Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/RqzH37yoqqhj4bemgvLshrs6C7o.roa
File: RqzH37yoqqhj4bemgvLshrs6C7o.roa (raw, json)
Hash identifier: AiCLddGrdRr68OV8DLJUly1YHa08XgTvIrrDVLmRCsI=
Subject key identifier: 46:AC:C7:DF:BC:A8:AA:A8:63:E1:B7:A6:82:F2:EC:86:BB:3A:0B:BA
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 018CC348D6740D5B085432497B4F0B58D5F8
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/RqzH37yoqqhj4bemgvLshrs6C7o.roa
Signing time: Mon 01 Jan 2024 04:29:39 +0000
ROA not before: Mon 01 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48191
IP address blocks: 94.230.72.0/22 maxlen: 22
94.198.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d6:74:0d:5b:08:54:32:49:7b:4f:0b:58:d5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jan 1 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46acc7dfbca8aaa863e1b7a682f2ec86bb3a0bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:98:30:91:c8:e2:66:a9:12:76:37:73:44:d2:
4b:88:fb:1a:e4:ce:b2:e5:41:4c:df:a3:30:1b:10:
35:19:c3:6a:f7:0f:5a:3b:07:b9:20:94:65:5a:60:
3c:09:c5:ff:d7:d2:6a:f6:df:3d:f4:09:c6:8e:4d:
6d:07:05:f5:b8:8c:50:36:5b:9d:df:53:8f:4e:d3:
bc:0e:e4:33:43:a5:af:03:74:c2:12:2d:95:74:f5:
40:e9:45:8a:4a:cf:d7:89:3e:05:fa:55:fb:47:19:
8d:c7:1a:10:76:1a:66:d5:18:a7:3c:ae:1a:37:2e:
26:1c:44:dd:6d:e4:2d:93:c7:13:79:af:30:9a:f0:
9a:0b:0b:5e:7d:5e:fc:1b:b6:d3:9d:44:c3:07:03:
36:32:d7:33:2a:6b:da:02:10:23:62:dc:b7:19:e0:
da:bf:c9:17:b0:f4:61:f7:51:a0:60:09:60:1a:77:
63:cc:76:ed:f1:de:d3:82:b6:27:f9:14:9c:51:25:
06:66:2b:3d:ff:1d:74:94:ca:80:99:1c:f6:2e:0b:
61:87:5e:e6:cc:3a:0e:5e:c9:30:41:ae:4e:9c:df:
e5:72:52:76:eb:9a:9f:07:8a:ae:d5:ea:f0:17:cf:
60:23:4c:2b:2d:2b:98:7f:17:e0:23:3d:e7:7b:f0:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:C7:DF:BC:A8:AA:A8:63:E1:B7:A6:82:F2:EC:86:BB:3A:0B:BA
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/RqzH37yoqqhj4bemgvLshrs6C7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.72.0/21
94.230.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d3:d3:cf:0b:db:45:ca:36:d4:50:70:ba:73:d5:41:4f:8a:
bc:38:a6:e2:58:2b:e6:8a:34:e4:b6:a4:a3:6f:ba:9d:74:7f:
88:23:f6:f4:22:82:64:52:51:45:93:57:d9:a0:68:65:d5:f9:
3a:38:64:b3:33:3a:3d:db:c0:75:7e:d3:2a:aa:c7:4a:b0:fd:
02:f0:39:4c:23:b6:e5:73:22:c6:89:f1:47:a3:e4:79:64:2a:
df:1e:f6:dd:6a:c9:cb:01:9a:a8:f4:d9:d0:46:9b:dd:9b:29:
50:f5:89:e0:64:0a:c4:ed:33:f8:c3:e4:9c:d8:a1:d6:f2:d9:
d4:de:f6:a9:22:27:c4:ad:1a:51:44:8c:54:17:d4:a5:7a:b2:
de:a5:96:76:9e:99:37:c5:65:1c:ea:a7:aa:e9:8d:19:98:45:
89:68:d1:08:4d:eb:b5:b0:6e:13:cc:bc:95:e3:fd:70:6c:e5:
d4:e0:70:4b:03:5c:9f:c2:63:91:e8:7f:34:c9:6d:ec:29:f9:
5a:f0:a5:28:00:c5:c9:98:36:31:b6:15:88:65:b1:40:6c:d8:
65:1a:8f:24:73:94:98:f1:ab:48:bd:14:21:4b:8f:b5:02:d3:
c0:5a:e5:db:2b:27:3e:18:6e:31:89:74:46:9e:a1:e1:e7:d4:
f8:bf:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net