Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yoy8zM094Tuh7sBjSzroT4YADiM.roa
File: Yoy8zM094Tuh7sBjSzroT4YADiM.roa (raw, json)
Hash identifier: 6wvPncVrZclyBu5vI+qRRsa0CL0usW1ye7g6thW/jww=
Subject key identifier: 62:8C:BC:CC:CD:3D:E1:3B:A1:EE:C0:63:4B:3A:E8:4F:86:00:0E:23
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0193B58E4F32A9463D970AC82A8D8EFD5BB2
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yoy8zM094Tuh7sBjSzroT4YADiM.roa
Signing time: Wed 11 Dec 2024 11:50:22 +0000
ROA not before: Wed 11 Dec 2024 11:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64433
IP address blocks: 195.14.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:8e:4f:32:a9:46:3d:97:0a:c8:2a:8d:8e:fd:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Dec 11 11:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=628cbccccd3de13ba1eec0634b3ae84f86000e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:3b:07:96:f8:78:40:b0:40:bf:1a:e0:77:
4c:e9:d1:d0:d1:58:0a:90:e6:e1:11:45:13:b8:3e:
3e:0d:97:d1:a6:9e:1e:9a:fc:c3:84:65:46:59:47:
73:62:18:7f:7f:5c:85:15:c2:2e:8e:0e:77:21:f2:
bc:9b:5c:fc:7b:3f:04:71:cf:61:3c:3c:85:4e:75:
21:4f:fe:e9:22:86:96:79:cc:9d:b0:6c:49:eb:fc:
50:f2:67:09:24:d7:e4:bc:a0:ea:2f:4e:86:54:10:
ed:3d:41:fa:2d:a4:45:57:fc:c0:03:fc:dd:1e:62:
0e:0b:e0:2a:14:ad:ea:79:a5:2f:d5:32:42:7b:0d:
22:84:33:42:81:f0:ee:d6:04:6f:81:31:20:03:e9:
96:1e:6e:b8:65:2c:51:17:54:20:5a:fb:06:7c:ee:
75:a1:cd:9b:06:37:27:7f:e5:1b:22:89:d4:66:50:
e2:8b:45:7a:1c:82:a8:9e:51:60:26:f7:3a:cc:8c:
05:66:19:d5:61:87:4d:85:10:93:ca:82:bc:9e:e0:
ea:00:84:65:d1:69:a3:64:2d:8f:d1:28:d7:43:79:
b2:1d:56:84:8d:50:57:32:7d:eb:b1:f8:73:19:d4:
47:dc:66:58:5e:57:0e:ad:53:ad:a8:e3:86:39:29:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8C:BC:CC:CD:3D:E1:3B:A1:EE:C0:63:4B:3A:E8:4F:86:00:0E:23
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yoy8zM094Tuh7sBjSzroT4YADiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.118.0/24
Signature Algorithm: sha256WithRSAEncryption
41:59:bc:94:6c:29:63:ae:cb:a6:b9:65:47:68:3e:5d:0f:92:
2f:dc:8a:36:a3:0f:a9:04:36:44:66:da:c3:f3:f9:16:9c:46:
ad:5f:a7:7b:56:01:b4:75:f5:b5:cd:97:8c:1f:c0:27:91:49:
db:69:00:93:7d:7c:48:89:c2:21:3a:04:ac:f2:89:bb:e4:fc:
3b:85:71:16:ec:53:f2:ea:50:24:80:a4:b7:1c:bc:1d:e6:f1:
98:b0:14:8f:4d:2c:49:d7:42:d4:d0:5e:15:88:2d:c3:18:3f:
ba:24:9c:4c:7f:cc:f0:a6:91:1c:48:30:65:cb:f0:21:b5:18:
c8:38:a4:32:c8:d3:32:aa:df:2a:c9:dd:02:e1:c3:78:d3:d2:
44:a0:5c:9b:19:e6:91:04:1f:b3:9a:67:fd:f1:77:4e:d4:f9:
8e:48:b5:ff:ff:a0:d4:82:3e:d0:03:71:20:50:f1:b1:01:33:
82:63:c3:cb:f6:48:b5:df:d5:72:7b:76:74:46:71:54:1e:36:
c4:65:a6:f6:6c:57:a9:40:0b:15:18:14:f1:30:7e:52:74:d8:
be:13:6c:79:cc:2a:91:d6:b7:73:28:9c:27:45:fb:a3:c1:a6:
c8:87:b6:80:ee:1c:22:ab:fa:88:ff:72:5d:9b:2c:06:30:05:
3b:cb:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:11 2024 by rpki-client on console.sobornost.net