Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/yA26U698WiwzniVz1UlkhJcQMjM.roa
File: yA26U698WiwzniVz1UlkhJcQMjM.roa (raw, json)
Hash identifier: CFHvqr/7PqZARuDpFK+XZh+5AGfZiExKnUkhVk+BFbc=
Subject key identifier: C8:0D:BA:53:AF:7C:5A:2C:33:9E:25:73:D5:49:64:84:97:10:32:33
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 018CC2DB62E6A8AC7B4B11CFD67209D8DFB3
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/yA26U698WiwzniVz1UlkhJcQMjM.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48426
IP address blocks: 91.209.154.0/24 maxlen: 24
46.183.49.0/24 maxlen: 24
46.183.50.0/23 maxlen: 23
46.183.52.0/24 maxlen: 24
2a00:4040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:62:e6:a8:ac:7b:4b:11:cf:d6:72:09:d8:df:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c80dba53af7c5a2c339e2573d549648497103233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:8f:2f:ef:93:68:e3:ef:a1:ff:4d:4a:82:
63:70:21:ca:74:31:6c:87:73:1a:5d:e5:09:52:8d:
9e:78:6b:a6:e0:33:27:f3:d3:e8:ed:ab:59:07:6b:
37:fe:41:91:2b:5a:1f:35:81:31:83:73:41:6c:b3:
3a:c1:fc:59:49:d1:d6:70:93:89:86:83:b0:62:e6:
54:1f:d8:94:06:3c:0a:4d:d3:02:83:e7:01:1c:ad:
a5:a2:88:3a:78:0b:9d:79:86:d5:07:72:77:b3:f0:
8f:81:45:4b:e7:2d:2a:2f:7f:96:a8:b8:56:6f:f6:
4e:14:ca:d0:4d:fb:d2:08:f6:09:17:84:9c:61:15:
16:a2:54:c7:0a:f5:aa:24:36:ec:b2:2b:49:d2:be:
42:9f:0f:3c:24:75:d2:77:57:cb:d0:82:fd:1f:4a:
4b:39:2a:87:ea:3d:32:34:b1:f3:a9:b5:f3:77:51:
ba:5d:2d:20:0e:27:da:41:57:14:15:48:77:8c:cd:
aa:e8:93:f2:0f:74:ba:7e:8f:68:24:1d:ef:2f:4b:
1a:96:80:85:06:56:a0:5c:ec:2d:ed:09:9f:61:44:
95:fd:de:75:55:6c:73:ee:c4:a1:48:83:42:44:e6:
c8:16:aa:7b:d7:58:b0:64:39:09:75:91:f2:63:cd:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:BA:53:AF:7C:5A:2C:33:9E:25:73:D5:49:64:84:97:10:32:33
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/yA26U698WiwzniVz1UlkhJcQMjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.49.0-46.183.52.255
91.209.154.0/24
IPv6:
2a00:4040::/48
Signature Algorithm: sha256WithRSAEncryption
d4:45:30:32:e9:1f:f5:be:c1:a5:fb:ad:e0:e9:d8:e8:1f:0f:
6c:36:4f:0a:56:7d:1c:cd:2e:33:04:af:8f:d3:aa:96:c4:90:
22:0e:c2:cc:58:1d:a5:d4:ff:11:9d:e7:fc:c7:d0:af:f6:59:
6f:10:20:de:6f:80:ce:a5:c1:c7:ac:31:2e:7e:4e:b8:39:ea:
d0:1e:93:9a:22:18:4c:67:ac:e0:18:43:e6:77:3b:e1:ee:09:
4e:b0:ac:80:92:64:ac:c8:4e:b6:f5:51:77:ae:b3:9b:e1:82:
44:d3:f2:d6:a6:69:e0:40:1c:c4:8b:69:3f:e9:b8:99:d4:93:
67:28:80:28:b1:9e:9a:83:46:28:ef:10:d8:ea:de:a6:42:b8:
8e:50:2f:30:17:88:91:8b:eb:c1:0e:9e:b1:ed:0a:73:78:09:
86:38:73:62:f5:a0:5b:13:fe:4a:eb:29:a3:a5:7a:45:05:59:
a5:d0:73:84:19:a3:54:43:eb:5a:50:be:52:b5:60:01:60:08:
98:97:22:53:bf:90:b2:a1:ea:df:9d:a4:bd:08:4a:bc:c4:41:
04:b0:2a:39:e3:62:36:23:97:69:7f:a6:d4:5c:95:1c:df:5f:
af:1a:21:cd:9e:08:1a:77:60:ee:bb:9f:d7:50:a5:63:39:01:
f8:26:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net