Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/ya6fLqZqW9YiSMq0_70IzMeFSTc.roa
File: ya6fLqZqW9YiSMq0_70IzMeFSTc.roa (raw, json)
Hash identifier: xJjaUPhHWHICcif0SwgfpErfhFmKOtPZjx5JM2GQnhA=
Subject key identifier: C9:AE:9F:2E:A6:6A:5B:D6:22:48:CA:B4:FF:BD:08:CC:C7:85:49:37
Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial: 01941F8C124AAFB28204256996CF84247737
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/ya6fLqZqW9YiSMq0_70IzMeFSTc.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47698
IP address blocks: 91.206.174.0/23 maxlen: 23
91.208.103.0/24 maxlen: 24
2001:67c:394::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:12:4a:af:b2:82:04:25:69:96:cf:84:24:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9ae9f2ea66a5bd62248cab4ffbd08ccc7854937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:d0:3d:20:1a:21:3d:f5:72:75:35:b2:8a:
6e:71:44:da:f9:a6:02:c3:57:ec:17:bf:ca:19:70:
a0:4c:87:9a:3b:de:97:b6:12:fd:c3:10:ca:f2:af:
1e:11:52:35:d8:cf:eb:7d:47:fa:8d:9a:e0:27:1e:
d0:c9:1c:4b:31:e1:83:0b:5d:21:44:e8:a6:21:cf:
5d:b4:9d:d9:2c:b0:b7:a7:b5:ea:72:24:1e:ee:85:
45:a7:3b:a4:14:af:cc:dc:80:87:30:54:0b:8b:51:
0e:6d:d0:ab:45:1c:9f:fb:8f:95:6b:a0:9d:25:d0:
b4:63:a3:13:f3:64:16:7a:a7:13:61:64:de:c1:98:
7d:c0:d9:c3:0a:fd:c6:6f:d2:99:90:58:37:77:9b:
5f:77:43:95:64:0d:d0:b5:50:fe:92:63:f8:95:ae:
7f:47:92:db:1c:d2:7c:86:fb:e7:ef:9a:a4:3c:7c:
e6:cb:92:20:1a:4d:33:24:ce:01:e0:50:10:06:b1:
7c:e8:c7:b3:35:c6:60:99:56:9b:50:35:d2:6b:a0:
78:6b:51:ed:f9:21:02:be:95:5b:a0:89:4c:09:8b:
c1:f3:3b:9c:22:a4:6d:bb:62:37:91:1a:21:46:aa:
5a:ad:f5:21:06:50:33:3b:5f:53:0b:fc:c0:83:f4:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:9F:2E:A6:6A:5B:D6:22:48:CA:B4:FF:BD:08:CC:C7:85:49:37
X509v3 Authority Key Identifier:
keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/ya6fLqZqW9YiSMq0_70IzMeFSTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.174.0/23
91.208.103.0/24
IPv6:
2001:67c:394::/48
Signature Algorithm: sha256WithRSAEncryption
7c:21:45:e8:2d:b4:f0:f1:36:1b:c9:dc:16:00:9b:db:e3:66:
5e:93:d1:82:15:75:00:5d:52:dc:52:a0:5f:de:f8:91:cd:92:
61:62:c5:1f:80:3a:21:c3:a5:a8:b5:e5:4c:07:d3:9e:bc:f6:
3b:b1:99:e4:3f:f5:8d:5f:95:0d:b9:6c:3e:35:f3:b4:18:1e:
01:83:86:11:ee:34:81:c7:cd:7e:af:8b:07:b1:72:94:00:82:
ec:67:89:73:db:68:54:77:e5:44:4f:e2:57:94:a9:46:fb:84:
d2:98:aa:8c:fa:6e:9c:40:9b:86:a7:2c:c0:d5:09:55:e9:2b:
03:d2:f4:e8:94:b4:ab:31:29:7e:08:40:a6:4d:6c:74:3e:b9:
61:2a:72:d5:20:76:08:2a:88:27:33:9a:20:2a:8c:2c:95:78:
13:6f:15:f0:75:e3:ae:14:35:10:0d:5f:be:93:e5:5f:c6:2d:
36:fa:15:60:a1:24:7f:74:60:9d:20:d9:82:3c:c4:ce:1d:d9:
9b:ff:c8:0f:6c:b5:be:55:bd:70:64:d7:c2:49:91:98:de:9d:
1e:d3:df:ac:c9:23:b4:9b:2b:97:a7:4b:1b:1c:4b:c5:4e:b8:
45:68:ad:50:b5:bf:bf:7c:ac:38:32:fe:23:64:ee:95:6d:72:
69:58:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net