Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/Z7r8dLiTVBMO7iyizdWBsafr83s.roa
File: Z7r8dLiTVBMO7iyizdWBsafr83s.roa (raw, json)
Hash identifier: bqTM2Q2Xz2j1AIbiEHcIFcSeW6J2jbrNzPtkVOKzivU=
Subject key identifier: 67:BA:FC:74:B8:93:54:13:0E:EE:2C:A2:CD:D5:81:B1:A7:EB:F3:7B
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019424B3CA408BD311AD90CA4B3624F1FF1B
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/Z7r8dLiTVBMO7iyizdWBsafr83s.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202870
IP address blocks: 185.152.44.0/22 maxlen: 24
2a07:7e80::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ca:40:8b:d3:11:ad:90:ca:4b:36:24:f1:ff:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67bafc74b89354130eee2ca2cdd581b1a7ebf37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:ab:1e:2e:0d:be:1d:5b:90:35:a4:81:22:
63:5e:df:44:b6:d1:40:70:2e:42:5e:d3:b9:5b:2f:
34:68:dc:aa:e7:de:d8:fa:69:f8:e6:0f:ee:07:c2:
58:b0:d5:b0:18:61:a6:10:b9:17:b8:44:0c:3d:1e:
55:6d:cc:b4:73:6a:9e:bd:2d:3e:62:c6:cd:8a:78:
54:49:4d:86:ed:4d:a9:cd:f5:1a:94:fe:91:25:91:
d7:09:96:37:69:1b:9e:32:c1:ce:14:a7:be:73:dc:
43:65:f5:40:11:ac:d7:00:13:50:0b:9a:bb:bb:04:
9b:71:42:8d:52:f4:4b:cd:9c:93:c0:5f:b7:81:0c:
90:3c:87:05:12:e4:50:e9:4a:8d:5a:23:91:04:ab:
5d:cf:ff:8d:29:a2:a4:7a:b2:d1:8b:05:63:90:73:
27:df:a9:19:d2:ef:e7:c6:db:2c:e8:27:56:4d:6e:
c4:51:fe:cf:19:f0:62:11:63:0a:b9:d6:01:c8:e6:
cc:21:5f:ca:1f:be:3c:08:b7:fc:6e:be:8c:2c:da:
a4:ec:fe:0f:70:22:ff:71:a2:a1:30:e7:d1:f2:3c:
78:6f:a6:ea:32:d2:af:41:17:d3:a4:3d:61:53:a9:
a9:50:26:f1:3d:8e:3f:db:90:62:fc:13:43:be:c9:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BA:FC:74:B8:93:54:13:0E:EE:2C:A2:CD:D5:81:B1:A7:EB:F3:7B
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/Z7r8dLiTVBMO7iyizdWBsafr83s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.44.0/22
IPv6:
2a07:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
65:21:7b:02:72:e4:d2:2f:cd:b2:89:21:90:1d:04:3b:21:9a:
c6:2a:86:00:ab:8e:fd:6d:4c:c6:a6:9a:3a:99:a3:fc:92:2a:
e3:65:1b:c7:61:2e:91:10:29:2f:5b:2c:d9:38:df:70:d9:d0:
9b:34:84:11:91:ca:e8:23:a3:4a:0e:16:77:ff:56:25:58:e3:
ea:75:09:77:a5:5d:87:f4:33:78:81:bf:89:72:ba:25:63:be:
08:c5:20:59:b4:f7:88:ad:ff:0a:3b:c1:a8:0a:0f:f6:5a:3d:
37:b2:29:2a:19:38:ef:d8:47:73:8b:1b:98:fb:93:fe:5e:10:
23:d8:b9:d3:82:1b:ff:55:8e:01:66:a6:1f:ce:53:e5:01:e9:
44:60:22:3d:38:63:cd:ca:b9:13:b0:69:4b:0f:00:04:10:f1:
4d:9c:a8:ef:43:e6:1f:cd:9f:41:d9:b1:2a:b1:9a:4b:1a:ec:
8e:1c:0e:e0:2b:a4:c0:99:d5:f4:b0:cc:f8:91:02:c7:1e:38:
b7:80:06:99:b2:32:a1:0d:9e:7d:ee:5a:1d:d2:3d:30:e4:95:
dd:19:1b:f9:77:f2:fd:59:86:29:f2:f7:62:62:c3:c3:f8:b1:
01:b1:dd:49:74:3a:96:b7:55:68:06:39:5a:6f:a5:a8:59:ff:
74:45:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:50 2025 by rpki-client on console.sobornost.net