Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/YYRFT5GSNdO5yWJTma8lncQ5lj4.roa
File: YYRFT5GSNdO5yWJTma8lncQ5lj4.roa (raw, json)
Hash identifier: epfoWCcUV9vQnXsmmkQgIltNf56r0JYXf4Q8lxYWFas=
Subject key identifier: 61:84:45:4F:91:92:35:D3:B9:C9:62:53:99:AF:25:9D:C4:39:96:3E
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 018EE5EE91903F32AD5D95E8E86D4F8E624A
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/YYRFT5GSNdO5yWJTma8lncQ5lj4.roa
Signing time: Tue 16 Apr 2024 08:03:21 +0000
ROA not before: Tue 16 Apr 2024 08:03:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200107
IP address blocks: 77.74.176.0/23 maxlen: 24
77.74.176.0/24 maxlen: 24
77.74.178.0/23 maxlen: 24
77.74.180.0/24 maxlen: 24
77.74.181.0/24 maxlen: 24
77.74.182.0/24 maxlen: 24
77.74.183.0/24 maxlen: 24
82.202.184.0/23 maxlen: 23
82.202.184.0/24 maxlen: 24
82.202.185.0/24 maxlen: 24
93.159.226.0/24 maxlen: 24
93.159.228.0/23 maxlen: 24
93.159.230.0/23 maxlen: 23
185.54.220.0/24 maxlen: 24
185.54.221.0/24 maxlen: 24
185.54.222.0/24 maxlen: 24
185.54.223.0/24 maxlen: 24
185.85.12.0/24 maxlen: 24
185.85.14.0/24 maxlen: 24
185.85.15.0/24 maxlen: 24
2a03:2480:68::/48 maxlen: 48
2a03:2480:69::/48 maxlen: 48
2a03:2480:70::/48 maxlen: 48
2a03:2480:80::/48 maxlen: 48
2a03:2480:8000::/44 maxlen: 44
2a03:2480:8000::/48 maxlen: 48
2a03:2480:8010::/44 maxlen: 44
2a03:2480:8020::/48 maxlen: 48
2a03:2480:8021::/48 maxlen: 48
2a03:2480:8022::/48 maxlen: 48
2a03:2480:8023::/48 maxlen: 48
2a03:2480:8024::/48 maxlen: 48
2a03:2480:8025::/48 maxlen: 48
2a03:2480:8026::/48 maxlen: 48
2a03:2480:8027::/48 maxlen: 48
2a03:2480:8028::/48 maxlen: 48
2a03:2480:8029::/48 maxlen: 48
2a03:2480:802a::/48 maxlen: 48
2a03:2480:802b::/48 maxlen: 48
2a03:2480:802c::/48 maxlen: 48
2a03:2480:802d::/48 maxlen: 48
2a03:2480:802e::/48 maxlen: 48
2a03:2480:802f::/48 maxlen: 48
2a03:2480:8030::/48 maxlen: 48
2a03:2480:8031::/48 maxlen: 48
2a03:2480:8032::/48 maxlen: 48
2a03:2480:8033::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:ee:91:90:3f:32:ad:5d:95:e8:e8:6d:4f:8e:62:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Apr 16 08:03:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6184454f919235d3b9c9625399af259dc439963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:79:15:d8:f5:93:9e:de:37:a5:ab:e1:25:
37:c1:39:e5:5f:7a:b2:40:43:c0:d8:e9:b9:c7:b1:
88:35:bc:43:cc:69:75:a9:e2:a9:b8:fe:6c:b9:0a:
29:ae:de:ba:3e:c2:50:d9:6b:50:99:82:fd:5a:49:
93:53:9c:79:f1:54:fe:84:ff:1f:71:b1:81:01:c6:
86:1b:d5:f2:a4:4a:97:17:f9:e5:ba:ae:aa:7e:fc:
c9:b8:1c:be:11:3b:37:19:25:29:97:82:69:a3:67:
ca:37:a1:07:cc:a0:62:90:51:30:1f:81:37:03:1e:
fe:b4:77:2b:99:10:73:cc:0a:76:f2:a9:7e:44:cf:
28:08:68:16:71:a3:66:79:bc:61:11:69:8b:70:28:
80:e1:dc:68:74:12:0a:77:0c:1c:10:4d:b6:17:65:
ef:c8:fb:59:56:a4:b4:2f:a8:c3:ae:3c:31:5b:db:
9f:47:b6:4d:0a:a7:77:7e:83:eb:66:bf:20:24:fb:
08:52:51:75:e4:e1:a6:83:d9:ff:7e:26:8b:ae:36:
75:69:b5:b0:c2:ad:6b:02:2f:6c:71:17:fe:d2:24:
6a:eb:5d:2d:69:a9:ff:f8:75:3d:e9:4d:b1:44:23:
19:88:97:73:9b:3d:2a:e6:75:1e:0e:53:ec:2b:6b:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:45:4F:91:92:35:D3:B9:C9:62:53:99:AF:25:9D:C4:39:96:3E
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/YYRFT5GSNdO5yWJTma8lncQ5lj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.176.0/21
82.202.184.0/23
93.159.226.0/24
93.159.228.0/22
185.54.220.0/22
185.85.12.0/24
185.85.14.0/23
IPv6:
2a03:2480:68::/47
2a03:2480:70::/48
2a03:2480:80::/48
2a03:2480:8000::-2a03:2480:8033:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7c:8e:6d:4b:47:0b:be:a4:01:42:51:43:4f:a5:c3:5b:07:ec:
ca:1d:e3:36:4f:09:1d:61:98:e5:7f:f1:c7:80:2d:08:f9:2b:
cc:b2:f8:f1:66:33:ec:3f:2e:3a:da:13:19:eb:0e:21:94:4b:
0b:4d:0d:6a:bb:75:60:85:26:63:63:58:53:b7:44:91:6e:a4:
7c:9d:38:69:14:6c:42:15:61:63:2f:ae:50:a1:10:6f:c8:c8:
31:6f:f1:bf:83:1a:2c:da:1e:15:83:c6:ec:b2:10:7e:16:87:
2c:63:f2:90:ab:86:99:c2:75:a1:dd:35:e6:30:ff:5c:c2:9b:
9f:ce:1d:a8:60:c4:84:6e:66:26:87:04:50:db:ff:7e:bb:31:
36:1e:eb:02:01:8d:08:eb:ca:ec:8c:61:73:f8:bb:3a:31:a6:
10:a4:da:ff:fe:9c:2c:24:2d:67:55:2e:b9:33:97:69:83:5e:
60:82:f6:58:01:14:f2:0c:36:5a:ed:a0:5a:b5:5d:46:19:25:
eb:52:0a:98:3c:76:fb:84:ad:e8:05:5a:0a:fc:cf:9a:bd:7e:
77:9b:1c:d0:da:52:7f:aa:b7:1e:97:2a:4d:ef:6c:99:10:39:
8a:69:59:d9:ec:fc:12:f0:88:1c:af:a7:a3:c5:18:64:d4:05:
86:64:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:16:14 2024 by rpki-client on console.sobornost.net