Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Yo006MUapAA8UheCbovqEg9S6iU.roa
File: Yo006MUapAA8UheCbovqEg9S6iU.roa (raw, json)
Hash identifier: 9lqf9qFLr52GENBgUKynD21ycgDKtB7wcXmhsd/oumA=
Subject key identifier: 62:8D:34:E8:C5:1A:A4:00:3C:52:17:82:6E:8B:EA:12:0F:52:EA:25
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03C5580F
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Yo006MUapAA8UheCbovqEg9S6iU.roa
Signing time: Thu 03 Mar 2022 07:36:16 +0000
ROA not before: Thu 03 Mar 2022 07:36:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63264783 (0x3c5580f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 3 07:36:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628d34e8c51aa4003c5217826e8bea120f52ea25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:0a:5c:e6:b7:8a:d3:55:d8:cf:57:55:99:
f0:e1:f1:c3:05:a6:98:c5:fb:0e:15:d6:75:64:e0:
bf:7a:05:21:c3:26:2e:b9:4f:43:56:e6:44:be:b8:
6b:52:f0:3f:df:30:b2:9d:e9:65:10:b9:4b:98:8d:
eb:20:27:4a:d7:eb:5e:f8:92:78:4b:12:b7:90:54:
97:2d:0e:e9:8b:d0:51:12:a9:06:01:85:33:9a:a4:
e5:9c:e0:80:3c:47:c5:d5:31:37:49:4f:7c:9c:be:
df:a3:1e:54:32:f2:6b:d3:ac:bf:2c:f7:20:a9:b4:
1d:44:08:14:0c:75:8e:55:75:92:99:32:de:0c:88:
6b:33:73:dc:28:70:84:8f:17:e3:69:cb:b2:91:6a:
1f:c0:3a:73:cc:aa:18:43:92:fd:d7:f1:34:1f:74:
82:91:73:08:0b:c0:3a:cb:b9:ae:0e:6c:eb:5f:30:
8e:69:bf:0f:37:5d:36:da:c1:be:a9:d0:14:ea:52:
b6:f2:3d:5a:21:2e:4b:30:87:6d:4d:f9:09:3d:20:
6b:66:ac:8f:14:ae:74:50:4b:f2:c7:90:f0:23:bc:
73:e7:9e:d9:f6:03:b6:8a:00:95:30:c6:30:ba:34:
fc:dd:76:55:d9:50:35:53:18:f9:12:0f:ed:8a:46:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8D:34:E8:C5:1A:A4:00:3C:52:17:82:6E:8B:EA:12:0F:52:EA:25
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Yo006MUapAA8UheCbovqEg9S6iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.66.0/24
193.111.125.0/24
193.142.4.0/24
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:69:0f:6d:1f:a4:03:33:ca:05:56:a9:18:57:ae:c8:78:71:
fc:f5:44:25:c2:0a:ec:bd:d7:b1:bb:e9:b5:8e:c9:e1:69:27:
6e:90:a6:74:7b:77:15:ac:0c:03:1c:83:a9:ab:6b:32:30:61:
6a:60:29:d3:6e:44:d1:05:1d:23:09:29:de:91:19:a8:12:36:
50:53:63:ed:bf:02:66:1e:54:90:5a:d5:0c:53:22:43:8e:76:
32:39:83:5e:8e:8a:02:21:bb:a8:d9:b1:1f:0e:81:ac:36:ae:
e6:02:80:79:f1:0a:e9:20:fd:46:3e:c3:c4:d9:c0:9c:46:9e:
57:8e:96:3c:8f:7d:a6:d1:54:be:ab:ad:35:a0:86:66:5b:55:
e5:e2:e0:96:36:1c:7b:0d:ad:5f:71:37:89:09:5e:11:39:94:
24:12:a0:13:e2:2d:b0:1a:04:8d:05:81:5e:a6:e4:72:cd:ce:
61:da:f1:6d:b2:a6:30:47:3b:45:76:ea:17:08:15:2e:c6:87:
f9:be:09:db:6b:80:08:58:ea:6f:24:15:d4:f1:02:ec:7a:de:
bd:ff:fe:f6:13:b1:a2:ee:2e:cf:67:f1:86:18:f0:09:20:9b:
fd:1f:80:4e:50:89:02:a9:07:83:d7:9c:84:33:f2:23:8d:a0:
a1:05:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:41 2023 by rpki-client on console.sobornost.net