Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/QEvCAu8cQk-07HJbiJZmlGwwge8.roa
File: QEvCAu8cQk-07HJbiJZmlGwwge8.roa (raw, json)
Hash identifier: 340OzYpDkQFegBN8HNogZZLO0cn49vr1OH6P+rlPKuw=
Subject key identifier: 40:4B:C2:02:EF:1C:42:4F:B4:EC:72:5B:88:96:66:94:6C:30:81:EF
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 019329FE9359FB37176477A74DE2B8A8584E
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/QEvCAu8cQk-07HJbiJZmlGwwge8.roa
Signing time: Thu 14 Nov 2024 09:26:09 +0000
ROA not before: Thu 14 Nov 2024 09:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206833
IP address blocks: 195.5.68.0/22 maxlen: 24
195.5.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:fe:93:59:fb:37:17:64:77:a7:4d:e2:b8:a8:58:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Nov 14 09:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=404bc202ef1c424fb4ec725b889666946c3081ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1b:8d:01:22:ea:0d:3d:fd:07:68:72:e5:5f:
28:df:7a:71:89:08:56:3a:2c:8c:9c:c3:ff:67:79:
33:7a:43:37:1e:e8:b1:05:59:87:78:d2:db:94:4e:
31:d0:75:ed:ce:dc:14:fd:89:3f:0b:f1:2a:e4:0b:
92:1c:e9:fc:87:f3:c3:c0:d8:f2:fb:c6:96:cf:7c:
d9:2c:aa:05:74:61:ff:f4:8e:96:c2:68:22:68:2f:
81:46:2a:29:44:96:6f:b3:6c:98:d4:c4:5a:dc:9a:
08:e2:e9:bd:dc:5e:b9:0c:23:7e:e5:d7:25:8e:9f:
4f:cb:b5:23:70:c8:08:76:95:f0:4d:9e:3c:fc:79:
ae:56:93:16:44:cc:c6:c3:4a:e9:c4:6c:b9:b8:66:
eb:d4:dc:14:98:e6:1a:fd:3a:8a:d5:2f:df:6e:0d:
a3:8b:5b:55:92:8b:5b:61:d4:e0:7e:f8:ac:44:25:
b2:94:1b:39:8e:36:3d:d7:f4:2a:f6:53:b5:7f:e9:
d9:8f:9f:cd:60:41:15:0d:e0:55:22:bd:b0:b3:cb:
2f:2e:86:94:e3:56:9d:60:13:cf:02:4b:fc:33:e5:
d9:cb:64:b0:92:21:09:32:4e:d2:d1:3a:42:6f:ce:
1c:e1:ea:17:d2:3f:70:2b:eb:59:a4:da:86:af:07:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4B:C2:02:EF:1C:42:4F:B4:EC:72:5B:88:96:66:94:6C:30:81:EF
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/QEvCAu8cQk-07HJbiJZmlGwwge8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.68.0-195.5.75.255
Signature Algorithm: sha256WithRSAEncryption
ca:d8:a4:9b:7d:df:2e:45:d8:91:b5:a1:e0:23:11:bb:e9:a2:
6d:4f:4b:2c:f4:0b:93:a1:46:c2:8c:68:5e:08:15:21:05:d1:
11:dc:5a:7b:9f:de:42:d4:8c:91:fd:01:6b:e6:25:19:e6:5a:
b8:d8:43:ef:88:8e:a3:9d:af:29:35:de:19:86:50:92:30:ae:
8f:87:d9:4a:25:b3:82:86:5d:8c:b6:8c:3e:18:ff:ee:ff:93:
07:e7:36:7c:8a:73:42:b9:45:63:4d:39:ec:8f:74:d4:ed:7b:
91:f8:ff:5e:51:dd:6e:2d:2b:0a:30:f6:a6:48:6e:53:9b:23:
2c:61:d9:b4:0f:6c:b7:04:be:48:e0:6a:7a:61:f9:f2:3d:55:
36:95:28:75:a9:2e:57:c6:57:3b:f5:d5:79:20:bb:77:af:aa:
88:67:39:e2:09:46:71:8d:d0:36:c3:b8:dc:14:88:2a:d7:85:
3a:6a:21:fe:d0:66:19:7c:c5:b0:26:04:4f:3a:a6:35:4a:45:
d2:fc:4f:59:19:99:e2:e1:2e:c6:38:8a:b5:e4:36:3b:21:c4:
7f:ba:b4:63:92:54:84:f5:23:a1:98:8c:9d:5b:59:cf:5d:74:
17:f7:e3:3f:26:c2:2c:a6:b9:ff:b2:5e:b2:d9:58:41:85:68:
02:c9:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:59 2024 by rpki-client on console.sobornost.net