Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yniD2-h7jGuUUlNQypkKXhyQzvo.roa
File: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (raw, json)
Hash identifier: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=
Subject key identifier: CA:78:83:DB:E8:7B:8C:6B:94:52:53:50:CA:99:0A:5E:1C:90:CE:FA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 0195D9A208F37B8571ABEA285B1A1B30DF79
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yniD2-h7jGuUUlNQypkKXhyQzvo.roa
Signing time: Thu 27 Mar 2025 22:03:49 +0000
ROA not before: Thu 27 Mar 2025 22:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208408
IP address blocks: 45.138.8.0/24 maxlen: 24
45.138.9.0/24 maxlen: 24
45.138.10.0/24 maxlen: 24
45.138.11.0/24 maxlen: 24
2a0e:aa40::/48 maxlen: 48
2a0e:aa40:1::/48 maxlen: 48
2a0e:aa40:2::/48 maxlen: 48
2a0e:aa40:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:a2:08:f3:7b:85:71:ab:ea:28:5b:1a:1b:30:df:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Mar 27 22:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca7883dbe87b8c6b94525350ca990a5e1c90cefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:c8:d2:10:4a:6e:41:3b:58:fa:16:10:11:
a7:20:d2:6a:c6:98:33:a6:a9:27:11:58:99:88:f4:
4f:fa:4f:ff:7d:8b:45:42:3e:a6:28:5e:b4:be:ab:
a2:dd:e9:60:4e:32:22:83:c0:fb:82:8e:3c:40:eb:
5b:97:ed:6a:54:91:f5:3d:61:69:58:6b:9d:83:81:
7f:5a:9d:7c:b4:f8:eb:61:68:21:15:c3:59:17:77:
78:4b:18:8f:30:72:cd:df:a2:9b:ca:b4:fc:cc:cd:
d1:2a:a3:87:92:be:e9:49:e8:e7:32:eb:c6:de:41:
c3:54:13:99:4d:99:6d:d7:a2:29:e4:f5:ef:7d:ba:
51:4c:17:bb:be:0c:f2:cc:78:cf:b2:b1:b2:2b:c7:
05:39:0d:a0:c5:56:03:d1:78:cf:f4:e4:92:d8:c6:
5f:28:fe:eb:c3:1e:8e:9d:7b:bd:4e:bb:ee:03:09:
b4:94:f5:cb:1f:ba:58:cc:48:cf:45:3f:87:de:71:
9f:3a:42:4f:a3:e5:60:8c:d2:d2:7f:60:50:e0:63:
a3:2f:48:70:4b:7d:7c:9c:e5:6d:35:90:19:29:96:
ba:62:de:d1:23:b2:f4:73:3c:7f:ea:81:68:60:db:
a7:03:e8:39:ac:f9:e1:5a:4d:59:01:d8:16:94:ad:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:78:83:DB:E8:7B:8C:6B:94:52:53:50:CA:99:0A:5E:1C:90:CE:FA
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yniD2-h7jGuUUlNQypkKXhyQzvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.8.0/22
IPv6:
2a0e:aa40::/46
Signature Algorithm: sha256WithRSAEncryption
4c:26:64:9d:71:20:3f:06:41:47:f0:14:02:28:93:4c:10:70:
da:4f:dc:a0:0b:40:63:21:6f:43:60:3b:a3:af:cb:8a:83:ad:
cf:de:f9:fe:8d:51:09:b3:4b:30:a9:6e:e9:3e:b1:18:a0:49:
19:e2:ac:3e:bb:f9:1d:05:78:44:c8:2c:62:a0:fb:92:3f:cb:
0f:67:65:38:47:d4:17:97:1b:84:3d:62:ca:48:9e:16:3f:52:
80:58:77:c9:9d:08:e9:ff:9b:d8:ab:ec:26:75:d5:33:87:c1:
5e:dd:fc:3e:ef:0a:1a:6c:15:d3:e3:cf:56:da:85:2a:0d:1f:
c2:ce:e5:f3:9f:58:f0:54:87:04:c2:19:98:8d:e9:e2:01:ef:
5e:06:ad:e5:d8:eb:a7:7c:88:6b:17:06:35:4d:7b:82:28:a6:
80:f2:97:3c:bb:f1:0d:3e:30:28:d4:1d:19:8a:9d:2f:c0:37:
ab:a4:b5:58:47:08:63:07:86:70:93:ab:bf:bb:2f:de:79:19:
6c:59:0f:60:dc:48:b6:16:b0:46:f1:c4:e2:d4:32:7a:d0:cc:
49:7c:8e:ac:eb:df:32:66:82:68:9e:a7:23:d6:75:f7:89:5a:
9f:bf:76:fb:4b:e4:68:b2:8e:58:7d:20:11:7e:f2:f1:f0:72:
61:3f:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net