Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qSIgdrjmZ_VazG97aZR84QKF9gU.roa
File: qSIgdrjmZ_VazG97aZR84QKF9gU.roa (raw, json)
Hash identifier: LhDa1MGEOBMzEYoqrp9sg9XnP+3KjsAnvf5tc8RiM7w=
Subject key identifier: A9:22:20:76:B8:E6:67:F5:5A:CC:6F:7B:69:94:7C:E1:02:85:F6:05
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0193ABCE93BD2798FA68740EB76B6267FCC6
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qSIgdrjmZ_VazG97aZR84QKF9gU.roa
Signing time: Mon 09 Dec 2024 14:24:22 +0000
ROA not before: Mon 09 Dec 2024 14:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213732
IP address blocks: 46.38.146.0/24 maxlen: 24
46.38.147.0/24 maxlen: 24
46.38.149.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:ce:93:bd:27:98:fa:68:74:0e:b7:6b:62:67:fc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 9 14:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9222076b8e667f55acc6f7b69947ce10285f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:58:4a:0e:fb:f4:fc:6d:52:bd:16:17:23:
ed:1a:11:79:ff:f4:1b:11:46:15:56:6a:94:fa:49:
24:87:ba:6f:64:b8:3c:67:74:bf:61:53:14:0a:21:
d3:d4:68:8a:fd:e6:b8:f3:3c:30:61:78:c8:ca:90:
57:28:65:cd:e5:af:8e:04:15:33:e7:c2:cc:48:75:
96:ea:a5:b5:74:cc:89:44:0c:d8:7e:a6:55:23:b4:
04:78:90:06:07:3b:7c:ec:df:31:b0:de:3b:9d:6b:
cb:dc:6a:50:04:76:85:2a:15:a2:52:c5:fb:0c:91:
13:e2:e0:93:d7:56:1a:ac:04:30:68:99:ef:cc:de:
9e:91:36:1b:83:f3:3d:0f:dd:ea:b6:d6:b0:d5:e9:
f7:76:c9:cc:ce:81:00:5f:09:7c:f6:56:05:9f:00:
75:db:ad:3b:56:46:6e:79:9b:e8:b9:2b:57:be:97:
82:ee:83:b9:09:83:5f:5b:18:85:85:4c:e5:e4:48:
22:3c:e1:c7:b2:f6:7e:c1:d0:9e:2e:18:bd:1d:d7:
4d:ac:9b:5f:87:7d:de:34:ba:ad:8c:ee:da:ff:91:
46:be:ac:2d:33:f2:55:d9:24:ad:f1:cc:90:f1:28:
a7:f2:89:b8:52:94:6e:fe:5f:cb:17:3a:08:c3:de:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:20:76:B8:E6:67:F5:5A:CC:6F:7B:69:94:7C:E1:02:85:F6:05
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qSIgdrjmZ_VazG97aZR84QKF9gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.146.0/23
46.38.149.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a9:b5:4b:43:2b:d6:bc:d0:ed:5e:70:b9:c6:55:4c:41:b5:
56:d1:b6:67:4e:f6:8c:d8:88:02:5b:6c:da:e5:e8:e1:26:b5:
13:82:20:17:37:02:03:2e:c7:d6:fa:03:c0:39:a6:54:f4:8e:
29:37:ce:cb:5f:d3:5b:1b:7f:93:1b:51:a9:f3:1e:38:db:74:
0b:96:60:71:91:04:aa:71:50:cf:92:c8:c6:9b:14:7e:00:04:
81:68:08:ea:52:35:0f:a0:53:60:52:a5:8c:19:31:f6:a1:59:
af:5a:97:53:16:8f:d1:fc:c6:bd:b9:6c:df:31:60:4d:b7:44:
79:59:46:98:69:47:35:82:ad:76:f3:0b:28:68:c6:12:b1:fd:
9e:71:97:ad:da:47:9f:bb:f7:47:d4:86:da:a3:29:e3:f0:68:
22:51:2e:70:e4:3c:6b:f8:11:55:48:ad:75:7a:75:f8:0c:7e:
8e:8a:5c:dd:3f:19:70:cf:c1:52:b5:ab:0b:76:2f:da:7c:2c:
9a:ce:88:72:66:39:7a:41:2d:5b:65:c5:5d:a6:dc:18:57:fc:
ef:e0:37:52:e6:d3:1b:14:7c:a5:66:71:19:ea:9d:aa:88:6c:
8e:ba:03:0f:f6:7b:17:55:ee:1b:68:6c:ad:14:6d:66:6c:6b:
43:c3:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net