Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/ytmASWO-QKILd5rnuuSzVSLNI5E.roa
File: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (raw, json)
Hash identifier: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=
Subject key identifier: CA:D9:80:49:63:BE:40:A2:0B:77:9A:E7:BA:E4:B3:55:22:CD:23:91
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 0194258FBB5FD5674ACD6D1B12DC736BF15D
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/ytmASWO-QKILd5rnuuSzVSLNI5E.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59842
IP address blocks: 45.82.208.0/22 maxlen: 22
45.82.208.0/23 maxlen: 23
45.82.208.0/24 maxlen: 24
45.82.209.0/24 maxlen: 24
45.82.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bb:5f:d5:67:4a:cd:6d:1b:12:dc:73:6b:f1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cad9804963be40a20b779ae7bae4b35522cd2391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:57:35:a8:06:83:5f:98:dd:09:f1:04:c7:
69:6c:40:39:5c:f3:d3:9b:70:0c:09:f4:b8:be:f8:
2d:32:64:99:f5:f7:7b:e2:ba:9f:de:4c:ab:82:91:
06:d4:1a:fa:51:ff:fd:c5:98:bf:a9:5a:6d:69:3e:
42:6e:bd:70:c7:c5:d7:f0:f4:0b:65:4b:92:b0:db:
19:fb:97:25:ba:a8:76:1d:bb:1b:58:cc:15:a1:b8:
cf:bb:e3:93:fc:46:5e:82:4d:8f:57:1a:ef:6f:c6:
7f:b6:37:e0:08:ee:c7:26:e9:3d:d3:66:14:da:c0:
7e:7c:a7:36:88:11:fc:5f:ab:f7:91:df:05:95:4a:
ba:3e:73:7d:89:f7:a2:d9:dd:c6:d2:d3:ee:a2:5c:
92:0a:3e:dc:19:64:7f:0d:59:b2:86:f4:c4:dc:af:
ef:27:a2:71:7f:8c:bf:cf:a2:45:c8:6f:e9:a3:f6:
97:3d:16:19:b2:7e:26:3c:30:9b:e1:de:70:bc:cf:
6e:d3:f0:ea:12:f1:2c:eb:97:b0:05:5e:e9:c8:53:
73:b7:7c:54:e2:46:dc:b5:b1:b3:00:72:85:cb:72:
bb:64:dd:f8:e5:92:84:63:37:50:78:63:be:09:97:
f4:4c:14:6f:4b:3f:00:c0:7d:97:ed:f5:40:c2:13:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D9:80:49:63:BE:40:A2:0B:77:9A:E7:BA:E4:B3:55:22:CD:23:91
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/ytmASWO-QKILd5rnuuSzVSLNI5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.208.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:76:d7:c9:35:a3:1a:04:20:77:04:f1:01:6d:8f:3a:b1:89:
61:e9:4f:d2:78:c1:bb:2c:28:c9:87:27:0d:f2:66:6f:9c:5d:
a1:ad:47:c2:87:17:61:32:86:b0:89:26:0b:6e:97:de:90:f7:
0f:12:55:b2:1a:9e:ec:ba:92:50:93:a0:6b:2e:ff:16:ab:88:
e6:2a:cd:f4:51:3b:01:d5:2f:61:87:1a:93:22:c4:5b:c1:fb:
70:23:c6:d8:a6:8a:a2:6f:e0:16:22:94:5e:34:f1:22:a7:a2:
58:96:21:b2:43:e7:da:d9:e6:1c:56:c0:0d:7f:fc:7c:b4:23:
26:f5:68:2b:a1:2a:46:57:6b:01:35:bf:5b:68:b3:f3:39:02:
c9:0a:dc:e2:db:f8:8c:b6:a1:ec:b3:b1:17:a4:3c:e8:5d:63:
4b:c3:12:0d:7b:44:51:d2:5a:d3:ee:43:7e:cd:44:92:29:a7:
6d:a1:ba:d4:78:f4:77:48:05:84:c7:21:02:54:24:ba:43:88:
7c:92:6c:fd:de:2b:e8:22:51:f3:3e:4b:bf:e6:d3:de:f4:58:
f9:3b:f0:4d:f7:ae:42:39:d7:7f:66:be:04:ee:64:14:7a:0e:
ce:92:e8:04:fc:a1:73:52:c4:ee:54:bc:52:74:95:13:9c:74:
ec:aa:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net