Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/q7T2-RFTG61TZhsAbqnf3nwmTX0.roa
File: q7T2-RFTG61TZhsAbqnf3nwmTX0.roa (raw, json)
Hash identifier: phWZMCNdYH8nQ5974JfQwJI6OH8QGcC5/UD+RhgB9Dk=
Subject key identifier: AB:B4:F6:F9:11:53:1B:AD:53:66:1B:00:6E:A9:DF:DE:7C:26:4D:7D
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 0192B501090F739892DE16294CBEA6FE1F8D
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/q7T2-RFTG61TZhsAbqnf3nwmTX0.roa
Signing time: Tue 22 Oct 2024 16:13:16 +0000
ROA not before: Tue 22 Oct 2024 16:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39402
IP address blocks: 185.127.124.0/24 maxlen: 24
185.127.125.0/24 maxlen: 24
185.127.126.0/24 maxlen: 24
185.127.127.0/24 maxlen: 24
193.27.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:01:09:0f:73:98:92:de:16:29:4c:be:a6:fe:1f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Oct 22 16:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abb4f6f911531bad53661b006ea9dfde7c264d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:5a:0c:9d:e6:a8:8d:e5:4f:ed:73:2a:1f:
2b:66:dc:96:81:ad:f7:50:40:76:01:5b:f4:fb:75:
59:cc:c7:e4:72:b9:1e:e3:56:d7:3e:91:dc:ef:d4:
12:2e:a2:01:b7:65:ae:42:32:13:83:9b:19:b5:af:
45:f3:00:09:a8:5f:17:2f:46:c5:57:2a:fe:37:24:
1f:9b:c3:a8:53:21:1f:02:24:1f:8f:28:63:3b:4f:
12:95:af:eb:71:4b:02:5b:9e:30:fe:08:4e:82:46:
5b:e3:88:48:12:5c:06:32:39:62:ec:14:c3:bc:b5:
67:7a:64:07:91:92:b8:8e:91:28:4b:7d:aa:5f:d9:
6c:c5:d5:6f:db:24:9b:8f:4a:c8:bd:3f:c2:95:6b:
85:e8:0c:f5:a0:6d:0b:98:18:b0:da:e1:71:cc:0a:
3b:06:92:4f:ec:84:d1:e8:de:c0:e9:15:41:e4:0b:
3b:dd:f3:6f:72:81:a5:2b:6e:b7:4e:ae:8c:b1:95:
c7:a1:5f:d4:48:b6:90:45:1c:19:06:b5:e8:87:1c:
1b:9a:3b:20:68:24:9d:61:3e:34:fe:f4:71:ef:89:
06:c1:ba:90:a8:6d:8a:ed:db:92:cd:9c:b7:31:90:
3a:01:a6:01:6f:23:95:c2:87:3f:ed:7b:d6:3e:23:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B4:F6:F9:11:53:1B:AD:53:66:1B:00:6E:A9:DF:DE:7C:26:4D:7D
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/q7T2-RFTG61TZhsAbqnf3nwmTX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.124.0/22
193.27.234.0/24
Signature Algorithm: sha256WithRSAEncryption
56:81:74:7c:61:df:c7:16:40:3a:1b:98:69:9d:21:e5:af:45:
1f:34:4e:5c:88:ef:90:b4:f9:40:e0:5c:18:14:51:19:a2:78:
d4:08:3e:7d:d8:95:77:bb:35:f1:92:38:a8:4d:b8:0b:72:f5:
36:87:b4:e5:32:d4:d7:36:8a:b9:d8:63:0d:1c:a9:81:99:75:
bd:f7:f0:0c:23:ed:24:dc:56:15:7a:c7:bb:ae:4d:cc:5d:6c:
00:1e:a6:f2:af:35:25:56:e3:ed:a4:77:b8:e6:92:75:e9:a7:
b7:9f:bf:a8:b2:ce:2a:ca:c9:7a:05:9f:75:b3:76:1d:02:76:
44:9f:58:24:10:10:bf:92:0e:49:e2:c7:62:39:a4:b1:af:c1:
17:1d:f6:b7:6a:d2:1d:11:d8:b5:72:58:7f:5e:2e:f2:8f:42:
a8:0b:72:3e:6e:93:f2:ed:3f:db:f3:f9:94:02:f3:46:6e:ac:
1c:eb:31:7f:c8:dd:de:d1:16:16:f1:f4:e8:65:2f:6b:0f:ca:
1d:14:58:38:43:0b:4d:6f:23:32:6d:b8:1b:b8:c0:6e:56:9d:
ac:73:25:33:01:1f:4e:a3:61:fa:8f:f5:bf:39:14:8d:1c:be:
87:9a:6b:bc:b4:15:b6:7e:be:c8:89:85:8e:bf:6d:90:ac:2f:
95:a4:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:40 2024 by rpki-client on console.sobornost.net