Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/qU4GCXtQQIYsasrvBU_F2TpT2-k.roa
File: qU4GCXtQQIYsasrvBU_F2TpT2-k.roa (raw, json)
Hash identifier: +1m475eiCahCYZnF5Z9asmpo5178vFoiraDoaVa8iRw=
Subject key identifier: A9:4E:06:09:7B:50:40:86:2C:6A:CA:EF:05:4F:C5:D9:3A:53:DB:E9
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 018CC6B7BBA4DF4FF8855537D089FBD6D032
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/qU4GCXtQQIYsasrvBU_F2TpT2-k.roa
Signing time: Mon 01 Jan 2024 20:29:38 +0000
ROA not before: Mon 01 Jan 2024 20:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43588
IP address blocks: 87.255.76.0/24 maxlen: 24
87.255.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:bb:a4:df:4f:f8:85:55:37:d0:89:fb:d6:d0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Jan 1 20:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a94e06097b5040862c6acaef054fc5d93a53dbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:54:d7:0a:b8:43:4e:35:0a:98:b2:1d:72:
6e:67:95:53:92:bd:74:e9:ff:01:70:3b:ec:74:12:
c0:d2:20:6b:a2:a6:36:d0:4d:fd:d8:a9:bb:cb:cf:
d8:91:e1:fb:e0:d9:f9:b8:1e:d8:6d:26:0a:1d:2d:
95:2a:0e:48:6d:a7:e2:d6:68:eb:67:21:a5:ff:c4:
df:ae:db:2e:67:a2:b8:13:2a:51:c0:c9:4c:1f:79:
4b:a8:bf:d7:60:b9:19:f2:79:4f:ce:60:28:38:c9:
6c:2f:f4:da:ba:e6:1e:9c:32:42:cc:60:39:8b:3d:
9e:04:f7:70:a5:84:4f:bc:68:aa:c9:32:71:d7:74:
24:89:31:cb:03:a6:28:17:a1:64:fc:50:d6:e5:ce:
29:8e:6e:60:90:53:0b:7d:e1:dc:1b:9c:d6:3e:91:
18:e6:c2:6c:6b:71:a3:6a:53:52:c2:a7:e5:4b:7d:
41:18:cb:20:9d:0b:d4:79:7f:29:25:70:96:3e:55:
2e:6c:8d:04:38:68:6a:e6:76:7c:63:1c:4b:86:65:
78:b9:e2:90:8d:78:32:35:21:86:16:2d:7e:a7:69:
1a:48:9e:c4:e4:a8:4c:b5:da:86:4c:c2:b4:19:26:
03:e5:00:c3:fe:22:1d:a0:7b:4a:1f:20:35:3c:d2:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4E:06:09:7B:50:40:86:2C:6A:CA:EF:05:4F:C5:D9:3A:53:DB:E9
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/qU4GCXtQQIYsasrvBU_F2TpT2-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.76.0/24
87.255.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1c:6f:ec:f4:0b:1c:db:91:a7:36:a6:d9:54:9f:8e:c7:74:
cc:7d:64:18:ce:f1:48:1e:68:90:7a:cf:08:c6:f4:1a:c6:ed:
6b:85:ce:28:69:f1:2c:5f:c9:70:d6:31:9a:63:d9:76:77:46:
22:e2:38:04:d3:a7:69:42:9b:4b:3e:8a:2f:4b:88:d6:ed:d8:
59:72:4d:84:cc:13:4c:42:03:6d:af:99:34:fd:5b:00:ed:78:
50:18:f5:4d:7e:53:88:df:67:8c:a1:80:1a:6b:9e:51:91:d8:
cb:40:23:d3:bd:71:02:d8:1f:73:d9:61:89:a1:f5:b5:a1:37:
ed:ee:2b:17:ab:e9:d3:64:8a:30:fd:86:d9:67:64:e5:6a:73:
68:99:34:d9:d8:86:6e:42:eb:2e:fb:f6:c6:3a:5e:af:a0:b4:
3f:41:22:99:f3:5b:b1:69:ee:2e:4e:82:28:22:fc:b7:7c:bf:
c1:bc:ba:a9:3a:b9:b0:af:3f:12:6e:6b:04:71:cd:df:70:73:
4d:ce:d1:82:aa:f0:e5:a9:9d:7a:6e:ec:f9:c8:0e:b2:da:d8:
71:a0:ce:3a:91:5e:b2:c9:70:a9:bc:ee:ae:08:7c:fc:f3:72:
fe:2d:f4:04:e7:8a:0d:52:af:6d:fd:12:7b:0b:e8:8d:10:74:
82:fc:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:24 2024 by rpki-client on console.sobornost.net