Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yzTdT0tBE1RyycJdmDdbwINN0lI.roa
File: yzTdT0tBE1RyycJdmDdbwINN0lI.roa (raw, json)
Hash identifier: 6EJ5PDpmcupRJ3IkLOH/KHYEQwWTLqTCEBEgV/h3FOw=
Subject key identifier: CB:34:DD:4F:4B:41:13:54:72:C9:C2:5D:98:37:5B:C0:83:4D:D2:52
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FAFC4B0432B1331BE47B0C3BF494D
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yzTdT0tBE1RyycJdmDdbwINN0lI.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135375
IP address blocks: 185.177.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:af:c4:b0:43:2b:13:31:be:47:b0:c3:bf:49:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb34dd4f4b41135472c9c25d98375bc0834dd252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:0f:1d:1d:02:c1:9f:54:21:75:3a:8b:21:
5c:32:0d:94:7f:7b:c3:4b:f8:af:af:d4:24:6a:4d:
32:d4:ba:9f:4e:69:b4:26:c0:d6:a9:39:87:63:4e:
d8:bb:1f:98:1f:e2:31:1b:d9:28:cc:09:b7:db:81:
bf:3b:45:a7:ac:20:73:b5:1f:c3:e0:c0:f7:ed:5d:
34:75:51:ef:dd:c0:e5:aa:1a:9d:16:32:a9:b2:ef:
3d:66:8f:78:6a:55:45:42:d0:db:2c:38:37:37:a1:
35:ca:29:50:c5:71:0b:5b:32:44:cd:94:9f:02:f1:
b6:c0:5b:37:54:25:34:0a:d9:82:1d:5d:dc:90:72:
ed:4c:bc:13:1d:bc:4c:b0:e2:9d:11:3f:d0:23:2f:
2e:f9:0d:0e:12:68:4a:94:aa:34:96:c0:d9:f2:38:
a8:6c:05:e5:e0:c4:40:a1:50:e5:bf:f1:8f:16:35:
db:56:e2:58:91:ee:89:7f:dc:60:33:68:62:02:48:
57:1f:8e:ec:92:9d:0b:27:14:85:53:9d:1b:9a:f3:
d8:dd:dd:36:de:9c:e8:1d:df:52:84:63:f3:b1:d0:
60:a1:60:4a:b4:33:3e:5b:5d:d8:e5:88:81:5c:76:
8b:fd:ee:0d:0c:29:83:f4:47:57:a4:e5:b6:7f:e9:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:34:DD:4F:4B:41:13:54:72:C9:C2:5D:98:37:5B:C0:83:4D:D2:52
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yzTdT0tBE1RyycJdmDdbwINN0lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d4:8d:88:0b:15:2f:f6:6b:54:1c:e5:f1:15:52:c6:ac:d3:
86:42:3d:5a:53:56:6e:b9:6a:ca:92:be:af:bb:e8:21:51:71:
a9:b8:3c:fc:07:a3:f7:22:5a:6b:d0:b5:71:0a:03:72:0b:c1:
5f:07:e1:5c:b5:d8:cb:f1:27:ec:29:a0:bc:6f:cb:e5:ab:d9:
3d:1a:ed:f4:83:f8:4e:0f:93:72:36:32:6e:c0:c6:78:e2:0f:
07:e9:92:c3:80:0e:ba:37:64:2a:9d:77:bd:f9:a2:03:9a:72:
e2:a9:d7:a0:dd:e6:4d:f7:4a:8d:fe:e5:01:47:f3:e8:36:c5:
48:94:7b:c0:5a:4b:a3:25:cb:2e:12:c7:4d:5c:ec:5d:f8:6b:
8d:40:b8:e2:d6:dd:b8:04:76:6e:b6:c5:b7:64:8d:fc:0f:28:
bc:2c:33:da:dc:fe:82:6c:02:77:a0:31:8c:18:bb:07:2e:13:
55:8d:33:08:0a:8b:a8:22:34:6c:8d:58:9e:6c:d6:01:83:79:
de:9f:c9:86:ab:7b:4e:c9:38:29:7a:ef:95:bf:34:95:9b:76:
08:6a:12:7d:22:c0:97:f4:31:0f:c0:b1:0d:99:a3:f1:11:17:
d4:f0:be:f5:0f:ff:dc:67:0e:2d:e2:e2:e0:8d:ff:6c:98:94:
9c:7f:ea:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net