Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/_yLmchLwIYVTnPdJc9fw9h7BqNI.roa
File: _yLmchLwIYVTnPdJc9fw9h7BqNI.roa (raw, json)
Hash identifier: jQg4aqJLhfqC2o9cWdzjV4aGpmH8JtaZPWEi/oExAo8=
Subject key identifier: FF:22:E6:72:12:F0:21:85:53:9C:F7:49:73:D7:F0:F6:1E:C1:A8:D2
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 0194D5C9E869EB363716DD7EA6ABA6CB63A3
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/_yLmchLwIYVTnPdJc9fw9h7BqNI.roa
Signing time: Wed 05 Feb 2025 11:06:06 +0000
ROA not before: Wed 05 Feb 2025 11:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200232
IP address blocks: 45.88.226.0/24 maxlen: 24
194.31.131.0/24 maxlen: 24
2a13:6ec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:c9:e8:69:eb:36:37:16:dd:7e:a6:ab:a6:cb:63:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Feb 5 11:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff22e67212f02185539cf74973d7f0f61ec1a8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:b8:16:d5:0a:09:e1:aa:e3:c1:df:44:cc:
9a:8a:55:90:cf:e2:ab:f5:42:a1:2f:cb:66:de:c7:
08:4d:31:21:f0:68:f5:fb:6d:f3:e4:ee:5e:87:07:
00:3e:91:7e:e6:b5:b8:c1:57:d6:ef:1e:5d:a1:d1:
a9:4b:d5:9c:d8:c3:32:c2:82:c7:06:68:37:4d:2b:
a5:82:1a:eb:a5:42:9c:d0:04:c4:d5:ef:52:8c:b3:
4b:79:bf:7c:52:6d:5b:df:67:82:39:73:04:a3:c9:
d8:0f:5d:f0:f6:5e:ae:ee:61:32:63:b2:7e:ca:d0:
39:5b:4f:2c:b5:4f:65:43:6f:8e:26:2d:05:2d:71:
5f:ff:fe:6a:64:3d:e6:96:1e:df:ea:24:62:80:69:
5b:c6:91:c9:6a:61:bd:ba:bb:47:e0:72:95:50:b8:
48:61:47:1e:71:a1:f4:0a:45:34:dd:28:28:3a:5c:
b9:f5:01:d8:c7:1c:a7:91:6c:fc:e9:d0:4c:31:6c:
32:39:d5:2a:48:fe:12:d6:be:2a:c3:ad:85:8a:7c:
d1:2f:45:c0:33:cd:1c:0b:51:0e:a0:b0:2e:50:4d:
75:9d:da:3d:60:ed:55:ba:f0:9b:d7:bc:1f:09:17:
12:c2:30:bf:4c:39:d0:51:da:cb:c2:d2:f3:cd:9d:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:22:E6:72:12:F0:21:85:53:9C:F7:49:73:D7:F0:F6:1E:C1:A8:D2
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/_yLmchLwIYVTnPdJc9fw9h7BqNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.226.0/24
194.31.131.0/24
IPv6:
2a13:6ec0::/32
Signature Algorithm: sha256WithRSAEncryption
23:cf:e2:ba:e3:70:53:d2:29:22:04:41:02:52:e7:cf:81:ac:
45:e4:e8:ab:89:b9:03:1a:b2:1d:ea:6c:62:83:ed:a7:02:df:
df:5c:f7:01:14:69:84:1d:96:51:03:fa:de:33:a6:ec:19:84:
6a:2a:82:3f:21:84:2a:5b:ea:1b:4d:3e:19:16:b6:2d:19:a5:
d4:e6:b9:04:e7:15:4d:c5:96:9e:d2:68:f5:1e:ad:5d:72:b3:
7c:e2:a9:f8:20:01:cb:10:16:be:43:8e:3e:0c:80:f2:be:fa:
cd:e6:2d:e9:79:fc:59:48:69:7b:26:bb:6d:4a:62:5f:65:bf:
b0:31:cd:81:d9:29:68:5d:6d:5a:fb:d4:3d:81:98:7b:46:b3:
6c:f9:34:b6:14:b3:b6:3f:ce:4e:a6:73:be:bf:98:ab:bc:3d:
c4:5b:a0:5f:55:12:41:ff:bb:f2:ea:37:e4:72:10:30:5f:fc:
71:79:ee:a8:5b:fb:08:03:19:3e:60:bb:38:ab:33:6e:a0:63:
b4:19:7e:a4:a0:9c:82:35:d2:8e:31:9b:0d:90:66:4d:a4:0d:
e1:8a:53:5d:47:64:91:d6:57:fc:31:7c:8e:a3:05:d8:dd:08:
17:f2:87:03:21:86:4f:3a:ad:1d:76:76:24:f3:bb:54:24:4d:
15:a5:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net