Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YaXMgnp72wQpISaQlNohqmogGas.roa
File: YaXMgnp72wQpISaQlNohqmogGas.roa (raw, json)
Hash identifier: ueFDncAKTskN9Ucm9Ve52OxVU47fCLJuCEqjrZ5oe9A=
Subject key identifier: 61:A5:CC:82:7A:7B:DB:04:29:21:26:90:94:DA:21:AA:6A:20:19:AB
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01854F64C34ACBEDFC8DEAFBDFE0C4D06D79
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YaXMgnp72wQpISaQlNohqmogGas.roa
Signing time: Mon 26 Dec 2022 17:04:41 +0000
ROA not before: Mon 26 Dec 2022 17:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201295
IP address blocks: 94.74.145.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4f:64:c3:4a:cb:ed:fc:8d:ea:fb:df:e0:c4:d0:6d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Dec 26 17:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61a5cc827a7bdb042921269094da21aa6a2019ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3f:ba:25:ab:0e:b4:c0:fd:04:73:4d:f2:10:
e1:bf:2c:37:84:d8:82:e3:12:8f:f7:72:af:a9:06:
e6:46:a9:85:ce:c3:f2:ee:fd:8b:78:9c:cd:ba:4a:
a5:70:33:71:a2:4b:1f:de:2b:ad:f3:30:83:ea:e1:
97:b2:0e:e3:d0:68:34:dc:c0:20:2f:71:a6:34:4d:
0f:98:07:7c:b0:0e:c2:c8:7f:fe:91:5a:cf:57:68:
7d:18:7e:e7:7c:df:61:b1:14:b6:2b:33:aa:2e:bf:
fc:3b:fd:03:4a:ea:01:67:c0:67:2b:89:a6:40:af:
6e:e1:5e:d8:6c:3a:ed:fe:b9:c9:74:b7:24:94:b2:
84:d2:33:63:d8:cb:c5:61:7b:c8:33:1a:c8:77:5c:
34:b8:f9:5c:7d:40:ba:ba:43:61:ff:3e:ac:68:11:
f5:16:4f:66:7a:ad:b3:f6:7f:84:32:26:f4:b5:db:
d0:86:bf:7c:75:f5:f1:16:45:cc:9e:d7:33:66:fe:
8d:7b:e9:45:14:29:e5:5c:df:5a:77:f4:4c:bd:6b:
f4:39:7d:0c:10:cf:84:36:95:ba:34:e5:79:9f:72:
fe:b6:84:2f:ed:b4:cd:3d:98:12:b7:14:6f:40:31:
3f:fe:8f:02:31:df:eb:d5:43:df:da:52:47:39:10:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A5:CC:82:7A:7B:DB:04:29:21:26:90:94:DA:21:AA:6A:20:19:AB
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YaXMgnp72wQpISaQlNohqmogGas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.145.0/24
94.74.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b6:cc:58:88:56:72:49:d0:f1:a7:81:fa:9b:39:76:0b:05:
a0:25:e0:22:1b:55:c1:dc:d4:1e:ca:3e:39:fe:b4:a5:3e:f6:
2d:04:af:f3:fc:e4:da:c3:92:15:33:01:4d:63:3c:cf:1c:ae:
e3:70:23:81:cb:9a:37:b4:48:10:06:75:d1:bd:32:0d:48:35:
89:04:84:7e:bb:4f:ef:46:44:a7:b5:00:70:8d:14:d0:3d:f0:
c0:13:53:c7:70:d0:b0:79:51:64:3a:2f:d4:f1:41:e9:8a:76:
c5:17:19:ae:b6:8e:76:33:b4:da:98:c0:42:61:e5:ab:af:ee:
68:9d:a3:38:a7:45:aa:c7:8e:cc:1b:ef:4b:8f:dc:c6:f7:8f:
c8:4b:10:53:28:aa:09:7f:52:89:37:78:bc:cd:25:e5:e5:d5:
86:96:2c:d0:8d:06:80:f8:01:39:0e:57:d8:63:8e:15:65:fe:
b1:1d:4f:fb:ad:0f:01:f3:6c:09:d9:2e:1f:92:e9:8d:94:7d:
a8:a5:f2:09:56:b4:53:83:08:37:f2:dc:bb:e7:e2:0b:df:5e:
d7:8d:be:c4:35:2e:60:39:ce:02:7e:7e:50:df:c1:b1:c7:a3:
da:02:68:a4:5c:ae:9e:a4:59:1b:b6:87:b0:9e:ce:8c:bb:f1:
9e:73:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:30 2025 by rpki-client