Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/yI1TzakMy1CVFXL20NuFOWQEZWI.roa
File: yI1TzakMy1CVFXL20NuFOWQEZWI.roa (raw, json)
Hash identifier: 4unelTzh5WZ8XS9bPvAGT86X/x2jFTWP+3k9QiMWd7E=
Subject key identifier: C8:8D:53:CD:A9:0C:CB:50:95:15:72:F6:D0:DB:85:39:64:04:65:62
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0193ACA5BB854BD5B197D210DA193B57D266
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/yI1TzakMy1CVFXL20NuFOWQEZWI.roa
Signing time: Mon 09 Dec 2024 18:19:22 +0000
ROA not before: Mon 09 Dec 2024 18:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9002
IP address blocks: 31.128.32.0/22 maxlen: 24
45.130.212.0/22 maxlen: 24
83.222.20.0/23 maxlen: 24
90.156.254.0/23 maxlen: 24
91.218.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:a5:bb:85:4b:d5:b1:97:d2:10:da:19:3b:57:d2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Dec 9 18:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88d53cda90ccb50951572f6d0db853964046562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:03:75:4d:d6:bb:c5:2c:ec:94:8a:23:ad:
03:53:54:36:25:c1:32:f5:6d:68:a2:90:2e:64:29:
51:43:f9:3b:11:92:54:58:9c:a1:00:a3:38:b3:21:
91:d2:d5:50:ea:af:16:7d:bc:90:c8:85:0d:16:65:
df:62:6d:c9:28:a9:2c:e2:9f:94:8e:0f:15:ff:8f:
b2:c9:43:f3:a2:62:95:a0:4a:b4:0f:f6:3d:1d:46:
5a:78:e8:00:15:c9:3f:3a:ff:fa:58:d4:b1:fb:4f:
09:2e:9d:bf:5d:7b:82:1c:cd:53:18:9d:0f:66:93:
04:05:72:eb:9c:fc:01:80:1c:be:bb:a2:1b:0c:0d:
79:bf:87:0f:fb:56:9e:64:16:81:56:df:8d:bf:dc:
90:68:bb:2f:d2:4d:f2:ed:5f:44:94:7f:d7:c9:af:
2c:f8:8b:e9:8d:eb:a9:ae:21:bf:f3:2c:85:e6:0c:
ec:c6:05:72:36:87:2f:50:a1:e3:3a:db:cb:cc:43:
41:77:fc:39:67:27:f1:7e:24:ca:12:bf:61:a4:0e:
91:80:61:79:ae:2d:b5:91:d9:42:5e:82:d6:83:56:
a7:e5:0f:29:0e:1f:65:c7:83:04:54:68:31:99:62:
4f:0b:18:8e:19:73:6c:8e:5a:7a:0a:36:a4:d4:0f:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8D:53:CD:A9:0C:CB:50:95:15:72:F6:D0:DB:85:39:64:04:65:62
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/yI1TzakMy1CVFXL20NuFOWQEZWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.32.0/22
45.130.212.0/22
83.222.20.0/23
90.156.254.0/23
91.218.142.0/23
Signature Algorithm: sha256WithRSAEncryption
13:11:11:da:8d:49:67:5a:df:6e:4e:67:27:cd:eb:3e:ae:e3:
34:a9:89:7c:e3:d2:c9:af:19:c4:b5:0b:49:65:44:08:c7:a6:
19:12:00:8b:db:35:39:fd:e9:37:57:11:54:6b:fd:de:bb:1e:
59:8f:49:6d:d3:a0:7e:b1:fc:6e:c3:7d:27:8d:a3:8e:ad:f8:
0f:74:40:ed:b0:41:bc:0b:c8:fc:97:83:c1:c4:46:a6:7c:f2:
aa:13:87:08:6d:a4:c5:9e:26:b1:36:df:49:1a:53:bd:85:dd:
f0:41:f3:da:b0:57:d3:25:d7:53:9c:99:d5:4c:e7:63:0e:08:
ba:74:ad:2a:0c:ff:22:d6:89:6e:b1:6f:40:ab:d5:46:35:53:
c3:2c:91:b9:53:d7:83:23:42:b8:a3:7d:7b:92:87:45:28:38:
45:52:5e:73:9d:95:7c:d4:25:d2:53:77:8c:43:1f:fe:80:52:
0a:f4:37:09:ad:b7:2f:d4:98:08:a5:7d:10:e8:5c:cf:99:cd:
a9:7d:7b:8e:56:3d:ea:22:9e:ca:a1:0a:da:fa:f9:1f:b4:60:
0c:ca:d6:11:bd:01:98:67:86:36:14:3d:2d:8e:74:c8:97:81:
78:6e:f3:13:49:18:15:83:7f:72:10:31:79:54:7d:54:b6:b6:
86:d5:9b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net