Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/y-w10VcWO64Aa-ZHTbSIu6gvxO8.roa
File: y-w10VcWO64Aa-ZHTbSIu6gvxO8.roa (raw, json)
Hash identifier: 8KjKS2TbblOxZGNO73UB7CJV4kAtfKbHUhc0su88VHg=
Subject key identifier: CB:EC:35:D1:57:16:3B:AE:00:6B:E6:47:4D:B4:88:BB:A8:2F:C4:EF
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 0193682A1AD624D454B386D1C22A1096F661
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/y-w10VcWO64Aa-ZHTbSIu6gvxO8.roa
Signing time: Tue 26 Nov 2024 11:10:09 +0000
ROA not before: Tue 26 Nov 2024 11:10:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212177
IP address blocks: 80.75.219.0/24 maxlen: 24
2a03:f980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:2a:1a:d6:24:d4:54:b3:86:d1:c2:2a:10:96:f6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Nov 26 11:10:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbec35d157163bae006be6474db488bba82fc4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:1b:96:75:dd:a6:44:1f:c3:ef:14:4d:bd:
a1:13:1e:23:8e:e3:bf:b2:59:8d:5c:76:e0:e3:47:
6e:cd:50:17:44:f7:0f:12:45:da:55:06:86:24:54:
59:e5:62:b1:35:8e:27:a0:fe:0d:04:33:c3:d9:67:
13:32:85:24:8e:e4:23:b6:03:3c:72:c6:2b:a7:5a:
83:e6:14:57:09:0b:d2:49:eb:75:2f:1a:bc:09:83:
1d:76:41:8a:8f:65:0c:5b:c0:4c:63:61:c4:90:25:
85:16:63:31:54:1f:2c:fc:99:04:9b:14:b2:d7:ba:
cc:e5:25:62:df:3b:25:e2:f5:1d:a3:62:b3:13:5f:
2f:be:10:85:7c:28:58:a5:f7:61:d6:0d:6b:87:52:
2b:69:e4:19:28:fd:8b:b4:d9:e6:57:9d:c8:1e:da:
48:a7:5c:48:34:2b:df:b7:a6:5c:ac:d5:12:96:92:
8a:3f:a9:a5:50:69:51:4d:f3:5f:ee:ff:96:4c:23:
28:ad:ae:ab:1b:99:57:5c:51:a5:c8:06:83:07:6d:
8e:50:0f:63:cb:4a:e7:cc:94:99:cb:a8:c2:e1:18:
59:3a:f7:da:5f:d1:a8:c0:93:c7:3d:87:35:ea:95:
80:fb:12:36:00:ef:c2:d1:9b:8d:c6:d5:c9:cd:5e:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:35:D1:57:16:3B:AE:00:6B:E6:47:4D:B4:88:BB:A8:2F:C4:EF
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/y-w10VcWO64Aa-ZHTbSIu6gvxO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.219.0/24
IPv6:
2a03:f980::/29
Signature Algorithm: sha256WithRSAEncryption
01:e6:b6:57:6f:3f:55:64:71:4e:35:49:cf:66:cb:1b:90:69:
9b:59:7e:bf:9e:b1:74:cb:a7:a5:df:9f:56:d0:fc:18:3d:79:
2c:64:f9:dc:df:d8:4b:37:47:26:c0:4f:d8:18:f0:d3:36:12:
b9:8e:28:b4:d7:9d:66:da:dd:97:6e:de:c2:a0:8e:7d:cd:f3:
db:e3:22:06:7d:5c:2f:f7:55:01:76:c1:54:53:4f:75:1f:5d:
ff:b5:c5:9c:7c:ad:c4:bd:64:1e:65:85:ff:75:d8:11:80:22:
73:9f:1a:35:00:ee:87:78:4d:c7:31:91:f0:22:1e:b1:10:b4:
a7:f9:98:97:04:0a:96:7a:7b:94:d3:53:14:b1:c8:b7:bb:0b:
0e:a0:d6:37:5f:d1:80:7a:92:60:4c:63:59:9f:cc:bc:1e:bd:
78:8d:48:aa:39:da:4f:1c:a2:9d:3f:60:60:dd:f3:b1:5a:0b:
d4:ff:d1:75:0b:4c:b7:dc:37:bf:04:8b:29:8a:9d:90:ef:e9:
6e:2e:cc:5d:7b:9b:35:bb:a4:c6:10:26:53:b8:6c:1c:60:f6:
ab:2e:21:93:e3:86:33:d5:cc:8e:43:89:2c:18:d1:ef:53:2b:
a5:0f:db:71:cc:c6:80:80:fe:86:20:c4:da:4f:54:14:b2:8d:
f3:17:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:11 2024 by rpki-client on console.sobornost.net