Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/YIenw2HOqR-Wx-ww8B2OA0-r-i4.roa
File: YIenw2HOqR-Wx-ww8B2OA0-r-i4.roa (raw, json)
Hash identifier: KHeWjXqSKKYa4RBXvbiqEs3fHfN2GWBb/JVmcK8KdAQ=
Subject key identifier: 60:87:A7:C3:61:CE:A9:1F:96:C7:EC:30:F0:1D:8E:03:4F:AB:FA:2E
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 0193E39B83709D3C5922195AF27E0B6FBED2
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/YIenw2HOqR-Wx-ww8B2OA0-r-i4.roa
Signing time: Fri 20 Dec 2024 10:27:19 +0000
ROA not before: Fri 20 Dec 2024 10:27:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202933
IP address blocks: 91.217.213.0/24 maxlen: 24
185.167.128.0/22 maxlen: 24
185.175.120.0/22 maxlen: 22
185.197.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:9b:83:70:9d:3c:59:22:19:5a:f2:7e:0b:6f:be:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Dec 20 10:27:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6087a7c361cea91f96c7ec30f01d8e034fabfa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:be:b1:bc:6f:71:5f:57:ed:7d:71:04:a8:
9a:81:fc:0c:ba:ce:06:1c:08:09:3b:bb:59:d5:55:
7d:1b:24:2f:62:ab:b3:a9:39:ac:96:11:e9:79:9d:
48:6c:cf:bd:b5:5c:e6:2f:f6:74:60:ea:95:51:df:
cf:04:d8:2e:18:5b:10:fc:39:a0:60:1d:34:33:0e:
62:d8:1b:72:a2:a6:57:6e:eb:38:f4:23:1d:cd:98:
6f:29:93:6f:57:25:85:c7:94:0e:f7:0b:0b:52:23:
71:37:cb:f7:87:6a:2b:24:5e:48:2d:93:c2:fa:c1:
c2:3e:8b:49:89:50:8d:2e:4f:4a:2e:49:cc:f1:21:
db:ec:09:63:18:a1:d2:bf:74:e0:2d:37:e4:b4:5a:
a7:e2:10:b1:f8:85:b5:61:48:5e:23:fb:d9:34:b8:
00:0b:83:de:92:76:48:6e:95:2d:59:19:fe:e2:0b:
87:41:38:05:10:8a:92:57:12:3e:9e:95:9b:85:fe:
6d:b1:7e:1e:64:20:21:33:a2:d1:3b:0c:47:4b:14:
98:63:90:e3:5a:07:8d:a9:fc:6c:ee:19:d3:26:9c:
4d:63:34:ac:51:d4:99:df:98:84:5d:9a:b2:d0:ba:
1e:13:8f:b5:80:b3:d1:a0:96:4b:51:28:10:99:42:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:A7:C3:61:CE:A9:1F:96:C7:EC:30:F0:1D:8E:03:4F:AB:FA:2E
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/YIenw2HOqR-Wx-ww8B2OA0-r-i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.213.0/24
185.167.128.0/22
185.175.120.0/22
185.197.156.0/22
Signature Algorithm: sha256WithRSAEncryption
76:60:38:c7:47:99:66:c7:e2:78:75:17:c8:ae:d6:30:27:75:
ba:f5:76:63:20:a0:b5:97:cd:a1:d2:0c:61:14:71:80:47:f8:
80:04:4d:39:1b:23:02:be:db:38:b6:35:62:06:96:f0:c0:d0:
e4:ed:7a:b1:1d:54:7a:d9:da:24:b7:48:a9:e0:5e:1a:7b:16:
8b:d7:a5:e9:bb:b5:ab:a9:58:d1:73:54:83:e6:f0:12:15:3a:
c8:14:c8:06:4a:d7:10:23:32:95:0d:d0:e0:af:f5:ff:09:1f:
7c:be:02:90:01:a8:56:7a:b0:91:68:a1:fd:8f:f6:8b:59:c0:
9c:b2:3d:a9:bd:4d:07:d0:d7:86:02:fd:3f:92:8a:53:ec:f9:
13:5e:f8:c6:9f:51:c6:c7:1b:70:db:ae:76:79:56:e9:e5:a1:
52:65:2f:05:7f:14:f4:59:95:68:23:ed:bf:da:cf:c7:2a:68:
d8:93:6a:b0:4c:54:b3:d7:16:14:e0:37:f2:0e:32:a8:9a:f6:
b5:7e:74:b1:35:d1:df:df:5c:8f:57:69:81:2b:90:90:4c:55:
79:57:fb:a6:20:d1:89:1d:01:55:1c:e7:89:43:5e:a5:01:45:
18:62:e2:26:63:a1:ba:51:61:7b:f1:40:33:a1:48:fa:63:7b:
9d:91:fc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:16 2024 by rpki-client on console.sobornost.net