Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/Y2QuA0GUI6JIBopXXcm_7jsnnxo.roa
File: Y2QuA0GUI6JIBopXXcm_7jsnnxo.roa (raw, json)
Hash identifier: bZVcgLW3zvDpRZEZqcdETuyyZyfWbURETuVqNbrAEiQ=
Subject key identifier: 63:64:2E:03:41:94:23:A2:48:06:8A:57:5D:C9:BF:EE:3B:27:9F:1A
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 018ED198A9CD8AD936D2D79DFD3BC5EEBB52
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/Y2QuA0GUI6JIBopXXcm_7jsnnxo.roa
Signing time: Fri 12 Apr 2024 09:17:06 +0000
ROA not before: Fri 12 Apr 2024 09:17:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:98:a9:cd:8a:d9:36:d2:d7:9d:fd:3b:c5:ee:bb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Apr 12 09:17:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63642e03419423a248068a575dc9bfee3b279f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fa:e9:d2:2a:55:9c:c1:5f:8c:69:7d:7e:ff:
4b:6e:4f:57:56:15:b6:13:c7:63:cf:a1:f3:a5:df:
4c:3a:73:62:f7:e7:a7:20:f3:87:6d:53:a9:53:56:
58:3f:c6:dc:43:89:b0:aa:d9:54:9e:62:37:08:5e:
f8:4e:ca:f1:35:24:e5:c4:55:c4:eb:e5:01:fb:f7:
d4:02:09:b8:c7:22:65:8e:fe:b0:e9:e6:62:b9:fa:
63:1c:0f:00:b2:e9:b8:d5:79:e3:45:92:b7:c4:b4:
f0:76:28:ca:10:99:f6:81:3e:d0:9e:af:cf:d1:d0:
8f:9c:4c:83:f5:a0:7d:b8:34:8d:d8:6a:d3:3a:12:
47:3c:fb:90:7b:7e:c7:c1:63:21:fd:1a:38:5c:68:
0e:2e:54:18:c6:79:4f:32:c6:42:60:2f:c0:a0:76:
ae:e5:a8:b2:28:54:2d:bb:02:1d:46:21:ed:c5:5c:
35:29:20:c2:3c:8d:0a:45:25:99:e0:b6:eb:c4:59:
8f:8b:e9:86:39:fb:ee:94:df:8f:d7:dc:9d:3f:94:
e4:dc:9c:b6:4b:69:ea:cf:49:94:e1:cd:d1:dc:8a:
56:1a:81:20:78:b7:fc:be:de:df:e8:a7:5e:a1:17:
30:d3:70:06:74:d1:1a:64:7c:4e:9b:80:44:da:e1:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:64:2E:03:41:94:23:A2:48:06:8A:57:5D:C9:BF:EE:3B:27:9F:1A
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/Y2QuA0GUI6JIBopXXcm_7jsnnxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.236.0/24
Signature Algorithm: sha256WithRSAEncryption
89:07:a0:2b:c6:73:c4:b6:41:88:fc:93:49:39:d2:ca:47:9b:
86:33:f4:13:ba:a7:9d:9e:4b:ed:63:c4:9a:83:85:a8:23:53:
95:df:bd:10:00:87:7c:ab:36:a7:d6:6e:51:50:cc:b1:03:37:
70:ee:c5:7e:e6:e7:db:0d:69:17:47:e9:1c:b1:49:2c:3b:8a:
ab:32:1b:f5:02:62:9d:13:a4:aa:94:06:29:ac:2d:84:65:d8:
80:c1:28:d2:2e:eb:27:76:2a:88:fd:17:00:90:39:35:e4:e3:
d3:70:59:6e:1b:2a:21:b2:83:39:7d:d4:60:18:22:ee:34:bb:
fc:c4:98:b9:f0:55:8d:dc:e3:92:83:e5:fb:b1:53:91:4f:44:
b5:63:ae:3f:48:0b:59:1a:f4:60:bb:78:0d:f3:0e:5a:59:9d:
1c:46:59:93:71:0c:de:d8:02:57:74:3c:83:60:39:e5:8d:76:
f9:0a:1b:00:24:00:66:95:c6:d1:f2:0c:7f:5b:de:a7:ba:f4:
8e:e4:a3:d0:d5:db:e8:00:47:6c:88:92:54:4a:ed:8e:6c:c7:
16:cd:9e:69:f4:3b:3b:9b:6a:4d:40:97:eb:36:60:ac:3c:4a:
b6:ef:9c:c5:67:e6:e1:02:7d:5e:9e:46:5f:36:8f:9c:bd:08:
f5:bc:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:21:34 2024 by rpki-client on console.sobornost.net