:81:9e:eb:e1:7c:96:a1:f7:e7:dc:21:d4:36:c5:23:
1e:68:6e:06:27:5e:16:e4:60:63:5b:da:e3:3c:9e:6e:f2:e6:
b2:c2:c3:95:dd:3f:9c:4a:4a:63:11:cb:5c:30:c4:3c:80:48:
2f:eb:48:73:6e:64:e5:56:62:17:41:3d:ac:71:89:70:f0:5b:
f9:3d:b1:4d:db:a8:90:16:6d:92:6d:5f:36:31:8e:9a:63:72:
15:7d:52:57:50:f9:56:2c:14:f3:76:fe:3b:76:7a:40:b3:cd:
ef:30:2f:9e:b4:38:f5:0e:19:0f:7f:59:11:5a:57:f8:47:6a:
91:87:20:eb:49:e1:ed:78:7e:f2:3a:8c:04:47:21:aa:c6:dd:
29:2f:06:7d:2a:55:59:93:fc:f1:94:8a:24:bf:cc:0e:29:eb:
81:ae:1d:01:74:01:2d:77:73:3b:53:16:32:38:a5:02:7a:11:
12:76:8a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net