Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/q7RKTl_VVF8_6sIT8avs_Y3TrWg.roa
File: q7RKTl_VVF8_6sIT8avs_Y3TrWg.roa (raw, json)
Hash identifier: gereTt8kM/7cPkf0jqqKzrwWtD7d0sLhHTqx5fyJSP8=
Subject key identifier: AB:B4:4A:4E:5F:D5:54:5F:3F:EA:C2:13:F1:AB:EC:FD:8D:D3:AD:68
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0193F4D69B2030E977F3674E8349D9E606B3
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/q7RKTl_VVF8_6sIT8avs_Y3TrWg.roa
Signing time: Mon 23 Dec 2024 18:45:25 +0000
ROA not before: Mon 23 Dec 2024 18:45:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213697
IP address blocks: 37.221.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:d6:9b:20:30:e9:77:f3:67:4e:83:49:d9:e6:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 23 18:45:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abb44a4e5fd5545f3feac213f1abecfd8dd3ad68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:01:82:ae:8f:c2:cf:ad:1a:ba:14:f9:bb:
2a:31:9d:d2:1c:25:c7:24:06:42:a1:d5:d8:c5:10:
33:7b:a3:38:8a:50:db:16:52:ce:b1:95:54:a0:3a:
e7:a5:36:d8:07:f2:e4:82:18:02:42:36:c3:cd:4f:
f7:49:dd:90:2c:cd:b1:11:43:71:32:a9:7c:30:94:
42:55:30:e0:9c:36:49:c1:ca:0d:df:13:95:76:af:
4d:fd:59:00:05:46:40:c7:5c:ec:09:81:fc:18:cd:
78:02:4d:29:62:82:ea:3e:c2:dc:0e:b1:67:a7:2a:
14:ce:49:bf:8c:e2:02:4a:36:7d:00:be:23:11:88:
0b:0f:fd:5d:77:0a:a0:81:85:5a:b1:e8:0c:cd:3c:
70:85:95:1f:b9:6f:a7:e8:a0:a1:29:0c:0d:0a:91:
7f:85:c9:6a:46:eb:f4:16:27:ac:6c:f0:53:fc:e4:
24:f2:98:11:92:3e:98:4a:cb:e2:79:46:ff:14:23:
91:9a:37:b2:19:b3:ef:35:bf:91:a1:b1:86:53:90:
eb:02:ab:fb:32:cf:a2:88:50:a6:fa:c1:9b:24:46:
2b:4f:88:4f:d6:46:94:bf:a6:2a:57:6a:18:6a:1b:
94:5c:d2:f2:2b:94:10:25:0b:f6:22:95:f3:5a:2a:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B4:4A:4E:5F:D5:54:5F:3F:EA:C2:13:F1:AB:EC:FD:8D:D3:AD:68
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/q7RKTl_VVF8_6sIT8avs_Y3TrWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:98:90:57:0c:aa:c5:8d:ef:51:93:57:c9:b0:2f:d7:f8:98:
a6:a8:11:ad:cf:90:04:dc:af:41:db:fa:2b:87:6a:da:b0:19:
c9:e0:96:e0:4d:e0:0f:f1:6c:d0:95:1b:f3:0f:01:f4:7c:ba:
02:50:da:a4:5e:9b:85:4d:34:18:c3:04:8c:e6:61:e6:ea:aa:
93:65:9a:74:7b:53:0d:ec:38:aa:d1:61:e7:ea:0c:ff:9f:f0:
25:51:ba:be:bf:df:d4:0d:6f:ac:6e:65:b7:52:99:c6:d8:26:
d8:86:88:a6:2c:5d:1c:4e:d7:1f:51:cc:b8:4c:0a:26:b0:e9:
89:d8:09:8e:a1:16:3e:2c:fa:74:22:3e:32:9d:8a:d0:77:17:
ae:59:2c:4a:96:da:34:6d:94:56:48:81:9e:26:42:ec:22:34:
74:f7:79:51:96:6d:7d:7a:a2:73:50:51:ad:bf:1b:43:03:b6:
cb:3d:aa:9c:62:3a:21:77:06:aa:de:bb:4c:08:d0:82:46:41:
c5:3f:32:40:be:03:71:df:ac:c8:b3:44:06:ca:06:3b:b9:b5:
04:77:cd:f9:ea:07:94:0d:80:b5:3d:c0:50:c1:6e:7f:6a:76:
da:bf:79:c1:72:0f:ee:64:99:71:b5:38:49:23:58:62:ec:ae:
13:49:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net