Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/YYev6Pek4prQk97zPtNDo2u2KRU.roa
File: YYev6Pek4prQk97zPtNDo2u2KRU.roa (raw, json)
Hash identifier: wJZbyHz8STJ6eKcT9ZVX0wVCLZZb2WUlXYfMJ35kaXE=
Subject key identifier: 61:87:AF:E8:F7:A4:E2:9A:D0:93:DE:F3:3E:D3:43:A3:6B:B6:29:15
Certificate issuer: /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Certificate serial: 019426D961A24863E43EDADC72C0A355F391
Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/YYev6Pek4prQk97zPtNDo2u2KRU.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 176.120.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:61:a2:48:63:e4:3e:da:dc:72:c0:a3:55:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6187afe8f7a4e29ad093def33ed343a36bb62915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:23:70:c0:34:bc:6c:81:3a:78:09:34:73:
85:22:35:35:66:28:28:8b:ee:a8:66:46:6b:d4:75:
dd:69:38:f4:53:94:cb:c5:54:fb:b8:59:1e:21:62:
2a:24:29:75:ac:62:21:53:c5:83:75:44:e2:c6:f4:
a0:2a:c5:ed:d3:bc:59:32:19:cc:a4:3f:70:b6:4e:
2a:f4:bf:4a:9c:48:92:e3:94:11:10:f8:ac:94:14:
68:9f:61:3d:ca:43:82:33:b7:ed:1f:e7:8d:3e:94:
d1:4f:05:40:46:2c:d0:d1:4f:b3:f5:cc:11:b3:60:
3a:5d:a8:25:68:80:df:eb:90:7a:ac:ad:4d:93:a9:
50:0b:d5:e8:ec:4f:94:02:db:c7:ed:53:03:cc:5d:
af:dd:8c:1d:af:5f:af:51:d8:f0:90:ab:76:cb:1d:
dd:9c:1a:da:16:37:35:ed:30:94:0d:02:f6:ae:f1:
21:8f:a0:ef:1d:3a:95:4e:fb:e2:d7:97:5e:d7:19:
ac:bd:32:f0:eb:b5:a8:dc:a3:62:97:59:b8:4e:bf:
98:d3:38:b5:9d:fc:37:de:3f:d7:ce:82:54:ad:86:
86:b6:60:e1:58:81:7b:cc:dc:e5:14:35:38:f6:bd:
f6:bb:8a:be:00:52:2b:22:aa:d6:45:fe:b2:98:31:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:AF:E8:F7:A4:E2:9A:D0:93:DE:F3:3E:D3:43:A3:6B:B6:29:15
X509v3 Authority Key Identifier:
keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/YYev6Pek4prQk97zPtNDo2u2KRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d2:fe:5a:55:0c:b5:cc:2a:b6:2a:7f:b2:a0:00:09:50:b3:
35:31:b2:f0:01:3a:19:a6:1e:97:c6:c2:e8:57:27:6d:76:62:
b2:c7:ee:de:05:91:94:f8:b7:38:8c:06:be:84:4c:a0:5d:7c:
c5:9c:22:e0:65:4b:9e:39:fe:15:ec:34:c8:aa:66:9d:f6:e3:
47:9d:62:18:46:58:4d:d0:cf:c7:ba:9b:be:ff:a2:e5:88:05:
fa:7c:88:53:08:29:22:b3:b0:76:64:27:29:a3:0e:1b:09:8a:
7e:c1:15:08:37:f7:a8:a4:c6:a5:a4:35:57:b1:4d:ed:43:69:
3e:86:ab:6f:3b:07:38:5f:a6:e4:df:25:72:4b:6e:ba:48:98:
2a:0e:1d:61:03:4f:2c:38:50:f8:4b:07:01:4c:78:1d:ee:d9:
e4:b0:2f:a3:03:1f:58:df:50:d4:b3:0c:d7:29:11:1c:05:3a:
db:e3:4f:92:08:dc:71:30:d1:e6:7f:3b:d7:60:df:e9:9e:bd:
9a:6c:81:b9:94:ff:84:32:6d:b6:0f:73:08:b5:42:e7:c3:2a:
4e:e9:97:92:2a:41:54:61:85:14:41:67:45:7c:8e:2c:d5:81:
0d:7e:26:65:99:ef:38:42:11:02:f1:7f:67:aa:a5:7c:e0:42:
ee:12:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:12 2025 by rpki-client on console.sobornost.net