Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/Yv90h-PdqPJh-5Z-EeRccT87YBo.roa
File: Yv90h-PdqPJh-5Z-EeRccT87YBo.roa (raw, json)
Hash identifier: gmx3xjofXtQTsEw65SZAehJ8/G6TAv+FbHpCkKRGo40=
Subject key identifier: 62:FF:74:87:E3:DD:A8:F2:61:FB:96:7E:11:E4:5C:71:3F:3B:60:1A
Certificate issuer: /CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Certificate serial: 018AE561651493CEEFB9E10160556D75D170
Authority key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/Yv90h-PdqPJh-5Z-EeRccT87YBo.roa
Signing time: Sat 30 Sep 2023 09:17:59 +0000
ROA not before: Sat 30 Sep 2023 09:17:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8282
IP address blocks: 80.252.116.0/22 maxlen: 24
194.70.36.0/24 maxlen: 24
80.252.124.0/22 maxlen: 24
84.246.192.0/22 maxlen: 24
93.188.176.0/21 maxlen: 24
93.188.176.0/22 maxlen: 24
93.188.180.0/22 maxlen: 24
2a01:2c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e5:61:65:14:93:ce:ef:b9:e1:01:60:55:6d:75:d1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Validity
Not Before: Sep 30 09:17:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62ff7487e3dda8f261fb967e11e45c713f3b601a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:fe:a9:1c:04:2f:59:89:67:cd:09:8a:44:
25:e6:bb:11:ff:f2:54:9f:ed:8b:db:e9:4d:94:85:
b4:15:18:2c:9b:83:09:6c:18:0c:eb:dd:8f:1b:2c:
38:4c:3e:c8:07:c3:c0:33:41:48:25:8a:97:42:7f:
79:27:b3:4d:52:b1:c9:3b:97:bf:62:f5:1e:38:1c:
70:b8:ed:12:fb:ff:fd:ea:d5:e6:5e:9d:27:7b:ba:
94:70:f9:03:30:9d:db:86:20:34:d9:36:51:d6:7a:
31:25:fc:05:5c:ae:0f:8b:d4:9e:76:2b:e1:28:7e:
94:12:d6:10:16:13:b4:17:1e:c5:4a:60:08:0c:5a:
b0:f9:11:93:4d:60:05:89:04:a5:8f:b5:2e:ac:db:
90:23:cd:a8:87:00:62:3c:28:e1:3c:c3:f4:d3:d7:
eb:34:9a:c8:98:72:f9:0a:18:06:24:4a:b2:aa:1c:
99:b6:3c:85:c5:91:4f:86:8c:73:ac:65:40:72:ba:
7c:ea:0a:b6:dc:b6:aa:28:55:d9:2f:1e:d4:12:aa:
af:34:f9:d6:c8:ab:26:ec:6d:af:46:c7:cb:86:95:
35:a7:c0:e1:3d:3a:88:07:73:71:8e:df:a2:8f:e5:
f6:4c:ea:dc:03:af:32:a6:67:3d:2e:a8:7a:d4:59:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:74:87:E3:DD:A8:F2:61:FB:96:7E:11:E4:5C:71:3F:3B:60:1A
X509v3 Authority Key Identifier:
keyid:53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/Yv90h-PdqPJh-5Z-EeRccT87YBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.116.0/22
80.252.124.0/22
84.246.192.0/22
93.188.176.0/21
194.70.36.0/24
IPv6:
2a01:2c0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:ed:22:96:88:01:60:ac:95:b2:ef:46:a8:54:d7:81:03:02:
c6:fa:61:99:33:20:76:9b:d8:72:8c:6a:46:d9:41:0a:a8:d0:
4c:5c:44:fa:a9:75:00:e5:41:99:8a:d0:ab:3c:9e:56:9c:36:
60:ce:cf:2f:8d:43:4b:53:f6:70:c2:44:bd:6f:00:ed:49:70:
2f:7c:96:6c:44:5a:e0:76:d1:b0:36:30:42:d4:d4:e1:17:a9:
54:13:27:2f:e0:73:2c:60:3c:37:8c:23:50:56:86:ba:ef:09:
bf:0d:0f:94:5d:ca:cc:ed:5c:a7:c2:b6:c7:0a:ed:a0:23:8a:
5a:c2:93:32:79:2e:ba:89:b7:5d:73:ee:28:a4:28:f0:a8:7f:
79:29:65:ad:01:0c:6d:62:e5:44:12:c9:83:1d:d7:07:04:e3:
fa:d8:57:8f:73:5b:ba:29:0d:d7:d4:4d:10:a1:db:84:32:2e:
9f:d7:57:6d:a5:25:2a:db:56:59:cb:68:59:51:f5:1d:e2:6c:
55:fe:aa:5d:13:06:eb:b4:85:c0:b8:ae:0c:ab:7c:8f:f1:00:
92:bd:a5:a2:32:73:bd:e6:8c:8f:c7:9d:e8:72:6c:a8:4c:4d:
b2:5b:18:ae:73:9f:e1:43:f4:92:db:2d:80:c1:d7:4a:9e:42:
27:1d:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:43 2023 by rpki-client on console.sobornost.net