Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/YJThomDkTAxHB3sMffMKNvwlVog.roa
File: YJThomDkTAxHB3sMffMKNvwlVog.roa (raw, json)
Hash identifier: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=
Subject key identifier: 60:94:E1:A2:60:E4:4C:0C:47:07:7B:0C:7D:F3:0A:36:FC:25:56:88
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 019420D5F427D6F29231999E30971A31A85D
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/YJThomDkTAxHB3sMffMKNvwlVog.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61425
IP address blocks: 5.198.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f4:27:d6:f2:92:31:99:9e:30:97:1a:31:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6094e1a260e44c0c47077b0c7df30a36fc255688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:40:d2:ea:e4:14:9d:43:26:33:c2:03:28:
e1:21:7d:21:f2:ab:f6:dd:97:4c:26:af:f4:9c:a5:
89:d0:00:e5:69:ab:a7:86:aa:07:9a:6f:89:8d:9f:
5e:a7:bd:c1:c1:de:dd:98:de:8f:70:fe:dd:3e:4b:
11:64:ee:e5:a5:d6:70:6e:6d:e3:0f:36:73:12:a8:
90:b6:d2:32:4d:f0:30:e3:e7:61:49:3c:45:b7:d2:
be:01:87:25:6c:e3:30:40:a1:59:ac:e4:e3:63:65:
77:34:73:ce:e9:ac:1c:d2:69:2b:b1:67:35:04:36:
77:eb:ff:bd:0e:f5:39:7c:96:3e:46:4f:b3:69:a6:
ff:bd:de:07:ee:5f:21:79:82:d7:e8:3e:fb:de:7b:
b4:2e:28:4f:93:56:2a:e2:a6:a8:a7:bb:f4:0e:e4:
9c:6a:83:95:59:cf:51:83:fd:f4:50:e9:4d:ab:72:
33:af:70:e9:b3:93:0a:5c:65:6e:75:ef:08:1e:c6:
90:8f:69:40:a6:85:7d:b9:1b:b3:65:f9:2f:9f:5e:
c7:10:b6:4e:6c:a3:7f:61:39:68:0a:57:3f:0e:82:
d7:28:60:71:6a:67:c1:65:03:7e:85:4f:2e:b1:ea:
08:aa:ef:c9:05:b4:09:b9:a0:f4:6d:8c:09:bf:01:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:94:E1:A2:60:E4:4C:0C:47:07:7B:0C:7D:F3:0A:36:FC:25:56:88
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/YJThomDkTAxHB3sMffMKNvwlVog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.128.0/22
Signature Algorithm: sha256WithRSAEncryption
65:41:6d:3c:0d:2d:fa:9c:99:dc:5d:44:63:c8:97:5f:33:e7:
bf:f8:55:c1:99:6a:14:36:63:7f:e9:9d:ef:26:bb:57:e7:7c:
92:ff:03:bf:7f:ff:4e:85:f8:e9:4e:1d:f3:df:94:1d:2d:63:
90:c7:21:8f:d2:8f:95:9a:e0:71:89:33:e9:74:16:3c:46:d4:
2d:11:68:3a:38:9a:7a:78:6c:76:56:db:92:66:f9:c5:71:ca:
2d:0f:3b:76:32:d1:bb:41:d8:55:80:31:c6:83:4e:48:a5:34:
92:1f:35:fd:fa:c2:70:ab:dd:02:2a:9d:64:07:40:75:99:e3:
8f:21:5e:d6:79:db:07:a0:d2:2b:21:4f:c5:b9:8b:37:08:27:
a3:55:36:3a:bd:fe:bc:d9:f4:0a:f0:8d:0c:3d:6c:f2:85:66:
71:9d:8f:b5:9b:fd:d4:40:79:10:9f:37:cb:f0:d8:f5:ce:8a:
d1:bd:b8:8e:43:33:15:80:e5:5f:57:f1:24:a2:fc:b2:93:ca:
a8:33:5e:a2:26:27:bf:e6:e9:ec:72:1f:7c:e4:cf:6d:d3:62:
b2:8f:f4:b3:26:60:f7:77:6a:4e:b6:6d:50:dd:86:c9:47:f3:
d2:bc:ce:70:88:5e:3e:2d:9b:ee:af:b0:b8:3d:2a:f1:17:a8:
9c:c4:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net