Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/fkQsw22qMQtDPioczuaXgMb_y_A.roa
File: fkQsw22qMQtDPioczuaXgMb_y_A.roa (raw, json)
Hash identifier: o2mU2voBe9hkZXv7MnPVjirJ3uGEC25vF18Faqsf4XI=
Subject key identifier: 7E:44:2C:C3:6D:AA:31:0B:43:3E:2A:1C:CE:E6:97:80:C6:FF:CB:F0
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 0191E594EFA84054F372A94AD8222304367A
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/fkQsw22qMQtDPioczuaXgMb_y_A.roa
Signing time: Thu 12 Sep 2024 09:33:48 +0000
ROA not before: Thu 12 Sep 2024 09:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39422
IP address blocks: 176.108.232.0/21 maxlen: 21
176.108.232.0/22 maxlen: 22
176.108.232.0/23 maxlen: 23
176.108.236.0/22 maxlen: 22
176.108.236.0/24 maxlen: 24
176.108.238.0/23 maxlen: 23
195.182.202.0/23 maxlen: 23
195.182.202.0/24 maxlen: 24
195.182.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:94:ef:a8:40:54:f3:72:a9:4a:d8:22:23:04:36:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Sep 12 09:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e442cc36daa310b433e2a1ccee69780c6ffcbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:4d:93:14:28:4d:5d:da:90:10:0f:66:a0:
d9:4c:ee:40:0f:d9:1b:82:88:1a:92:7c:18:1c:f6:
23:8c:93:7a:ac:59:4a:9c:d5:c8:08:03:84:0c:db:
eb:89:cf:c9:03:18:37:9e:51:1e:34:1d:08:b5:4e:
c7:e1:9b:4a:f8:5f:2c:3b:3c:1c:51:6a:bb:f3:d3:
07:09:22:fd:5b:ae:b9:bf:20:1b:52:0a:e8:32:10:
f1:09:f6:a0:0a:31:9b:bc:95:e9:55:d0:c6:18:8b:
4a:af:44:40:d7:6f:97:c4:58:6f:3a:4a:6a:6a:82:
68:cd:b8:4e:8b:24:49:b4:5a:1c:e4:43:a3:dc:b4:
f1:5c:44:3a:03:cd:80:28:87:e1:df:3b:1f:a7:ed:
d0:78:05:59:8d:66:64:5f:72:67:28:50:8e:56:3e:
4a:41:2b:bc:5a:8c:81:d5:68:2f:68:10:7f:51:a9:
46:d8:74:b7:20:86:34:f5:f6:c0:fb:3c:bd:23:c8:
f5:cd:25:8d:38:47:29:60:af:3a:c7:e3:75:78:ca:
d9:7b:82:44:31:74:1e:da:ce:33:2a:21:fc:ad:9a:
44:cb:db:03:89:5a:13:4c:33:d7:19:e7:6a:a9:ef:
37:0c:d9:4a:38:5b:cd:1c:9f:6c:71:23:b0:db:12:
d1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:44:2C:C3:6D:AA:31:0B:43:3E:2A:1C:CE:E6:97:80:C6:FF:CB:F0
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/fkQsw22qMQtDPioczuaXgMb_y_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.232.0/21
195.182.202.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:75:f1:41:7e:53:8a:4f:3d:fd:36:7b:86:1d:88:33:e0:84:
df:77:e4:e3:72:55:b7:bb:25:4d:f9:15:f3:dc:f2:9f:04:4c:
21:b3:d7:5e:d4:4e:e3:9a:8b:b5:46:a7:94:cb:9b:c2:6c:ca:
d5:54:f1:52:fd:20:23:95:09:d8:8f:c1:a7:a9:7d:cd:0d:d6:
05:a2:bb:2a:50:60:37:df:3d:6a:b2:b5:ce:12:87:eb:73:04:
d2:25:89:70:0c:d6:8a:2c:78:51:31:54:10:46:3f:e6:61:b4:
6d:b3:33:14:ca:c2:cf:98:b9:ae:68:12:09:3e:dd:f3:e4:86:
7e:23:1e:af:11:e7:c6:7f:11:58:2b:4a:2e:5c:c2:26:ad:7b:
10:8c:7f:d9:07:8f:1f:c7:94:0b:cb:28:d1:b6:61:3c:ef:12:
21:62:ab:29:29:d2:ff:08:7b:e9:9e:7b:a8:ec:37:dd:f7:dc:
62:b1:b4:21:1c:1c:8b:c4:01:67:95:83:19:8f:66:4e:2d:bb:
e3:89:c7:77:88:ca:4a:93:77:5a:15:7f:38:35:ce:b7:66:bb:
b1:22:c1:c9:86:c4:e0:02:84:c5:85:1d:39:01:19:93:49:99:
35:f1:6c:ab:e1:3f:75:ab:45:68:9f:4f:8d:5c:a9:68:fe:4a:
a4:0d:bb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:49 2024 by rpki-client on console.sobornost.net