Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/YnMGQLntH6ku63sABpyWE3uHKa8.roa
File: YnMGQLntH6ku63sABpyWE3uHKa8.roa (raw, json)
Hash identifier: y0+5+SEFU85wJv04ldq0GQy1g1AukUQZRC03xoKLImM=
Subject key identifier: 62:73:06:40:B9:ED:1F:A9:2E:EB:7B:00:06:9C:96:13:7B:87:29:AF
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 018CC9BCD9962266CF3A55321E8D9CE13AA1
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/YnMGQLntH6ku63sABpyWE3uHKa8.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208566
IP address blocks: 195.191.235.0/24 maxlen: 24
45.128.217.0/24 maxlen: 24
45.128.216.0/24 maxlen: 24
2a0e:41c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d9:96:22:66:cf:3a:55:32:1e:8d:9c:e1:3a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62730640b9ed1fa92eeb7b00069c96137b8729af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:24:0f:96:3e:e7:6d:46:38:fa:64:59:a0:
d1:a8:52:04:f6:d3:8e:cc:fd:43:f9:ec:0f:5e:7d:
78:f3:c7:d0:38:ce:12:67:94:4c:8d:e5:f4:2b:a9:
09:64:f3:f6:dc:c6:00:d6:a9:8d:87:89:6b:57:c5:
53:88:8c:c1:40:74:01:ec:66:96:6e:12:ef:96:66:
ca:5a:67:08:37:41:ca:12:bb:60:7b:c9:17:52:3f:
a8:95:eb:55:63:a4:ab:3a:81:43:e2:af:73:cc:37:
e2:c2:72:8f:78:ba:54:c2:16:32:22:c9:83:b4:fe:
c1:e9:69:b1:f7:12:b2:06:81:6e:80:0a:8b:b2:8b:
ca:15:47:39:8f:dc:df:56:82:4a:08:ff:34:f8:b2:
f9:64:bd:35:fe:c5:c4:60:49:92:de:80:35:ba:66:
7c:d7:2a:0d:c6:74:ed:24:87:2c:4c:16:62:70:18:
07:43:01:87:8d:45:35:22:19:d3:c8:aa:c0:ef:7a:
af:a0:3a:1a:36:50:af:07:1a:e0:a9:55:fc:2e:85:
17:fe:b6:96:1f:00:cd:44:c3:56:12:6f:63:f7:3c:
5f:4b:77:04:61:29:68:4d:19:af:60:3e:ee:1d:58:
bf:90:16:73:d0:4e:94:43:62:f3:a9:a8:54:1c:06:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:73:06:40:B9:ED:1F:A9:2E:EB:7B:00:06:9C:96:13:7B:87:29:AF
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/YnMGQLntH6ku63sABpyWE3uHKa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.216.0/23
195.191.235.0/24
IPv6:
2a0e:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:ca:44:f9:e4:8c:fe:95:0d:9e:7b:3f:bc:a9:ec:32:90:da:
43:c4:f9:a7:c3:35:15:e0:13:d0:22:55:d6:a8:39:7f:50:dd:
9e:ce:62:8e:45:5d:6e:65:cd:e1:2a:d7:06:0a:63:b7:9a:3b:
e4:b0:7a:01:eb:6b:3d:c0:ea:fb:c1:3a:2f:e2:ac:fc:46:59:
0b:68:4c:ef:7e:a6:4d:b8:ea:f1:76:3b:cb:62:f9:1b:7a:9b:
d6:26:4a:8b:69:7a:18:b9:19:e9:01:81:fa:ac:3d:75:55:f2:
72:36:30:5c:06:e1:0a:c8:d7:89:d1:6b:1a:81:97:fa:74:f9:
d0:07:85:3c:59:29:0c:cc:62:e9:a8:76:60:9c:60:fe:b3:ba:
5d:09:1a:53:7d:1c:de:af:33:65:5b:86:e1:17:60:90:01:02:
94:79:2d:12:de:c7:63:e3:80:0b:5f:a0:59:fa:ad:e1:72:14:
42:0d:9b:14:6e:12:cc:d3:a5:5d:5b:8b:2f:03:3f:e1:71:7b:
fa:73:9c:09:26:53:e7:a4:84:d3:0d:3d:f9:0d:9e:23:bc:0a:
1a:83:90:24:55:11:c6:34:45:77:db:76:3c:b7:03:39:6e:11:
b8:28:89:5b:da:1f:66:df:dd:83:7c:fc:80:e8:23:c4:9b:79:
aa:a3:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:08 2024 by rpki-client on console.sobornost.net