Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/q-Doq2yhX8LeEOe4avpPlPQtcBA.roa
File: q-Doq2yhX8LeEOe4avpPlPQtcBA.roa (raw, json)
Hash identifier: Hm/W+OefQyMKuFqhCF8SIp6qaJ12J6vVgOxDbZCAC/c=
Subject key identifier: AB:E0:E8:AB:6C:A1:5F:C2:DE:10:E7:B8:6A:FA:4F:94:F4:2D:70:10
Certificate issuer: /CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Certificate serial: 01932FA6F1860D55440C639686351D0EC010
Authority key identifier: 6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/q-Doq2yhX8LeEOe4avpPlPQtcBA.roa
Signing time: Fri 15 Nov 2024 11:48:09 +0000
ROA not before: Fri 15 Nov 2024 11:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44387
IP address blocks: 178.16.80.0/20 maxlen: 20
178.16.80.0/21 maxlen: 21
178.16.88.0/21 maxlen: 21
178.16.88.0/24 maxlen: 24
185.28.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:a6:f1:86:0d:55:44:0c:63:96:86:35:1d:0e:c0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Validity
Not Before: Nov 15 11:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abe0e8ab6ca15fc2de10e7b86afa4f94f42d7010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:45:43:1c:59:06:79:e7:d9:2c:14:e6:96:
b6:a7:e4:55:83:b5:06:c0:26:aa:50:a7:f0:d1:09:
ce:e7:b0:a7:c1:4e:c1:0c:eb:2d:80:63:c8:e1:13:
fd:3e:3f:af:2c:f0:73:83:67:e1:f6:67:a7:49:a7:
b3:50:e2:05:53:22:d1:48:5b:ba:d2:fa:3a:ca:6d:
d4:df:a3:ff:d2:d3:48:0a:ee:04:d5:4a:ff:5e:75:
72:2d:5f:d0:4b:7a:f8:49:62:6d:42:53:4f:12:0d:
1e:ed:b4:3c:ee:e3:e4:1e:21:d4:dc:51:6c:f4:ce:
6c:1b:f2:1d:f0:67:51:55:e8:99:60:dc:19:12:8b:
d7:a1:d5:24:9c:e0:b9:40:ce:e7:c6:9a:e8:c3:71:
dc:8c:c4:ad:23:84:bf:2f:36:a3:22:d8:dc:56:73:
95:5a:00:86:40:af:2d:4c:12:92:41:ff:c7:ee:fe:
70:2b:b5:b3:fe:55:c2:b6:39:75:c8:7a:f4:e3:51:
ca:a0:e7:8b:09:bf:0c:cd:5b:a6:8b:14:1e:e9:72:
7f:55:1e:21:ff:01:62:cf:d7:25:59:6c:0c:93:b0:
42:ef:bf:2a:9a:e1:33:7e:0d:96:bb:a3:18:59:c1:
51:58:41:b2:e4:e0:08:6f:97:c5:95:8f:68:80:dd:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:E8:AB:6C:A1:5F:C2:DE:10:E7:B8:6A:FA:4F:94:F4:2D:70:10
X509v3 Authority Key Identifier:
keyid:6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/q-Doq2yhX8LeEOe4avpPlPQtcBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.80.0/20
185.28.236.0/22
Signature Algorithm: sha256WithRSAEncryption
35:6d:e7:1b:19:0a:2c:43:de:cd:c7:36:95:f9:59:1b:0c:d1:
da:71:ee:eb:20:02:41:83:c6:e7:d3:1f:6a:43:58:02:45:10:
45:fd:d2:84:8f:c7:c7:52:9d:35:a5:f1:7e:66:82:4c:8d:c4:
df:a7:95:92:9d:3c:82:a9:b4:2a:0b:e7:25:e3:6a:05:6a:6c:
07:fc:d9:9f:3e:77:66:1c:e6:d8:74:49:10:f5:e0:34:3c:42:
90:df:2a:2d:8d:ee:9a:8c:e7:8a:3a:f1:22:6e:1f:40:ba:61:
b5:d0:92:20:71:dd:ba:98:e2:c2:ad:04:ce:c6:ad:69:c0:31:
c9:cb:73:78:f8:89:24:47:e3:60:a9:7a:a9:13:53:b8:72:0a:
60:33:9e:b3:0a:6a:23:84:6c:b1:3a:4f:2f:f5:00:53:ee:a7:
f1:2b:42:93:f2:af:b1:18:93:f3:e3:e3:79:82:67:55:76:18:
06:1b:a7:b3:b9:fe:bd:fa:c2:00:34:67:32:ff:ce:77:fc:e8:
a5:e6:5b:ea:1d:9a:4f:38:f2:fd:ea:07:bb:3f:a9:eb:3f:d8:
6a:ce:98:50:33:d2:c4:2f:38:37:bf:17:4d:3a:9c:4c:33:bd:
a9:9d:bb:36:10:86:f0:7f:a0:5a:d7:b3:e6:a9:c6:ae:2d:5e:
3a:33:0f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:44 2024 by rpki-client on console.sobornost.net