Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/QboDNpzVCuum_iXGWFmzoUPVZuQ.roa
File: QboDNpzVCuum_iXGWFmzoUPVZuQ.roa (raw, json)
Hash identifier: zPAD4TmbV9TeQrVZlEJD+Zk8dHbDoVG+gyqpCajMEK8=
Subject key identifier: 41:BA:03:36:9C:D5:0A:EB:A6:FE:25:C6:58:59:B3:A1:43:D5:66:E4
Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial: 0193D891DD4D1C20EC0A67CB7835C1EF44AD
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/QboDNpzVCuum_iXGWFmzoUPVZuQ.roa
Signing time: Wed 18 Dec 2024 07:00:58 +0000
ROA not before: Wed 18 Dec 2024 07:00:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39067
IP address blocks: 94.232.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:91:dd:4d:1c:20:ec:0a:67:cb:78:35:c1:ef:44:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Validity
Not Before: Dec 18 07:00:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41ba03369cd50aeba6fe25c65859b3a143d566e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:a0:9e:27:b9:98:1b:0c:f2:2c:98:b8:48:
e2:77:c7:ea:af:1c:d6:45:36:3d:aa:be:00:5b:75:
7c:33:58:be:cb:93:63:7f:58:f5:f7:d4:f4:81:cf:
a4:a9:a5:4d:95:af:54:ea:43:53:92:31:31:43:a1:
a0:20:c1:31:56:5b:f9:fd:94:3a:c1:df:8f:bb:7f:
2a:41:85:5a:53:ca:cb:3b:e3:a2:43:45:1c:6a:7f:
da:10:c2:c2:8f:78:15:3f:a8:9a:57:17:3c:a5:48:
4f:a1:af:21:d1:7c:45:94:b5:b5:a5:e5:e1:1d:61:
75:d8:b3:29:2d:84:74:4f:e3:86:2c:7e:50:ca:f9:
d5:ac:f7:33:dc:98:9e:17:0b:b5:e9:76:8d:95:a9:
f0:61:bd:75:2b:e2:6b:19:71:77:fb:16:42:b0:b9:
79:eb:8f:ba:76:50:98:7d:8d:6a:d3:4e:44:e0:73:
a9:5a:4a:e3:91:a6:04:fc:dc:a7:29:6c:9d:6c:0e:
5e:2a:d4:f4:f8:61:6b:0f:20:9a:1e:93:57:96:f2:
09:a7:8f:cb:3d:2d:3d:82:c9:ee:34:0f:de:ae:37:
69:02:4a:53:1d:59:88:e7:93:bb:7a:04:2c:b2:81:
f2:92:0b:60:49:3c:27:19:4d:1d:0a:24:87:72:3b:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BA:03:36:9C:D5:0A:EB:A6:FE:25:C6:58:59:B3:A1:43:D5:66:E4
X509v3 Authority Key Identifier:
keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/QboDNpzVCuum_iXGWFmzoUPVZuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:a0:d7:ef:de:c5:04:e5:12:2e:e1:6a:2b:38:9a:39:0b:98:
70:2b:be:5f:25:4f:73:23:16:f5:a6:c4:c1:c8:66:ee:29:f0:
63:75:63:4c:7a:b7:3f:b0:58:d7:04:bc:e2:34:1d:29:79:ab:
ba:15:f8:ef:d4:dc:be:98:cb:6d:08:5a:76:2f:33:c7:96:e7:
2d:a0:7b:fb:6e:dc:62:21:5b:ba:d5:26:fb:5d:bf:a8:14:c1:
5c:ef:03:d1:d2:cb:f9:e8:51:1e:b5:8a:db:ff:d4:62:91:9d:
26:77:d3:10:57:ff:35:1c:9a:81:de:06:fb:a6:0c:5c:2e:4d:
31:9c:1d:92:0e:60:73:b3:69:89:82:08:06:4c:da:c4:8c:8c:
53:db:79:69:63:b0:08:01:b1:4a:8d:63:d7:7a:61:8a:7e:3b:
65:42:7b:78:73:62:16:0b:9b:8d:14:af:f4:0f:bd:14:80:5e:
07:65:2b:33:66:a4:4b:a3:79:18:2a:14:1a:bb:f8:61:dd:15:
09:bd:05:ef:56:06:0c:02:e0:79:6f:e0:d8:27:9e:5a:44:98:
dd:f4:3e:85:2f:66:0c:1f:30:11:fd:63:d0:8e:83:1c:ea:4c:
e8:e0:17:48:59:b7:98:ad:ef:b9:d9:ba:3a:13:69:2e:95:f3:
01:00:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:12 2024 by rpki-client on console.sobornost.net