Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/YYXnMCAt040NcLATlrH2pdrRzy4.roa
File: YYXnMCAt040NcLATlrH2pdrRzy4.roa (raw, json)
Hash identifier: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=
Subject key identifier: 61:85:E7:30:20:2D:D3:8D:0D:70:B0:13:96:B1:F6:A5:DA:D1:CF:2E
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 01942067E8CB05EBE6B2BD2CFAF797EACDCF
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/YYXnMCAt040NcLATlrH2pdrRzy4.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215342
IP address blocks: 87.120.131.0/24 maxlen: 24
87.120.136.0/22 maxlen: 22
87.121.96.0/23 maxlen: 23
185.120.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e8:cb:05:eb:e6:b2:bd:2c:fa:f7:97:ea:cd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6185e730202dd38d0d70b01396b1f6a5dad1cf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:45:13:69:1b:11:75:03:70:56:59:f8:34:c4:
84:08:8b:da:86:8d:19:86:5b:f2:68:c9:76:1e:9a:
c0:01:e1:c4:07:d2:bc:0e:82:18:fc:b4:98:07:b2:
f8:f9:df:77:63:bd:03:9d:fa:a8:3d:db:b9:cb:c3:
e2:91:3b:fe:76:c6:8b:22:24:b9:54:d0:80:44:ae:
ba:39:14:61:04:76:25:39:b6:1f:80:5c:72:80:af:
62:82:bc:03:15:00:4d:f4:90:4c:11:00:ec:da:df:
e1:81:fa:14:30:e2:57:b3:47:0d:2f:17:9d:8d:f7:
4e:a7:bb:26:21:d6:d5:b5:4b:d5:f2:6b:84:af:9c:
28:d4:38:8c:4a:72:48:ea:f6:ef:59:9c:b5:61:0d:
6d:d8:91:b5:1a:b8:48:d2:ba:9e:46:91:c0:e2:1f:
d5:cb:4c:31:ae:7f:79:04:79:cf:de:38:aa:4d:37:
23:39:18:e6:67:36:17:33:47:e0:cd:7d:5f:98:ac:
5c:29:55:e3:76:91:b2:4c:31:8c:79:f6:b7:6a:c9:
01:e7:45:37:41:f9:5c:aa:9b:4d:f7:ee:97:ac:8e:
44:4d:52:ed:b4:01:69:4d:6f:5c:22:22:6d:8a:6c:
c9:fd:8f:87:25:38:20:a5:46:85:60:f6:a6:63:2e:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:E7:30:20:2D:D3:8D:0D:70:B0:13:96:B1:F6:A5:DA:D1:CF:2E
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/YYXnMCAt040NcLATlrH2pdrRzy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.131.0/24
87.120.136.0/22
87.121.96.0/23
185.120.180.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:bd:5d:a7:6f:60:a9:dd:46:53:d0:3f:1d:a8:ea:ff:4e:0a:
87:37:b7:45:d5:e3:26:87:24:36:fd:28:db:af:1a:73:de:59:
22:dc:c9:f3:24:30:e4:43:6c:f8:e7:ba:eb:64:18:1c:e7:02:
bd:d7:1e:6c:2f:8d:ec:13:5e:51:76:23:ef:7f:1e:e5:aa:99:
c9:e8:3b:2a:04:de:43:1b:61:b8:5a:f4:c4:2c:14:b3:19:ae:
d3:0a:ee:a5:56:73:93:52:ab:a7:4e:2d:0d:e8:e6:a1:39:a8:
08:d2:54:f0:2c:58:8e:c2:57:bd:2d:db:bf:5f:97:95:0b:83:
c3:c6:a0:15:fc:1f:45:bf:12:85:b0:38:b8:02:95:54:97:ea:
66:a1:76:d9:c8:92:22:a7:e0:5d:f4:2f:05:fe:e9:f2:69:7d:
a1:54:99:a5:c1:22:c5:34:98:cf:5f:63:41:32:10:95:04:ab:
54:99:ba:bf:08:02:ec:36:aa:6d:6c:2b:4c:28:50:2b:b3:5a:
95:66:5a:f3:87:c9:e5:8a:b2:d2:b7:81:15:a2:5f:e7:76:d0:
49:33:cd:f9:e6:fa:a3:0c:1a:e5:b6:01:97:bb:e8:51:4b:6b:
b4:85:21:b0:62:44:49:0e:f8:7c:90:26:d9:03:ab:e8:2d:1e:
b1:79:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net