Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/yPCgCU1P8qsRL1NldHJFuXXi8fY.roa
File: yPCgCU1P8qsRL1NldHJFuXXi8fY.roa (raw, json)
Hash identifier: QxUStTEaDBwq04nd8zleLK8Ic3FD7ZqgfgvFtxveZ7w=
Subject key identifier: C8:F0:A0:09:4D:4F:F2:AB:11:2F:53:65:74:72:45:B9:75:E2:F1:F6
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019082A7E10F0C92BD2C5042AE8F804D6590
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/yPCgCU1P8qsRL1NldHJFuXXi8fY.roa
Signing time: Fri 05 Jul 2024 11:29:18 +0000
ROA not before: Fri 05 Jul 2024 11:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204873
IP address blocks: 46.238.236.0/22 maxlen: 22
89.191.152.0/23 maxlen: 23
94.101.16.0/20 maxlen: 21
185.174.152.0/23 maxlen: 24
2001:90f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:a7:e1:0f:0c:92:bd:2c:50:42:ae:8f:80:4d:65:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jul 5 11:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8f0a0094d4ff2ab112f5365747245b975e2f1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:40:85:80:00:06:d2:d1:86:1e:ce:4d:6e:
b5:6a:b4:97:43:94:17:f2:13:a2:51:25:de:be:41:
8b:64:76:14:66:bd:83:02:6a:9a:20:78:95:22:75:
b5:a9:a3:71:18:44:84:57:a8:f5:63:23:69:e1:c3:
8f:51:95:96:52:a9:1f:09:d2:82:71:71:f5:46:53:
ec:f5:41:ea:b5:85:ce:fd:b2:f7:81:8f:1c:54:9b:
89:7c:33:24:ab:39:5c:99:0e:c9:cd:21:e8:8c:a9:
20:6a:bb:dc:46:f2:da:cf:6f:80:ea:f9:98:43:3a:
cc:a1:a3:4a:a0:27:18:bf:3c:af:ad:ec:ba:4f:58:
f1:63:6c:0c:54:46:9d:4e:bc:d5:f7:55:88:15:70:
2b:4a:79:29:8e:49:af:56:84:2d:72:c6:26:99:76:
37:8d:e7:70:b3:fd:6e:59:ea:8e:35:86:14:02:fb:
b0:e8:be:53:72:91:0c:25:2e:f3:6f:58:44:a6:86:
ad:d8:a4:d7:cc:8d:aa:e0:cb:02:10:0d:1a:97:62:
07:dc:75:38:25:35:5c:f8:da:21:79:e5:69:97:d0:
7f:36:28:d4:fc:77:96:a1:23:58:59:37:85:88:08:
fa:8c:c9:4e:89:50:f8:fd:f8:3c:11:82:56:18:84:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F0:A0:09:4D:4F:F2:AB:11:2F:53:65:74:72:45:B9:75:E2:F1:F6
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/yPCgCU1P8qsRL1NldHJFuXXi8fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.238.236.0/22
89.191.152.0/23
94.101.16.0/20
185.174.152.0/23
IPv6:
2001:90f::/32
Signature Algorithm: sha256WithRSAEncryption
01:45:1c:24:4e:62:81:65:b4:b4:03:10:7f:99:67:eb:01:fd:
c2:10:6a:12:3e:3f:98:32:27:bf:5a:b0:72:11:6a:32:e1:d6:
c6:ca:3f:02:fd:1f:4c:ca:b8:5e:5d:a3:c7:5f:e3:a8:11:a6:
a0:26:1e:59:ad:5f:90:6b:31:e8:2c:65:75:67:73:1d:c0:66:
11:52:07:91:57:1f:c4:34:69:4a:31:1f:f2:3e:a3:12:f0:ac:
3c:84:e0:f9:2f:14:f3:a7:5c:c1:9c:0d:19:68:d2:07:b1:c3:
d3:cc:2d:84:88:e2:2c:50:5b:1d:18:0a:5a:00:80:5a:c4:67:
c6:36:8c:29:84:31:46:b5:ce:91:81:d8:e4:8e:1f:de:cc:51:
b2:59:11:7b:41:68:fd:ff:b8:f0:71:ae:3d:9e:e0:18:34:6f:
5c:3c:50:21:fa:27:a0:d8:88:ca:1d:71:af:9c:a2:88:5a:66:
e3:77:9c:eb:be:c6:c5:fe:84:f7:0d:f4:47:ae:36:5d:b1:26:
89:13:77:49:e2:77:0f:22:32:7f:b0:f1:8d:a7:f8:83:6d:16:
a9:4f:a3:57:ed:69:bb:9c:23:cb:09:92:a3:71:68:07:26:d7:
03:b9:10:71:f3:1c:1f:e2:95:ce:0f:7b:8f:ba:b0:4f:ee:dd:
a9:32:3b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 09:32:25 2024 by rpki-client on console.sobornost.net