Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/ya_SvEiJdbeEu6MAiwq3EBuj_9g.roa
File: ya_SvEiJdbeEu6MAiwq3EBuj_9g.roa (raw, json)
Hash identifier: zYOmDLlGB3WrsVYd1PZhobiqacPHi/9K0noOU5UcPZc=
Subject key identifier: C9:AF:D2:BC:48:89:75:B7:84:BB:A3:00:8B:0A:B7:10:1B:A3:FF:D8
Certificate issuer: /CN=d777a34d80dee7246a7578e537a404917ddcf409
Certificate serial: 018571276D1A0C371EE3B9EEAABE172643C6
Authority key identifier: D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/ya_SvEiJdbeEu6MAiwq3EBuj_9g.roa
Signing time: Mon 02 Jan 2023 06:24:47 +0000
ROA not before: Mon 02 Jan 2023 06:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.247.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:6d:1a:0c:37:1e:e3:b9:ee:aa:be:17:26:43:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777a34d80dee7246a7578e537a404917ddcf409
Validity
Not Before: Jan 2 06:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9afd2bc488975b784bba3008b0ab7101ba3ffd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:b5:c5:cd:90:d3:c0:3e:bf:50:08:1c:5c:
9e:9f:95:b6:51:c5:29:a9:45:86:85:2a:05:3f:d2:
46:8d:a7:7d:54:3c:77:bf:bc:7d:81:b6:c5:4b:5e:
28:e8:26:d3:7e:a1:93:5b:a2:51:71:33:05:06:ef:
79:a9:09:81:7c:bb:16:28:33:9f:13:36:ed:e0:00:
78:ac:31:13:67:2e:a9:00:a6:fa:51:2f:37:64:0a:
ed:4c:27:f2:aa:38:7f:0e:8c:3c:04:c6:6c:74:a2:
1e:fc:19:01:bd:a7:a3:7b:29:60:cf:c2:00:47:35:
f7:2c:ae:79:7d:d0:e1:47:b5:d9:35:b5:ec:84:84:
21:5f:f4:37:84:79:bd:78:23:85:6d:06:c6:67:5b:
62:f5:3e:32:05:f3:2a:ce:3a:83:4a:51:fb:87:1f:
3f:65:ab:96:47:90:97:3c:8d:95:5c:64:b2:6b:c4:
99:1b:4f:e7:8f:e9:fe:ba:f3:ce:44:97:cc:80:f9:
5b:0e:e7:57:f6:46:97:7d:f9:f8:3a:9a:66:13:b9:
cf:0e:2d:8e:65:28:56:d2:6b:ee:61:ab:e7:f0:00:
34:01:d8:fc:a2:d0:5e:74:2b:70:d1:77:95:f3:18:
c0:c3:76:6b:7b:5b:5b:ad:1a:56:7f:b9:75:8a:0a:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AF:D2:BC:48:89:75:B7:84:BB:A3:00:8B:0A:B7:10:1B:A3:FF:D8
X509v3 Authority Key Identifier:
keyid:D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/ya_SvEiJdbeEu6MAiwq3EBuj_9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:81:83:fd:df:00:4a:74:e0:4c:03:59:42:24:8f:57:f5:24:
d2:98:ad:85:e0:67:9f:e7:f7:4a:9f:a2:8b:ec:ad:a2:a9:a7:
f5:ab:dc:8e:02:ef:f3:91:2b:b2:ee:98:c3:62:60:94:20:51:
00:7f:b5:88:b1:72:c9:11:ea:77:8b:52:86:de:9b:5b:b3:49:
17:de:27:b5:5c:ae:f5:93:3f:ee:aa:f1:16:75:52:cd:e9:e0:
2b:85:96:85:63:36:99:3e:fa:aa:9e:09:f1:09:55:d1:26:f3:
ca:9b:4f:4e:93:f1:79:2e:d9:8a:39:44:4a:6f:27:da:98:48:
e0:9c:e7:1c:ac:17:e1:51:e1:53:ce:23:9b:3f:14:3c:1f:49:
05:bb:81:09:cb:b6:26:3f:3c:38:59:1e:70:d2:de:1d:98:a4:
0a:15:ed:87:6a:0e:8c:18:5f:9c:45:86:4c:46:d0:56:d5:5e:
0b:f3:ca:b9:2d:af:9c:05:3f:61:85:8e:52:24:e0:a7:00:b4:
9b:07:fa:78:8f:9f:78:9f:a7:b4:f3:a6:ad:1f:5a:f1:47:f9:
64:fe:d0:97:4e:8c:73:83:57:2e:1c:14:ae:82:9d:e2:28:4c:
93:58:b2:8a:6e:8c:cf:3d:40:89:0a:3e:87:15:38:dd:a2:42:
73:44:42:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:29 2025 by rpki-client