Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/y7v-mWbLIi-YEJOLFYZrPZdamNM.roa
File: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (raw, json)
Hash identifier: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=
Subject key identifier: CB:BB:FE:99:66:CB:22:2F:98:10:93:8B:15:86:6B:3D:97:5A:98:D3
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 0194228D8A789A18771B4B344B10F5DECD0A
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/y7v-mWbLIi-YEJOLFYZrPZdamNM.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204835
IP address blocks: 91.231.174.0/24 maxlen: 24
195.138.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8a:78:9a:18:77:1b:4b:34:4b:10:f5:de:cd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbbbfe9966cb222f9810938b15866b3d975a98d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:ad:73:46:03:13:90:eb:44:14:bb:63:5f:
3d:6f:74:2b:e8:ef:b7:e9:1c:1a:a8:88:1f:4d:e1:
82:c5:a0:75:d7:fa:ac:85:f0:b3:ab:1a:1a:f3:42:
75:aa:25:a5:08:89:76:5b:f1:6c:f7:6e:ef:f0:5e:
31:9f:07:03:4b:5b:ff:a2:20:b2:f5:99:b7:0a:cc:
63:5f:ed:28:4f:03:d9:13:ea:f1:ec:54:d7:52:68:
fb:77:82:5d:64:56:9b:06:77:d7:c5:fa:89:ca:e0:
3a:3c:45:66:e8:26:ef:91:06:24:19:6f:1a:38:51:
47:ab:4a:cb:31:ea:09:bc:0a:bf:a0:f0:61:d8:5f:
38:de:af:7a:83:4b:4f:79:e2:fe:3c:51:ec:80:02:
6c:02:dc:bb:23:7f:f4:a8:15:97:16:09:39:41:e0:
97:63:3a:a8:97:38:c4:ed:a6:ea:82:47:e2:bf:20:
1b:71:c9:e7:0b:00:60:10:13:f9:87:f1:49:bb:b3:
cd:36:97:50:19:3e:ed:70:f4:4f:07:f9:7c:45:d6:
73:bc:f0:d7:d3:90:84:57:46:bd:f7:33:29:9d:bb:
77:4c:4c:2e:29:44:79:47:78:65:c9:09:4f:75:89:
f5:b3:86:69:44:93:e8:21:53:ae:dc:c9:68:a2:23:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:FE:99:66:CB:22:2F:98:10:93:8B:15:86:6B:3D:97:5A:98:D3
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/y7v-mWbLIi-YEJOLFYZrPZdamNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.174.0/24
195.138.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c8:56:d6:74:35:35:53:b2:39:91:37:b5:c1:e5:6c:c5:2d:
44:7f:44:8e:39:f4:0e:13:78:24:6d:b3:41:d4:2f:c4:03:8a:
3c:bb:1a:19:71:b3:72:7b:41:5b:b6:61:0c:41:6a:d4:3b:af:
79:42:40:67:8b:21:ae:cc:73:cf:d5:9a:66:7a:78:1c:0c:54:
48:f8:a9:5c:1e:e5:ef:bc:51:03:6c:4d:c7:bc:e5:19:c0:5f:
98:11:90:a6:8a:56:68:57:f2:b1:0a:61:d5:71:1d:be:ce:20:
7c:51:b3:f0:d2:24:fb:e9:ea:08:a8:20:63:58:d2:3f:96:f3:
b2:1b:95:e7:1f:4c:29:d8:e5:39:1b:68:72:a1:b3:21:21:e4:
9b:d1:da:df:d8:0c:29:e6:2f:65:13:b3:f5:b6:20:f0:5c:d8:
44:37:81:1f:34:c8:f2:b9:0e:68:dd:e8:8b:89:0f:56:d1:20:
4b:e3:80:b3:6f:f3:03:27:d8:a1:aa:8e:6b:05:f1:6d:29:95:
c2:8d:f4:c1:b3:22:cf:90:cc:66:e8:13:02:9c:c3:eb:5c:d9:
3e:ed:31:bc:1b:48:03:8b:f2:fd:9f:e7:81:8c:05:43:48:4d:
2b:ff:46:94:14:5d:7b:0c:8a:9b:a4:ef:e4:6f:9f:98:ca:cf:
4b:13:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net