Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa
File: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (raw, json)
Hash identifier: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=
Subject key identifier: C9:1E:7A:BD:C2:B0:14:13:1A:C4:38:86:EF:26:36:72:F2:78:9F:44
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 0194266C04FE9FC50F548DF31FFF34D0018F
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8676
IP address blocks: 194.11.244.0/23 maxlen: 24
194.13.108.0/23 maxlen: 24
194.13.140.0/23 maxlen: 24
194.13.236.0/23 maxlen: 24
2a06:2100::/30 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:04:fe:9f:c5:0f:54:8d:f3:1f:ff:34:d0:01:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c91e7abdc2b014131ac43886ef263672f2789f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:a0:0d:bd:7e:07:01:88:63:2c:71:84:7b:
05:57:90:87:8f:46:1b:5b:86:f9:6f:b6:4f:41:fb:
7b:12:d2:c7:79:bf:d8:33:b1:ca:0a:1a:a9:48:8a:
17:43:a1:44:75:04:f9:02:0b:74:ef:db:42:57:21:
36:f1:56:09:88:93:a0:97:61:54:73:8a:0f:4e:e4:
07:4d:89:c8:c6:33:53:31:6b:ad:9b:66:bd:c4:3f:
65:6a:a2:4f:43:07:58:f3:a6:d6:6e:bf:27:a6:51:
f1:01:e9:55:f3:55:e2:31:89:fb:87:ad:ab:62:e3:
56:b3:22:b0:3a:f9:2e:50:aa:8b:16:22:4b:e5:84:
21:d3:03:0f:c7:f4:4a:69:d6:ec:fb:30:11:8c:bc:
ce:69:17:f8:33:92:85:e7:cf:1f:3b:43:94:b2:ed:
ed:a4:1c:f9:05:34:30:32:1d:a7:c5:10:c2:93:4f:
1e:13:72:c9:96:43:72:04:d1:16:4c:79:bb:ba:52:
59:e9:b8:f0:0f:3a:69:30:e6:8b:bc:f0:86:b5:ae:
ef:3c:5e:d1:83:e8:97:e8:51:4c:a7:f8:c3:0b:ad:
67:58:de:06:8f:de:43:5d:3b:b9:50:5a:60:d4:7e:
e8:17:5e:b8:9e:d5:3f:d0:0a:1a:27:5f:35:24:41:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:7A:BD:C2:B0:14:13:1A:C4:38:86:EF:26:36:72:F2:78:9F:44
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.244.0/23
194.13.108.0/23
194.13.140.0/23
194.13.236.0/23
IPv6:
2a06:2100::/30
Signature Algorithm: sha256WithRSAEncryption
6c:39:31:cb:09:5d:b4:96:34:7f:51:b8:4c:e5:29:e2:c7:24:
b7:fa:d2:06:a8:27:b2:d7:89:b7:c4:ef:7d:5b:1a:70:8e:94:
5b:e7:22:c6:66:7e:b5:48:c4:f9:e2:70:d8:41:69:06:96:44:
a1:a7:19:30:2a:a9:51:29:59:bf:cb:33:cf:26:24:46:df:34:
eb:e4:f2:a9:6d:eb:42:54:e5:62:e7:0e:88:a0:68:48:fc:a8:
29:06:04:55:27:9b:13:a4:90:af:0d:6c:35:c9:d6:28:cd:25:
38:c3:0d:f6:3b:cb:33:95:9a:fc:ce:6e:33:39:af:70:3e:03:
9b:ae:29:8e:5a:f9:4f:5e:a2:15:6f:cc:01:19:42:36:31:3b:
39:64:bf:9d:42:f8:40:65:12:49:cb:7a:79:70:30:70:cc:ae:
66:15:82:06:5e:bc:70:38:1a:3f:23:c6:82:97:b2:77:3f:5d:
51:d6:c8:45:3d:15:79:e3:66:eb:d8:8d:fd:ca:f7:ff:f8:bb:
4b:e4:44:29:1f:54:54:2c:a6:7e:29:38:2f:cb:48:a5:99:2d:
0e:93:d6:b8:3b:1c:b0:af:89:6e:9b:21:12:18:d4:61:33:21:
27:22:fa:2a:27:06:46:bc:85:db:33:47:40:68:a1:7c:d8:6a:
7d:d1:f7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net