Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/sQifz1m6bZUGHi5ojkRQR9cnZeU.roa
File: sQifz1m6bZUGHi5ojkRQR9cnZeU.roa (raw, json)
Hash identifier: VjghWfNXOyirtORPPqtwkkl/sJalzK9cEfcSrl7QPro=
Subject key identifier: B1:08:9F:CF:59:BA:6D:95:06:1E:2E:68:8E:44:50:47:D7:27:65:E5
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0193B530016A598E558BAB4D94E4B4C71522
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/sQifz1m6bZUGHi5ojkRQR9cnZeU.roa
Signing time: Wed 11 Dec 2024 10:07:22 +0000
ROA not before: Wed 11 Dec 2024 10:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202334
IP address blocks: 185.85.255.0/24 maxlen: 24
185.243.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:30:01:6a:59:8e:55:8b:ab:4d:94:e4:b4:c7:15:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Dec 11 10:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1089fcf59ba6d95061e2e688e445047d72765e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:62:3e:95:86:be:dd:06:c1:11:2a:14:cb:
48:d9:bc:2d:39:8e:f5:92:e3:4e:54:10:66:ff:d4:
d2:95:80:19:e4:9e:7e:24:77:b3:9b:e1:16:e3:07:
10:61:38:2b:0b:47:59:66:ac:97:c7:49:91:f4:e0:
6e:7e:ce:34:d9:21:65:a4:45:b3:a4:d7:bf:1e:3e:
52:57:98:81:1e:c3:41:aa:ee:f9:90:50:d1:03:d3:
a7:08:84:5f:6d:33:9d:00:80:78:0e:f9:4d:3b:85:
c3:69:87:21:98:94:9b:47:8d:89:cc:1c:ae:8d:e0:
c4:bf:b7:ea:38:d9:2d:0d:8e:5e:72:09:89:09:0f:
b2:5f:ce:79:4a:af:1d:53:3b:ba:df:a6:e6:12:cb:
79:2f:ed:cb:35:45:00:9d:13:bb:c8:06:51:7c:63:
1c:fd:c4:f8:1e:0c:42:4a:59:82:4f:aa:41:1f:27:
b4:f1:a7:ca:4e:1c:75:90:cc:80:b7:17:ea:04:58:
5f:be:ed:f3:d1:7c:3b:df:c0:e1:ea:bd:88:4c:e9:
60:af:fa:2f:1b:e5:a2:17:93:05:b0:cb:ed:c1:d2:
84:cf:ca:85:90:01:fd:3b:a4:9f:94:ab:b6:fc:35:
3f:79:2d:67:ab:ec:84:46:c4:25:c1:d6:06:3b:b0:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:9F:CF:59:BA:6D:95:06:1E:2E:68:8E:44:50:47:D7:27:65:E5
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/sQifz1m6bZUGHi5ojkRQR9cnZeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.255.0/24
185.243.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:81:12:a1:11:d8:55:ca:9c:9e:aa:a3:c4:ae:57:52:ea:a6:
72:de:81:c6:0a:a8:d8:8a:8c:0a:55:97:bf:92:cc:df:02:f3:
af:4a:5a:c1:9c:81:49:35:59:33:05:df:d9:3a:15:e9:fe:62:
ed:c9:9f:9b:d0:ee:d7:c9:1b:3f:d7:9b:57:60:c0:5c:df:be:
47:31:de:e1:f8:91:97:53:38:dc:89:ca:28:ee:12:16:b3:40:
33:c8:f6:00:74:b3:bf:96:23:35:ef:d9:03:84:e9:d9:a2:ac:
30:ca:c9:1a:ad:9e:1c:98:5e:31:36:47:20:14:0f:9e:f0:28:
0c:09:09:ac:1c:10:ec:50:92:4a:7b:0b:33:ed:be:59:db:e7:
3f:c4:e8:d9:b2:66:da:2a:e0:4f:19:6f:a9:9d:b2:2f:74:cf:
db:f4:ce:79:a1:73:d6:6a:42:08:5b:10:eb:c5:0b:a8:77:48:
78:ec:82:56:87:92:62:ad:8e:88:1a:e9:3d:30:57:35:55:ce:
40:85:79:df:e3:6e:b8:7a:b5:84:e6:11:89:b3:01:6f:fa:dd:
89:54:96:54:d4:90:62:92:68:7a:c7:de:ca:ce:4a:96:88:6d:
2e:fd:04:85:90:87:c4:7f:c4:39:3c:89:6d:c6:e2:43:a2:de:
80:32:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:35 2024 by rpki-client on console.sobornost.net