Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/YJaCMuaqIfvKw8ug1wakmaHiyAo.roa
File: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (raw, json)
Hash identifier: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=
Subject key identifier: 60:96:82:32:E6:AA:21:FB:CA:C3:CB:A0:D7:06:A4:99:A1:E2:C8:0A
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 019422FBA8C41CBDE2E65F80B11B7666C107
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/YJaCMuaqIfvKw8ug1wakmaHiyAo.roa
Signing time: Wed 01 Jan 2025 17:48:25 +0000
ROA not before: Wed 01 Jan 2025 17:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209500
IP address blocks: 45.182.188.0/24 maxlen: 24
46.226.121.0/24 maxlen: 24
85.193.79.0/24 maxlen: 24
103.14.1.0/24 maxlen: 24
193.31.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a8:c4:1c:bd:e2:e6:5f:80:b1:1b:76:66:c1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Jan 1 17:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60968232e6aa21fbcac3cba0d706a499a1e2c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:79:2c:2b:12:1c:23:b5:0a:cb:61:58:2b:
b4:82:03:37:af:49:6b:3c:dc:ce:d6:8d:3d:8c:b3:
e4:db:33:6e:c2:b4:26:6f:e2:d8:e7:2d:f3:ae:38:
f8:97:c6:0c:74:68:e3:a4:f4:05:2c:ea:f6:52:ff:
be:0a:c3:39:51:09:9a:5c:26:bd:28:01:dd:d6:a7:
35:82:f7:5f:cd:af:2f:d2:1d:f6:4e:bc:f6:90:af:
5e:43:09:5c:25:f8:90:0a:5b:bc:86:b8:17:57:4f:
bc:fd:0d:23:0f:73:69:e2:c1:d1:99:cb:8b:14:a2:
5d:73:dd:5e:11:9c:57:8a:b5:32:c8:18:dd:7a:be:
2b:f7:4b:70:c4:1f:88:df:e3:65:8d:41:04:e6:eb:
5e:0c:e0:8a:5a:4f:6a:86:3b:c0:e0:8c:6e:0d:48:
49:5a:97:c2:1a:3a:96:61:76:2d:72:4f:fd:a7:fc:
3d:0b:69:b1:de:a4:b6:c8:a9:e9:58:fe:f5:47:2c:
d5:1b:95:95:ca:ae:6c:2d:88:22:60:91:ee:07:ac:
9d:03:21:b3:1f:18:2d:8d:dd:17:94:e9:e9:0c:3b:
b2:7b:69:7c:6c:07:25:fd:69:49:c8:3e:3e:48:50:
81:8e:fd:fa:51:44:53:7a:24:48:d2:3d:11:e8:4b:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:82:32:E6:AA:21:FB:CA:C3:CB:A0:D7:06:A4:99:A1:E2:C8:0A
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/YJaCMuaqIfvKw8ug1wakmaHiyAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.182.188.0/24
46.226.121.0/24
85.193.79.0/24
103.14.1.0/24
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1a:c4:44:25:52:ff:2c:79:f2:50:c7:69:b2:03:db:e4:83:
2c:c0:e9:5d:d5:a1:7c:f4:dc:dc:39:93:77:5f:ab:92:86:12:
d4:52:16:ff:70:2a:89:93:c1:ce:be:65:9f:e9:c2:7c:45:ff:
94:0b:e0:cd:48:43:5a:b9:f6:9a:8e:42:28:a6:0d:89:7d:67:
14:c4:6d:6e:ca:01:f5:32:2f:ab:8c:1c:4e:41:c5:d5:75:cc:
ee:2d:5c:1f:9e:81:87:ca:8e:70:bd:2a:99:38:0e:ad:fd:c2:
74:dc:22:ed:3c:ba:4a:3f:92:cb:5d:ef:d2:fa:2b:27:94:56:
a2:e9:2f:9c:6e:dd:3e:57:7b:0f:cb:04:e2:8c:3c:dd:54:a1:
f2:03:b8:d0:da:8e:9c:78:ab:18:31:93:cf:b6:1b:8c:d0:55:
53:08:4e:26:38:e4:1f:8a:b9:c9:63:0e:0f:03:ce:10:6c:0e:
16:68:69:8b:81:71:9f:88:2a:96:49:2d:23:19:96:73:e7:6a:
a1:c6:1b:85:64:a7:e6:98:ad:a2:05:9e:a7:ac:0e:00:64:5b:
05:d7:7c:2f:10:49:fe:1b:2d:47:11:43:87:ae:70:12:f3:b4:
73:76:e7:e8:a8:70:e9:f1:1b:7d:81:de:bc:81:e0:7e:16:7a:
e3:2f:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net