Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/YSDuD1lYEmq5D5WYEkOXTuM8yP0.roa
File: YSDuD1lYEmq5D5WYEkOXTuM8yP0.roa (raw, json)
Hash identifier: OXPCzE4kWMMZColRMLqOqxwEb2LI6fQvkc/N8zUQ4mo=
Subject key identifier: 61:20:EE:0F:59:58:12:6A:B9:0F:95:98:12:43:97:4E:E3:3C:C8:FD
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 0193C39FFDDB8930C2A372388699F7356C4B
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/YSDuD1lYEmq5D5WYEkOXTuM8yP0.roa
Signing time: Sat 14 Dec 2024 05:24:22 +0000
ROA not before: Sat 14 Dec 2024 05:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58026
IP address blocks: 62.3.6.0/24 maxlen: 24
146.19.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c3:9f:fd:db:89:30:c2:a3:72:38:86:99:f7:35:6c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Dec 14 05:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6120ee0f5958126ab90f95981243974ee33cc8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:a0:9a:97:fe:fc:90:5d:b9:75:4c:1a:7d:
f0:c6:15:dc:78:c1:33:9b:da:41:28:71:3d:d5:91:
e6:82:d3:76:f4:24:fb:14:62:be:e9:c0:df:0a:48:
af:06:9b:8c:da:f1:f8:2e:02:a3:68:73:f7:7f:9c:
b6:0f:9c:b4:fb:84:df:d8:2f:a8:3d:cf:21:88:b6:
f7:24:54:23:0d:cc:0f:27:7d:99:1a:8c:48:27:7d:
c1:95:b8:4f:dc:5f:68:7e:0b:e9:3b:4a:1e:b9:3c:
b3:e9:6a:ea:2e:b5:01:d1:8b:07:30:9e:96:3e:de:
3b:87:fe:b8:a7:69:be:fb:84:22:4b:e2:ea:ee:12:
0f:4e:76:4c:8b:d2:cd:d4:fd:3d:5f:e2:8b:cc:ce:
7b:da:c6:9e:65:de:3f:8d:45:09:eb:78:69:d2:78:
9a:e2:26:30:cf:eb:dd:5a:35:86:be:fd:da:06:0e:
c7:83:21:4b:1f:e1:7c:d3:ee:1c:b9:22:e6:2a:a2:
e1:21:d6:d4:cd:85:9f:ff:c7:05:53:0b:f3:a4:64:
a0:ef:06:bc:a0:5e:f9:94:c7:8f:87:98:ee:82:8c:
50:9d:33:e0:25:ad:b9:08:dc:cd:69:c6:d4:f6:e7:
5e:c9:aa:07:f8:6f:62:85:09:51:4b:5d:a9:49:f5:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:EE:0F:59:58:12:6A:B9:0F:95:98:12:43:97:4E:E3:3C:C8:FD
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/YSDuD1lYEmq5D5WYEkOXTuM8yP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.6.0/24
146.19.100.0/24
Signature Algorithm: sha256WithRSAEncryption
41:74:d3:c6:3b:3a:69:b2:c3:09:19:91:7a:e1:19:4a:cd:f8:
b9:24:03:73:c9:d9:53:66:dc:04:37:e9:02:7f:f1:f8:a2:86:
c8:09:6e:d3:4c:60:99:40:84:d3:a6:a1:8a:34:bb:76:50:dc:
de:46:7c:30:80:93:4f:02:83:8e:36:82:11:82:31:26:93:b0:
17:59:91:7e:2d:1c:9d:1a:c6:23:87:bc:40:3b:93:4f:5d:42:
df:be:2d:0c:db:f7:c2:d4:f0:2a:ee:f1:6a:b6:df:21:2f:11:
85:b8:db:6b:92:84:79:90:5e:30:a5:1e:63:d0:db:48:96:8e:
e9:07:55:5f:b6:14:e7:47:d6:14:22:c6:d7:e3:23:b7:27:3a:
b7:4c:b7:a0:d1:bb:f5:b4:da:c0:04:2b:14:f2:dc:e5:36:ba:
24:25:92:40:7e:b8:37:7a:12:98:74:4e:bf:a8:08:c0:f5:66:
a4:75:9c:f6:43:e9:fd:56:76:bc:13:e8:fd:70:aa:dd:81:9c:
b0:61:0f:81:cc:2e:26:78:5d:5d:33:cd:fb:82:c3:07:11:f1:
49:1b:cb:44:47:09:cc:fc:b9:cd:0f:63:1c:fe:ed:d8:2f:45:
3e:d5:c7:d3:88:b2:b1:29:2e:b1:87:ae:d3:91:88:1c:2f:6e:
99:28:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:23 2024 by rpki-client on console.sobornost.net