Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/kqJeNEorIAStDdaeRGEpvVFlKis.roa
File: kqJeNEorIAStDdaeRGEpvVFlKis.roa (raw, json)
Hash identifier: 0jYagfTuDpkk08auY5+GnHulhrpmcU3jh3alx8xSCos=
Subject key identifier: 92:A2:5E:34:4A:2B:20:04:AD:0D:D6:9E:44:61:29:BD:51:65:2A:2B
Certificate issuer: /CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Certificate serial: 018B85F43F470445CF18F41B7F97FA8718ED
Authority key identifier: 68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/kqJeNEorIAStDdaeRGEpvVFlKis.roa
Signing time: Tue 31 Oct 2023 13:37:38 +0000
ROA not before: Tue 31 Oct 2023 13:37:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136557
IP address blocks: 81.21.233.0/24 maxlen: 24
81.21.232.0/22 maxlen: 24
81.21.232.0/24 maxlen: 24
81.21.235.0/24 maxlen: 24
81.21.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:f4:3f:47:04:45:cf:18:f4:1b:7f:97:fa:87:18:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Validity
Not Before: Oct 31 13:37:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92a25e344a2b2004ad0dd69e446129bd51652a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:1b:d3:ac:47:88:6c:bd:bf:a7:aa:a1:c6:
8f:c4:0a:f9:78:fd:eb:7b:4b:1d:68:4d:c8:46:db:
45:2a:1e:aa:a9:16:21:34:19:7e:50:06:7e:8b:37:
03:bb:d7:12:14:b1:0b:15:02:58:d4:6b:95:4b:de:
dd:54:10:24:05:ff:5b:a4:59:d7:1c:1c:66:ef:34:
50:70:40:78:a8:c8:75:51:fa:b9:ea:ea:75:3a:c5:
d6:78:1b:1c:3b:c9:d8:35:f0:8b:7b:23:72:b3:fb:
6e:7e:7c:82:89:a1:25:1c:1c:93:38:fb:1a:54:f6:
da:69:26:b9:dd:fb:4b:d6:2d:be:ab:e1:82:3c:a2:
bd:b2:ff:95:48:e8:8c:25:36:ac:80:7a:dc:f2:e7:
f8:ab:c4:8d:b4:05:15:0a:3c:c8:b2:78:4d:8c:e5:
58:28:94:dd:c6:b2:b4:fa:c0:d0:28:23:36:90:84:
6a:bf:a1:84:c2:d1:48:74:e0:63:b6:69:c2:af:e1:
24:ef:67:8f:e3:ac:e3:c2:f1:c8:ae:60:77:fc:89:
78:0c:67:03:15:90:09:c6:69:f8:ae:f1:d9:2b:c9:
49:cb:81:06:99:9e:8a:01:55:7a:bf:43:97:ab:58:
3b:4c:89:95:59:b7:e8:d6:0a:81:03:f8:f6:c6:45:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:5E:34:4A:2B:20:04:AD:0D:D6:9E:44:61:29:BD:51:65:2A:2B
X509v3 Authority Key Identifier:
keyid:68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/kqJeNEorIAStDdaeRGEpvVFlKis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/aDlfuPRSS4pvlFu_qTi49haUBS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:92:21:8d:6d:01:99:42:f6:40:b2:b5:62:58:26:3d:28:de:
56:ac:12:c8:00:e5:3c:05:23:0e:8a:6a:71:7f:5c:e4:02:68:
01:d9:04:e4:9e:09:81:71:c7:86:a4:9a:01:49:b1:ae:52:f2:
d3:93:5d:29:22:e4:5c:fa:3b:e5:ad:70:d1:b7:79:30:12:85:
93:a4:3e:1e:14:35:b4:48:91:ca:29:ca:f7:03:83:f8:2b:f8:
e1:81:dc:43:bb:21:20:87:62:e5:1e:1c:d8:d0:a5:97:63:3a:
62:a7:a0:5e:e5:79:07:41:37:71:13:ba:d6:0e:bc:1e:0c:8c:
02:b3:c3:a7:50:e9:89:48:30:8d:6d:86:22:15:e2:f8:36:0a:
cf:30:0c:78:37:27:47:4d:e8:4c:6c:8b:44:86:4f:ee:bd:a9:
42:2d:a2:3f:a6:ae:80:a5:53:fd:94:1f:c8:fc:b5:cf:6a:cd:
60:9c:9f:28:8b:70:d6:e3:11:78:8a:44:70:f5:8a:5b:6f:58:
9a:b1:37:d3:c9:3b:60:b1:63:e9:54:5c:a0:5f:32:15:a6:16:
23:30:a5:ee:fc:65:7b:47:1a:a3:52:0c:7d:32:ed:f4:42:c5:
db:36:cc:39:3e:23:70:5d:17:92:cf:55:6c:9c:86:b1:a6:8f:
33:52:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net