Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/Y9gCH4thucbTjT0xARnAurkdlt0.roa
File: Y9gCH4thucbTjT0xARnAurkdlt0.roa (raw, json)
Hash identifier: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=
Subject key identifier: 63:D8:02:1F:8B:61:B9:C6:D3:8D:3D:31:01:19:C0:BA:B9:1D:96:DD
Certificate issuer: /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial: 01942143ED6D20F4B377A8F58BD0C67BAEEC
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/Y9gCH4thucbTjT0xARnAurkdlt0.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34386
IP address blocks: 193.58.200.0/22 maxlen: 22
193.58.200.0/23 maxlen: 23
193.58.203.0/24 maxlen: 24
194.79.244.0/22 maxlen: 22
194.79.244.0/23 maxlen: 23
194.79.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ed:6d:20:f4:b3:77:a8:f5:8b:d0:c6:7b:ae:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63d8021f8b61b9c6d38d3d310119c0bab91d96dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:3b:75:a8:45:85:46:64:a6:f4:5c:32:81:
09:b9:9b:ec:5a:66:97:72:0e:a8:16:0c:4a:11:77:
70:21:b1:01:9d:ec:0e:91:af:50:82:8d:0c:4d:8e:
d2:e8:c8:cd:dd:b2:3d:0d:d4:85:da:b6:b9:69:91:
70:82:00:fd:09:79:2a:25:e3:9d:7c:8a:f8:d4:b3:
66:bc:8f:32:c9:b0:ec:73:59:2b:eb:54:a3:d2:f7:
85:ab:9c:bd:fc:d3:db:cb:b1:16:b3:cd:1b:b1:17:
1e:64:7d:59:31:bf:10:4b:96:77:e2:c4:38:8b:59:
b6:29:17:91:9b:a4:72:78:f7:96:45:0b:2c:40:f6:
a5:52:cd:aa:2e:7f:16:33:a1:86:8d:ce:e2:38:4f:
7e:2b:82:b9:fe:e8:bb:69:1b:14:8a:ef:e3:22:c6:
49:e6:59:b7:1c:81:92:be:cb:3b:59:c3:67:d5:6d:
b0:5d:e7:f7:c6:a5:72:06:12:2b:18:ed:56:48:32:
8f:bb:c2:38:d8:f4:4a:aa:9f:66:09:6b:d8:6b:ad:
b9:49:14:c7:20:41:4f:6e:ec:03:bd:20:73:a4:22:
99:d7:cd:12:24:ca:88:34:28:94:ce:e8:2b:10:5a:
04:6a:8b:47:21:a0:2f:a4:46:0c:3d:e0:a9:28:dc:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D8:02:1F:8B:61:B9:C6:D3:8D:3D:31:01:19:C0:BA:B9:1D:96:DD
X509v3 Authority Key Identifier:
keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/Y9gCH4thucbTjT0xARnAurkdlt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.200.0/22
194.79.244.0/22
Signature Algorithm: sha256WithRSAEncryption
19:3f:92:98:cf:b7:79:28:14:51:37:f0:b6:10:76:03:69:63:
2b:8f:6a:6d:8d:c7:2d:d0:50:50:5a:71:b8:0a:68:13:3d:9b:
78:5a:66:82:0f:44:bf:3c:3a:d4:12:51:1e:a7:23:4e:fc:2a:
0f:eb:b5:b4:71:7e:c8:aa:44:d7:4d:75:f6:26:14:58:7b:fe:
17:c6:d6:72:03:41:48:8b:06:85:a1:90:70:47:4b:9f:53:3d:
e2:bb:d7:c9:24:b1:6f:89:03:71:2f:09:73:c9:8b:bf:1c:1b:
b7:e6:b4:41:14:e6:30:73:c2:fa:22:e1:5a:eb:ce:d1:c6:94:
76:d8:5c:9e:e9:53:47:53:42:34:24:0b:d9:83:b3:71:90:34:
ff:b4:18:16:1d:63:37:fb:7a:c9:0a:d2:ba:7f:60:b7:c6:ca:
51:42:0e:df:0d:13:02:27:20:fb:b8:5a:71:b5:c8:5c:ce:f2:
77:df:f4:d4:cb:4d:fc:fc:3f:3e:39:94:25:5d:90:59:9c:a2:
a6:6b:f2:da:b7:4e:2b:24:86:71:e3:b7:31:f5:52:da:0b:7f:
7f:90:a7:9b:c5:b2:82:66:fb:a6:8c:f9:22:be:70:89:c2:20:
6b:58:48:88:40:92:6a:70:24:4f:70:1a:95:17:f8:35:65:40:
e7:1d:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:58 2025 by rpki-client on console.sobornost.net