Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/nqo_O7xWpllnpXWgXV-EBK2yLMY.roa
File: nqo_O7xWpllnpXWgXV-EBK2yLMY.roa (raw, json)
Hash identifier: v3gPcs+xtmwPaPJ3A0/t7F8YEQgyHeonW0dBXWdUhwo=
Subject key identifier: 9E:AA:3F:3B:BC:56:A6:59:67:A5:75:A0:5D:5F:84:04:AD:B2:2C:C6
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 019427B670C82CD304A3A0B25D56DF0FA643
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/nqo_O7xWpllnpXWgXV-EBK2yLMY.roa
Signing time: Thu 02 Jan 2025 15:50:55 +0000
ROA not before: Thu 02 Jan 2025 15:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197190
IP address blocks: 92.119.212.0/22 maxlen: 24
92.119.213.0/24 maxlen: 24
92.119.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:70:c8:2c:d3:04:a3:a0:b2:5d:56:df:0f:a6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Jan 2 15:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9eaa3f3bbc56a65967a575a05d5f8404adb22cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:c5:1a:ad:9c:ce:ec:3e:0e:1a:e0:8a:44:
5d:57:88:00:66:d9:b4:cb:12:b6:39:bd:0c:ff:ba:
25:cd:60:09:9f:c1:ff:67:0a:a2:d7:cb:d2:17:9e:
6d:65:99:ce:36:f5:60:30:c7:e3:a3:dc:44:67:8c:
34:68:45:32:3e:05:6a:c7:7a:c3:43:13:ac:a3:87:
1e:bd:55:2d:a0:d0:53:40:2b:fa:59:5f:c5:37:96:
31:d6:f3:49:7a:2a:7c:af:1d:ec:d9:5f:27:6a:13:
46:10:59:53:8e:53:9d:1f:bd:c0:cd:83:ab:5e:c7:
4f:8b:21:0c:bd:8f:a6:fe:d2:6b:f8:54:ff:76:b9:
05:68:b2:24:fd:b5:c2:41:0c:75:bd:53:6d:61:48:
18:13:4b:a0:bc:ee:a0:65:ff:1e:82:65:ae:b0:3a:
25:8d:fd:83:24:4f:56:3f:f2:37:7a:d1:27:8e:ac:
0e:3d:b2:66:a7:6f:bf:34:a1:3d:77:98:21:de:33:
96:84:8f:69:4c:fe:39:9e:65:48:ac:01:bb:df:78:
c8:dc:3a:1a:7b:8b:c7:1e:44:23:b1:96:a8:f1:da:
a3:4e:bb:76:6e:81:73:60:7b:43:a5:03:bf:a2:10:
f7:95:c9:90:31:83:eb:65:9b:79:af:14:03:51:bd:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:3F:3B:BC:56:A6:59:67:A5:75:A0:5D:5F:84:04:AD:B2:2C:C6
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/nqo_O7xWpllnpXWgXV-EBK2yLMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
02:e0:27:31:c2:9a:bf:8e:9e:49:34:ac:21:22:f0:e1:50:fe:
1a:f4:a2:c6:49:2b:2e:3c:03:20:d5:58:fe:15:83:cc:d8:03:
a4:24:a5:23:15:49:2f:79:28:46:cd:45:50:58:52:01:8e:c8:
3b:18:fc:a3:81:9e:57:fe:9a:c2:0a:5e:24:68:ea:ae:7a:07:
64:00:8b:31:30:31:86:e9:84:05:44:2c:b9:fc:02:52:40:c0:
f8:29:e9:e3:66:d5:a4:35:9d:c8:51:19:b3:82:7c:fb:dc:15:
55:c6:8b:a8:73:54:28:82:d1:2b:42:75:e9:e8:9a:27:fb:36:
bd:79:1f:ed:d7:a5:e9:42:a4:71:8d:ba:3a:12:c2:a2:23:fb:
c0:18:6d:e4:d6:ec:53:48:6b:6e:f7:e3:5d:ce:08:7c:93:5b:
55:69:19:e7:4d:74:ab:9d:ba:cb:7b:a0:18:ad:c9:e8:d9:df:
49:c5:d8:5d:09:d0:4f:26:be:6b:c0:40:81:53:e5:cb:85:6e:
e8:bb:c0:99:82:e7:a0:a5:ec:60:13:a6:c9:44:d6:3b:27:29:
d4:cf:f3:ba:46:4c:49:49:7b:79:1e:8a:49:02:15:01:da:cb:
9e:4b:57:dc:a6:ff:10:69:a5:bc:57:b5:4e:52:67:b5:57:df:
db:21:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net