Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/YqsIJO2_ffnr84dFD6FPVdm33CU.roa
File: YqsIJO2_ffnr84dFD6FPVdm33CU.roa (raw, json)
Hash identifier: pxoJD8X1pGpkVmBMQ12ROsjSsHVTYIEf7xsdsWhn70g=
Subject key identifier: 62:AB:08:24:ED:BF:7D:F9:EB:F3:87:45:0F:A1:4F:55:D9:B7:DC:25
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 0195374A787619F2692764621F5EA5818DF6
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/YqsIJO2_ffnr84dFD6FPVdm33CU.roa
Signing time: Mon 24 Feb 2025 09:29:42 +0000
ROA not before: Mon 24 Feb 2025 09:29:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12796
IP address blocks: 94.190.128.0/22 maxlen: 22
94.190.132.0/22 maxlen: 24
94.190.136.0/21 maxlen: 21
94.190.160.0/19 maxlen: 19
94.190.192.0/23 maxlen: 23
94.190.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:4a:78:76:19:f2:69:27:64:62:1f:5e:a5:81:8d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Feb 24 09:29:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62ab0824edbf7df9ebf387450fa14f55d9b7dc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:47:c4:d3:86:42:28:d8:22:2d:3d:24:72:
bd:bd:79:c7:bb:dd:4f:4e:e1:b5:ce:1f:5c:75:cb:
7a:5f:8a:d6:61:a6:18:3c:60:78:af:4a:ef:21:35:
20:23:a2:da:5d:52:61:06:a7:55:8b:a5:34:13:dd:
22:86:e5:bc:67:03:13:0d:ab:3b:5c:59:68:08:e9:
52:af:f7:ed:00:60:26:e1:fd:a5:3a:43:15:44:86:
b7:25:9f:e5:60:be:36:28:62:31:fd:50:0d:44:dd:
00:8c:12:e3:e7:2b:4d:81:10:c3:46:e1:00:63:41:
c9:f4:ea:dd:94:86:3e:67:78:a7:f3:5b:ed:bb:26:
fe:f4:58:20:51:91:4e:78:b9:93:ed:f9:ac:93:6b:
5d:8f:b6:23:b0:20:e9:da:ff:68:35:0e:48:b5:5e:
a0:ac:71:a8:42:4a:9e:55:20:da:8d:e6:38:74:9a:
ee:0f:e0:7e:52:a0:a6:0f:0e:b6:8d:66:98:ff:75:
57:36:bc:df:f4:41:99:25:53:63:62:6c:68:21:e5:
5d:c0:39:6b:51:29:dc:77:1f:b5:31:36:6e:0c:87:
c1:bb:b5:6f:80:da:df:62:65:28:57:10:d0:48:4a:
35:fa:e9:45:09:5f:ca:6c:32:d2:e3:0f:8f:83:e3:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AB:08:24:ED:BF:7D:F9:EB:F3:87:45:0F:A1:4F:55:D9:B7:DC:25
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/YqsIJO2_ffnr84dFD6FPVdm33CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.128.0/20
94.190.160.0-94.190.194.255
Signature Algorithm: sha256WithRSAEncryption
58:12:88:02:60:7f:c3:22:40:a4:be:e5:15:d0:60:f4:2b:c3:
5c:63:28:5f:57:1d:44:12:35:c3:ec:00:d3:c8:de:d0:11:27:
d8:37:12:4d:03:8d:15:94:bd:32:d1:88:9f:68:3a:7c:6e:2e:
3f:eb:ca:5a:3e:14:20:80:a6:25:3d:29:bc:44:34:90:31:4a:
9f:03:d8:66:cb:55:79:70:78:8a:f5:24:40:9e:af:0e:7c:12:
7e:7a:1e:09:0f:a5:72:90:25:04:a6:c2:75:fd:e3:be:88:c0:
87:e5:79:bd:00:96:2c:6a:79:eb:96:70:a7:52:79:24:2b:b3:
e1:fc:b3:31:7f:02:03:e8:df:22:fc:b0:30:ca:17:92:ab:75:
6d:6f:28:25:ed:49:ae:79:fa:2f:26:cf:8f:97:b3:bc:8e:2b:
c8:cc:d4:85:d6:86:22:18:76:6e:6a:c6:63:f7:0a:10:d4:bf:
2f:75:d3:c3:e7:8f:ea:59:dd:39:ec:ed:e0:74:ec:a0:3d:47:
dc:f3:2f:91:67:fb:1b:c8:c0:f2:ca:36:c4:2d:ee:8e:96:3a:
fa:a6:72:29:11:eb:f7:80:86:85:96:aa:0c:c8:60:60:cc:12:
28:45:64:7a:58:7a:b3:b2:13:08:59:08:ea:6f:e4:5f:55:35:
29:51:30:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net