Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/yuBu_3gHtbd-ZA0cmziwRxPp40Y.roa
File: yuBu_3gHtbd-ZA0cmziwRxPp40Y.roa (raw, json)
Hash identifier: 12MkinUl6y/dxpUnE9iHGFhPa61KkEanTpa0XWLfanw=
Subject key identifier: CA:E0:6E:FF:78:07:B5:B7:7E:64:0D:1C:9B:38:B0:47:13:E9:E3:46
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 0194274775CF774A9B701108AB3B656CD15D
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/yuBu_3gHtbd-ZA0cmziwRxPp40Y.roa
Signing time: Thu 02 Jan 2025 13:49:42 +0000
ROA not before: Thu 02 Jan 2025 13:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211496
IP address blocks: 185.195.252.0/24 maxlen: 24
193.22.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:75:cf:77:4a:9b:70:11:08:ab:3b:65:6c:d1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jan 2 13:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae06eff7807b5b77e640d1c9b38b04713e9e346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:d3:35:d6:d4:ce:d4:ca:c6:37:0b:a5:83:
02:1d:18:90:f6:b8:c7:18:52:16:9d:02:99:eb:3f:
00:cc:e2:91:05:21:9a:7e:64:0c:32:df:48:8b:cd:
55:69:e9:93:8e:1f:cf:83:e4:c3:8e:67:f6:f1:6d:
bd:b1:42:41:8b:bb:e7:88:b1:a8:f8:d7:92:6b:0a:
99:ce:02:49:e3:4e:0f:64:fc:c2:72:f3:5f:ed:9d:
3e:45:89:9d:5a:23:44:5c:5d:d9:a3:76:6e:01:4e:
43:8f:fd:67:c2:cc:3c:ba:b2:d8:1f:17:61:2e:b2:
00:5d:05:55:cf:fc:d2:70:64:89:4a:57:a3:81:9d:
d0:6f:22:0a:35:d3:39:3c:9a:f4:cd:33:0e:d5:28:
0e:86:78:50:b1:81:9a:4b:6e:22:57:cc:e7:02:3e:
72:36:ce:5a:b5:f4:95:e6:c5:d2:79:88:53:9f:d4:
43:5e:1d:e8:20:64:d4:5f:1f:b5:34:60:a8:9b:e6:
d4:ec:db:53:ef:bf:e0:2a:dc:c2:47:3e:df:5b:76:
2c:5b:a1:b3:8a:aa:5e:e5:ed:28:2e:44:37:78:ec:
ee:52:4f:ac:d0:e1:1e:54:3f:f7:5f:f6:14:7b:a4:
7b:e9:60:3a:41:19:ea:91:59:3f:9e:21:33:9a:c6:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:6E:FF:78:07:B5:B7:7E:64:0D:1C:9B:38:B0:47:13:E9:E3:46
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/yuBu_3gHtbd-ZA0cmziwRxPp40Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.252.0/24
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
24:47:d5:17:76:c0:dd:d3:60:8b:ee:14:67:42:09:e9:3e:7a:
0f:9e:bc:f6:d9:e1:c0:30:9b:84:71:42:dd:83:45:7f:a1:7b:
0c:b3:45:a0:45:bb:cc:90:f5:01:93:ef:4b:79:1f:7a:14:01:
3f:b5:cd:6d:60:79:69:2f:42:d7:06:3b:f2:46:e9:a3:f2:55:
41:74:cd:ce:1b:f3:fd:f9:08:d6:27:97:77:9e:64:41:93:b5:
8d:10:6a:68:89:be:d1:ca:f4:e2:cd:ba:cc:24:70:81:b0:5e:
38:76:23:f2:ea:aa:cc:f9:02:a9:62:b0:ca:cf:56:5c:6d:c6:
72:36:d6:fe:5e:a2:db:57:4e:9f:83:75:fd:68:2c:3d:e4:59:
26:33:99:4a:8f:6e:d4:fe:57:2d:08:06:85:11:79:d9:b8:95:
b7:c3:b8:54:93:37:84:52:41:ce:4f:aa:fb:2b:86:66:b0:27:
cf:f3:03:ea:fa:6d:10:4d:00:9e:35:16:79:f9:66:10:0d:5f:
0e:fc:2d:5a:52:f9:92:8f:a7:b6:85:01:57:ba:98:8d:61:37:
a7:8e:91:7d:45:81:1f:68:8b:e4:a2:c1:e7:eb:d2:7f:67:c3:
1d:1e:58:06:67:c5:46:db:7d:17:39:a8:bc:96:80:95:4e:c2:
ad:82:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net