Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/y2xcjpzIItuShlAQpyaQJkOLrc8.roa
File: y2xcjpzIItuShlAQpyaQJkOLrc8.roa (raw, json)
Hash identifier: 6OV1KR3Q6Q6xCE6TUzjttuHrXUOUpd7Q5mrT5KaR2vI=
Subject key identifier: CB:6C:5C:8E:9C:C8:22:DB:92:86:50:10:A7:26:90:26:43:8B:AD:CF
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018797ABF7D046C97CEECD82296A948F2030
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/y2xcjpzIItuShlAQpyaQJkOLrc8.roa
Signing time: Wed 19 Apr 2023 04:00:42 +0000
ROA not before: Wed 19 Apr 2023 04:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 84.247.20.0/24 maxlen: 24
89.47.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:97:ab:f7:d0:46:c9:7c:ee:cd:82:29:6a:94:8f:20:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 19 04:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb6c5c8e9cc822db92865010a7269026438badcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:a0:58:10:fe:ec:7c:95:d6:e2:5b:ea:fa:
90:6c:d4:4f:b0:dc:44:8b:c4:52:80:05:c1:ad:b0:
bc:07:c6:88:24:e6:1b:7f:cd:0d:f7:31:a3:b7:9c:
a5:4a:c1:98:d1:df:10:1d:99:d4:8c:ad:4e:1f:50:
b9:e9:db:8d:f3:c2:d3:47:20:b2:b5:91:aa:7b:99:
fe:75:e8:6b:b7:fc:22:22:c7:c0:dc:4c:81:96:13:
b6:c9:71:1a:53:e4:12:ad:5a:07:2b:5a:d4:be:26:
26:9b:ed:61:1a:a3:39:70:cc:31:da:8f:34:14:b1:
89:b5:ff:6a:68:f0:96:fe:b9:51:1f:dd:ef:f9:07:
02:51:b4:28:07:2d:11:bc:ef:b0:d6:37:7a:eb:e7:
bc:5f:47:e7:93:79:3d:e2:f5:48:a2:db:ec:c6:86:
f3:e6:58:48:8b:b2:c7:43:f9:78:66:28:5a:26:5f:
77:f6:23:54:54:03:02:69:09:dc:2b:6d:52:b2:3f:
fc:da:99:11:9d:3b:b9:bf:80:50:45:d4:fb:b2:d9:
cf:51:a0:de:bf:f7:fc:a7:ed:30:5e:b0:b4:6b:13:
9e:4f:07:bb:c4:2f:18:10:40:90:58:eb:44:0e:d5:
dc:cb:83:a6:20:e1:27:4c:de:b7:5e:93:f9:25:24:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6C:5C:8E:9C:C8:22:DB:92:86:50:10:A7:26:90:26:43:8B:AD:CF
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/y2xcjpzIItuShlAQpyaQJkOLrc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.20.0/24
89.47.249.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f8:2b:71:e6:0c:c1:ee:30:25:16:e6:e3:9a:d6:1f:68:2d:
fb:97:28:51:0b:f8:a1:ea:31:b7:f1:ff:1d:43:fc:6e:9b:0f:
c7:d9:66:05:4f:aa:f4:3b:60:03:1b:5f:c3:11:82:ee:ac:5a:
a8:05:82:1d:ee:39:15:e7:30:b3:32:ee:9a:3e:0b:0c:2a:31:
9e:8b:db:55:ed:80:68:7e:07:e1:bb:e6:25:f2:ea:06:ac:d3:
84:aa:16:87:4f:47:54:f7:6c:61:5f:4e:81:cf:c0:dd:1d:b9:
47:f2:2d:c5:f9:47:af:28:b5:7b:6f:27:09:fb:35:b6:d6:99:
b1:48:ec:7e:9b:58:a1:3f:24:aa:04:1a:5d:4e:7c:8b:2c:56:
b3:e6:62:94:ec:03:bc:73:e6:3b:60:7d:01:b2:74:6c:68:8a:
2b:9f:1c:49:71:2e:fb:8f:6e:44:ac:df:7a:ed:73:10:7b:a3:
08:5e:7c:50:bc:7b:50:70:d3:67:e8:d9:d4:f3:36:2d:1f:8d:
a4:2d:a8:0c:32:a7:98:ae:48:b7:c4:ef:af:f2:38:b0:87:13:
33:ae:a1:98:b2:06:b4:84:08:b0:06:76:82:a9:6a:18:fb:c9:
6e:b5:ca:79:d1:74:cf:4a:78:4d:a0:cb:5a:4f:fa:66:e9:e0:
fe:79:a5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:55 2025 by rpki-client