Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/YgQwuXy4fXHjt8yt23lzdNRUNeE.roa
File: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (raw, json)
Hash identifier: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=
Subject key identifier: 62:04:30:B9:7C:B8:7D:71:E3:B7:CC:AD:DB:79:73:74:D4:54:35:E1
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 01942747A325A4BE443C27675A80483C8A24
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/YgQwuXy4fXHjt8yt23lzdNRUNeE.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41227
IP address blocks: 193.29.17.0/24 maxlen: 24
193.29.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a3:25:a4:be:44:3c:27:67:5a:80:48:3c:8a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=620430b97cb87d71e3b7ccaddb797374d45435e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:0d:d7:e5:e7:c2:bd:e4:21:c7:86:8c:5f:
5b:4b:db:8b:6e:cd:21:95:c6:7c:d1:e2:25:ff:3c:
58:a0:e3:e3:85:c5:e0:fb:ff:8f:81:08:a1:2f:fb:
c2:06:60:0c:5c:cd:f5:6c:41:00:c2:93:93:07:23:
23:2e:77:f8:54:27:c3:a1:92:c4:7f:95:00:cc:95:
4a:d9:57:02:16:81:d6:fd:5b:ef:ec:02:97:77:e8:
db:f2:04:35:fc:3f:30:35:64:7b:fb:30:cc:c2:19:
a0:26:4d:70:21:a0:91:25:11:86:f8:b4:fb:eb:3f:
fa:11:65:f6:53:8a:a4:51:da:0c:ce:74:c6:f1:34:
35:9a:7a:88:63:3f:47:17:15:81:6f:ae:f6:8b:a4:
36:b8:86:9f:ab:0c:d6:14:74:00:cb:77:11:45:c6:
3e:73:89:59:01:a0:31:10:af:56:78:cb:82:19:86:
b3:b2:3f:5a:39:39:e1:83:78:d4:9a:fd:da:c4:0a:
6e:0e:74:a2:47:99:a0:41:1a:6e:71:99:80:6e:6b:
01:0d:33:5b:c8:2a:cc:c8:6d:90:01:01:f5:65:c6:
91:92:a7:c2:75:1d:0f:82:22:64:fb:54:4b:40:35:
45:93:dd:f9:6a:08:69:76:8e:b8:6a:a6:a3:65:22:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:04:30:B9:7C:B8:7D:71:E3:B7:CC:AD:DB:79:73:74:D4:54:35:E1
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/YgQwuXy4fXHjt8yt23lzdNRUNeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.17.0/24
193.29.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:2a:48:1f:3b:60:84:73:a0:03:82:c4:ea:84:25:1e:05:3d:
7b:77:62:91:ea:e6:19:e7:5d:ca:4c:08:53:94:d1:64:43:e2:
ea:63:28:33:2b:b1:9f:9b:a7:e9:10:6e:c5:b7:db:7f:bb:67:
14:52:52:5f:c9:ef:c9:7b:31:a3:ba:d4:63:b0:f1:df:94:98:
74:88:c0:67:12:70:04:3f:2a:02:2d:a6:fc:0a:0a:57:ed:46:
71:19:3e:31:34:4a:7c:7f:11:35:e7:31:7c:e2:99:6b:7b:da:
da:f6:78:0f:cf:8c:25:08:f4:ac:12:5d:86:10:30:9d:d1:07:
cc:7c:f8:a3:29:18:61:5c:c8:29:c2:32:cd:29:2c:47:17:81:
92:0c:0d:be:4b:64:d2:e2:0d:72:3f:b7:9f:e7:8d:6f:6c:78:
da:39:c6:a3:bb:6c:35:ab:0a:73:a4:e4:40:ea:b9:fd:34:3a:
c6:11:87:13:8c:8b:bc:3a:ab:21:aa:31:c8:a2:52:35:e6:3e:
6e:01:c2:66:52:f9:50:fd:0c:db:ea:38:04:4e:6d:55:35:c2:
e6:fb:12:d0:48:b0:40:2f:6c:93:07:02:e0:fa:14:d5:ef:09:
b3:10:e7:05:f3:eb:70:5e:7a:d2:d6:c2:b1:a1:0f:81:00:70:
40:00:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net