Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/YulnYlbf3_p4_qdtilX3A7GCTS4.roa
File: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (raw, json)
Hash identifier: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=
Subject key identifier: 62:E9:67:62:56:DF:DF:FA:78:FE:A7:6D:8A:55:F7:03:B1:82:4D:2E
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 0194266BD472FA7D7422C92A143F871EEF4B
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/YulnYlbf3_p4_qdtilX3A7GCTS4.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 786
IP address blocks: 45.144.8.0/22 maxlen: 24
77.87.24.0/21 maxlen: 24
87.32.0.0/12 maxlen: 24
91.123.224.0/20 maxlen: 24
91.193.188.0/22 maxlen: 24
193.1.0.0/16 maxlen: 24
2001:770::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d4:72:fa:7d:74:22:c9:2a:14:3f:87:1e:ef:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62e9676256dfdffa78fea76d8a55f703b1824d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:7c:1c:d1:52:a6:61:54:f1:7d:04:9a:00:
66:02:58:8a:26:c1:98:85:8d:78:b2:ba:e4:1b:a8:
3a:e5:78:58:2c:7e:6a:c1:12:f9:8f:f2:2e:2e:0f:
40:d7:67:5b:c3:05:1a:5e:09:e6:cc:f7:15:78:c7:
49:35:0a:dd:2c:cd:44:a5:af:a8:e4:1d:08:df:53:
66:d5:84:dd:0f:38:e8:22:84:71:26:b8:be:dd:35:
6c:ca:15:0f:5f:ea:c9:7a:ca:c0:b3:0f:9b:34:3c:
d0:fc:ab:0e:bb:8d:4a:68:47:5a:fe:00:ef:c3:42:
2b:7e:db:49:c8:9d:b5:f3:7c:e4:06:56:36:53:81:
1a:38:2d:39:7d:5d:7d:bf:bc:4e:b5:78:f9:b5:52:
14:69:fd:c2:e5:fe:1a:e4:9d:e2:86:49:4a:0f:e1:
ef:05:36:6a:57:58:5f:d2:f1:59:ab:3e:71:e0:15:
e3:44:c4:16:0d:b3:6f:a8:83:b6:a6:c3:31:4f:3c:
53:a2:8d:97:63:eb:cd:a3:93:eb:4c:49:4f:b2:6d:
5f:82:66:c9:51:26:60:34:a7:45:db:5b:37:f5:6a:
25:ec:24:a7:f2:16:4b:f5:de:e8:07:74:4c:32:3b:
d4:5a:f6:0d:c7:ac:83:2e:08:54:8e:18:60:d7:97:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E9:67:62:56:DF:DF:FA:78:FE:A7:6D:8A:55:F7:03:B1:82:4D:2E
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/YulnYlbf3_p4_qdtilX3A7GCTS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.8.0/22
77.87.24.0/21
87.32.0.0/12
91.123.224.0/20
91.193.188.0/22
193.1.0.0/16
IPv6:
2001:770::/32
Signature Algorithm: sha256WithRSAEncryption
91:84:8e:0c:dd:1f:d3:0e:12:ef:fc:34:17:ab:15:09:44:5f:
da:81:de:ea:27:b8:a3:43:e0:8b:79:40:80:5f:06:50:e9:6e:
8d:62:08:ee:ad:dd:29:97:66:90:e0:5a:37:11:ec:f3:4a:58:
f8:6a:fb:a9:0e:d9:22:98:bd:25:57:9f:3d:54:94:d9:29:7f:
38:28:17:32:e2:46:12:09:31:ef:ed:7b:40:74:75:07:01:3f:
df:7f:5f:2b:8f:e5:bd:d7:ff:00:f3:61:29:f4:4d:cc:ee:1d:
ba:3e:c4:57:50:b3:9c:02:c0:e3:be:e7:50:a1:4f:38:44:67:
a5:8f:99:26:d9:2c:b3:89:1c:5e:51:86:34:f8:52:42:50:56:
40:89:2e:f9:ee:f4:cb:29:9d:0b:63:62:a5:7d:8c:b1:40:c6:
92:76:15:3f:c3:ea:e6:9d:69:3e:49:1a:4d:0d:15:3b:c4:fa:
98:71:f5:d9:ad:63:b3:99:04:e7:09:ae:47:71:a7:db:74:ab:
85:e3:5d:91:21:5f:a7:fd:a0:d7:12:89:93:ca:f2:cf:a2:f5:
ff:cb:85:0a:f9:ac:5a:8d:77:60:51:7c:db:50:43:07:70:7f:
a0:c3:3b:c2:a0:d7:bf:c9:aa:8f:7f:42:8c:e2:08:d2:27:64:
91:09:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:34:11 2025 by rpki-client