Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/yde3pEU_sVhcthqp5yaKTvF3od8.roa
File: yde3pEU_sVhcthqp5yaKTvF3od8.roa (raw, json)
Hash identifier: QigHRpH/jANNHxMVjZ+L6M15E2c5AiwgtKAlyK/70Wk=
Subject key identifier: C9:D7:B7:A4:45:3F:B1:58:5C:B6:1A:A9:E7:26:8A:4E:F1:77:A1:DF
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019301D5FD71757B89B6FDB012A407B83534
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/yde3pEU_sVhcthqp5yaKTvF3od8.roa
Signing time: Wed 06 Nov 2024 14:17:01 +0000
ROA not before: Wed 06 Nov 2024 14:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50606
IP address blocks: 31.6.247.0/24 maxlen: 24
91.218.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:d5:fd:71:75:7b:89:b6:fd:b0:12:a4:07:b8:35:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Nov 6 14:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9d7b7a4453fb1585cb61aa9e7268a4ef177a1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:06:13:05:f4:80:9e:bc:4e:c2:c3:6f:56:
9b:92:62:c1:c7:06:ef:d8:b2:4c:cd:bf:b3:03:a2:
54:00:2a:c3:49:f6:4b:ee:73:f1:a3:0c:6d:d9:5f:
07:20:bd:2b:fd:22:d5:45:86:d6:ed:4c:8f:1b:b0:
4d:01:58:b2:a4:c9:57:ab:b4:44:ec:93:ab:01:a9:
8c:55:79:34:f5:22:33:43:83:cb:09:00:a0:cd:5a:
af:43:57:b6:0b:ab:d3:c1:5c:dc:b4:aa:b7:af:5c:
1a:a5:51:0f:f8:b7:ef:c1:a9:3d:60:34:8e:a7:99:
ac:15:e5:b0:37:ac:5a:60:6a:59:c0:ac:28:57:e2:
2d:da:22:a7:e4:1a:28:6f:e3:df:b1:d2:55:20:a4:
19:0b:a0:53:7d:71:4c:66:98:b0:41:1d:64:a0:e7:
db:7f:84:db:1e:70:02:0e:90:01:18:dc:81:10:fd:
99:91:b1:16:c2:f6:7b:e2:42:7c:9b:01:10:83:02:
5e:4f:fd:7a:50:e6:c6:9a:a0:57:21:58:cd:6b:83:
1a:de:2f:4a:75:97:eb:b4:a0:01:2f:48:4b:ed:bd:
f4:c2:83:c6:a1:fa:d9:5b:bb:7d:d5:9e:79:1a:43:
4a:4d:1c:ba:c4:dd:50:5e:d9:0e:98:34:cd:63:11:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:B7:A4:45:3F:B1:58:5C:B6:1A:A9:E7:26:8A:4E:F1:77:A1:DF
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/yde3pEU_sVhcthqp5yaKTvF3od8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.247.0/24
91.218.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:65:2c:a4:f7:00:83:e5:72:6b:76:2c:2a:4c:b5:28:57:49:
94:ac:2c:ab:ec:52:a1:db:15:85:29:fd:77:c8:d6:b8:b3:fb:
49:4b:42:c5:72:35:00:c9:f4:b9:a2:9e:11:e8:c2:99:34:4f:
97:77:6e:09:69:b9:c2:43:cc:32:6a:0f:ae:1b:39:78:ac:e1:
6b:a0:18:fa:53:1f:7a:66:9d:d9:07:d6:35:5d:14:0b:61:2f:
ab:a9:75:77:cb:25:76:3b:d6:b7:eb:5d:0e:6d:35:ad:f6:e1:
d3:57:b6:89:90:b1:0d:4f:21:33:cf:ab:3c:85:f0:7c:45:87:
fa:58:ff:7e:96:1d:ed:ef:b4:19:35:a6:11:8a:5a:f0:c8:6c:
5a:2a:6a:1b:aa:ea:f0:71:00:7a:f4:ee:31:01:6f:2e:d7:f6:
da:81:22:3b:0a:ba:19:ca:12:3e:20:ce:83:50:29:30:0d:af:
04:82:79:4c:ef:6b:a7:ae:37:4a:9f:1d:b4:7c:0f:fb:ed:7d:
8c:5d:e7:74:6c:df:37:d5:a7:0b:6d:e7:34:0a:0e:a7:db:ba:
c3:89:54:4a:b0:24:c0:06:49:98:24:b3:73:22:80:5c:a5:dd:
84:5f:45:20:41:e2:b4:19:12:9a:04:d4:92:cf:8b:d7:80:f6:
1e:2e:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:59 2024 by rpki-client on console.sobornost.net