Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/Qll1gw1NpcueEPrnhi2-OJkUqZw.roa
File: Qll1gw1NpcueEPrnhi2-OJkUqZw.roa (raw, json)
Hash identifier: nIXr4LhqQo9oCCQSylfKVr4Xa1ihKZ/e95SfcBZKOcA=
Subject key identifier: 42:59:75:83:0D:4D:A5:CB:9E:10:FA:E7:86:2D:BE:38:99:14:A9:9C
Certificate issuer: /CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
Certificate serial: 018CC7934671A0D702EA0095559920F7F2B6
Authority key identifier: E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/Qll1gw1NpcueEPrnhi2-OJkUqZw.roa
Signing time: Tue 02 Jan 2024 00:29:26 +0000
ROA not before: Tue 02 Jan 2024 00:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212598
IP address blocks: 185.102.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:46:71:a0:d7:02:ea:00:95:55:99:20:f7:f2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
Validity
Not Before: Jan 2 00:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=425975830d4da5cb9e10fae7862dbe389914a99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:9f:08:39:63:de:b8:8b:7d:eb:44:77:b9:
9b:04:20:28:bf:3d:5d:d9:40:ca:2b:60:f6:b7:ed:
f2:13:a4:ff:9a:ec:e3:48:2e:87:8d:0b:22:21:2b:
7f:f2:1b:5f:7e:fa:dc:a6:91:c1:a1:d4:01:e4:56:
2a:f1:66:f2:d8:45:a7:13:3e:b7:a2:cc:da:85:03:
cc:5c:45:58:dc:07:6b:23:9b:cd:6c:2b:0d:bb:c6:
ed:1b:3a:6b:e7:be:3b:19:73:09:e7:22:50:7c:ea:
f5:66:ad:da:58:35:09:74:dd:43:7e:75:c7:97:de:
67:ed:b1:7b:c8:0c:75:45:b3:9d:04:1a:0b:5e:42:
93:f3:22:2b:56:b7:39:db:ae:1f:6e:55:86:a4:17:
cd:81:85:3b:94:96:29:11:8f:18:c5:9a:1b:16:a7:
73:46:a3:04:b4:86:3e:5d:02:af:fc:6c:04:32:1d:
0f:0d:d5:86:88:6f:7b:7e:9a:a7:34:ae:3e:4c:19:
5c:f9:05:8f:0e:c6:bc:93:8b:b8:eb:d9:16:d9:6a:
e0:d7:62:2b:fc:eb:a4:94:fb:d4:42:26:b4:e7:32:
35:ba:d9:52:cd:c8:96:46:b9:91:b0:7b:9a:23:ad:
55:06:7c:bd:0d:7e:53:8e:92:1d:7d:c0:01:21:84:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:75:83:0D:4D:A5:CB:9E:10:FA:E7:86:2D:BE:38:99:14:A9:9C
X509v3 Authority Key Identifier:
keyid:E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/Qll1gw1NpcueEPrnhi2-OJkUqZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.87.0/24
Signature Algorithm: sha256WithRSAEncryption
80:03:fd:4f:3d:9d:13:1c:27:b0:8e:b9:c9:7f:8a:ff:d4:2d:
28:99:3c:48:fd:23:c3:6a:5b:a8:51:5b:ba:d0:5a:bd:8d:8a:
fc:ff:62:6a:a4:4f:28:6d:8f:b0:f2:82:2d:90:e6:32:6e:97:
1f:17:53:f4:cb:57:dc:05:25:7f:c4:d2:50:2d:5c:36:59:69:
9f:30:5d:da:0b:f9:98:78:ae:f4:7d:e5:0e:e9:d7:b1:15:f9:
ae:68:2f:68:4f:1a:7f:e8:05:8a:ff:b4:a1:04:62:fb:f4:54:
e1:9f:58:c7:d4:bc:8a:ae:d6:50:27:00:49:73:8a:f5:fd:2d:
13:b3:e1:02:0f:d4:fd:47:dc:b9:10:d0:7e:45:6f:e0:7f:8f:
39:db:9d:ac:c0:2d:3b:71:f1:db:06:5e:62:72:f7:2e:40:9f:
bc:ca:62:b8:2a:59:e6:a4:bb:15:1d:09:ed:3d:e9:2f:20:da:
d8:5e:f4:c0:37:0f:79:6a:90:ae:22:b8:15:4e:8d:50:db:a6:
ec:1b:31:de:d0:11:6a:7c:79:d0:39:64:00:31:df:2c:ac:cd:
56:6c:35:2a:c8:0e:9f:54:34:65:2c:74:92:31:04:eb:a3:44:
44:41:99:30:92:8b:e8:60:e7:ac:1c:d8:77:4d:03:3b:e6:8f:
f8:87:3a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:17:39 2024 by rpki-client on console.sobornost.net