Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yw4VTcb2txtNh3vUBH6Jq3dcWSo.roa
File: Yw4VTcb2txtNh3vUBH6Jq3dcWSo.roa (raw, json)
Hash identifier: B+ycfmzXOUH+KNjfAXv0SBe7K8fFFNdf8Rr0jiHlYxo=
Subject key identifier: 63:0E:15:4D:C6:F6:B7:1B:4D:87:7B:D4:04:7E:89:AB:77:5C:59:2A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9233F343396E865724E2114ACD4F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yw4VTcb2txtNh3vUBH6Jq3dcWSo.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49392
IP address blocks: 194.165.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:92:33:f3:43:39:6e:86:57:24:e2:11:4a:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=630e154dc6f6b71b4d877bd4047e89ab775c592a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:22:10:44:fd:bb:dd:d9:19:09:87:6b:cb:
a5:0a:7e:94:b1:65:f2:bd:7c:4b:42:aa:4f:98:7d:
f2:28:72:0f:7f:57:a2:cb:9e:07:35:b5:b6:03:92:
2c:48:83:90:81:58:ea:dc:04:3d:e5:f4:2c:6c:f6:
1e:91:40:0c:df:ab:88:b5:88:a4:34:bf:b8:19:62:
1e:d4:c0:1e:59:72:16:67:df:0b:56:1c:ff:75:01:
52:de:8a:bf:b4:c6:d2:14:f1:00:4b:8d:4a:15:6a:
4c:e5:19:d0:e0:eb:eb:12:1f:95:1d:d3:7d:2d:07:
af:76:56:ba:fe:f4:27:35:3e:2c:e4:6d:51:78:50:
f5:a8:c6:af:f2:93:4f:29:df:e3:56:f2:ee:89:40:
2d:95:b7:a9:27:7f:ae:6d:b9:d9:eb:8d:9f:0b:bc:
51:b0:cd:66:37:ff:ae:44:7f:b1:9f:db:d9:ff:1f:
90:03:cc:e4:d9:a1:35:d5:c9:3d:e4:79:34:dc:88:
d8:56:b4:80:50:2b:b4:d0:26:a7:d6:6d:3c:4f:8a:
6e:1d:31:9f:d5:82:66:da:e7:48:bc:be:39:0c:10:
53:06:5d:51:45:03:3c:be:bf:db:8c:59:15:75:e2:
fa:e4:9b:6d:8e:0a:1f:44:3d:62:29:9a:0e:eb:d1:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0E:15:4D:C6:F6:B7:1B:4D:87:7B:D4:04:7E:89:AB:77:5C:59:2A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yw4VTcb2txtNh3vUBH6Jq3dcWSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.3.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9a:d9:a5:4f:9a:41:e1:42:18:81:4b:64:69:01:77:15:5f:
ec:3a:ea:ab:52:80:6e:d6:df:40:5e:15:1f:f5:81:c2:75:b6:
5e:7f:47:ab:f0:4c:d4:9a:5e:98:0c:b6:17:96:a1:d0:f0:10:
21:6e:d7:c7:93:ff:55:0b:65:cb:59:31:db:8b:cd:03:2c:6d:
48:b9:d6:20:71:7c:ba:d6:fe:bb:64:0d:7e:9d:db:fc:85:74:
96:42:d5:9d:31:eb:bc:a8:df:f6:fd:70:8e:5b:a3:2f:44:9a:
d3:b0:40:23:22:d6:b6:c5:73:30:7f:c1:48:30:b7:45:5f:f3:
0e:b2:e6:40:e8:c8:bf:6c:45:c7:f2:bf:a0:72:22:10:9c:68:
f6:35:fb:33:f2:06:f2:a6:3e:de:4c:51:2a:e1:90:74:ae:8c:
61:5b:82:ec:4a:f4:d7:6c:34:ea:83:cc:4f:64:d5:ac:ee:59:
37:5b:cd:6f:dc:07:49:7d:a4:e8:52:ba:58:8a:32:fe:df:ec:
87:c8:f6:0f:a2:2e:64:59:ad:53:5c:2f:64:15:1e:1b:ef:1d:
c7:94:4f:e2:d9:cb:23:3a:ae:2a:c6:1a:c1:09:d9:8a:34:55:
bf:2d:6a:92:70:e8:15:f8:54:57:76:91:76:01:e1:6f:e4:1b:
0a:0c:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:36 2025 by rpki-client on console.sobornost.net