Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/qgmT6giBQNedAqq1X3QTUXXuqU8.roa
File: qgmT6giBQNedAqq1X3QTUXXuqU8.roa (raw, json)
Hash identifier: m6t1v6ysaNmdguDi6/I/aYd3UL4zuCQ5xfdNdkezv4I=
Subject key identifier: AA:09:93:EA:08:81:40:D7:9D:02:AA:B5:5F:74:13:51:75:EE:A9:4F
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 018D4178CA1FF7326703060FB42E87C7BB8C
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/qgmT6giBQNedAqq1X3QTUXXuqU8.roa
Signing time: Thu 25 Jan 2024 16:34:11 +0000
ROA not before: Thu 25 Jan 2024 16:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205229
IP address blocks: 185.224.176.0/22 maxlen: 24
185.224.179.128/26 maxlen: 26
2a14:3900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:78:ca:1f:f7:32:67:03:06:0f:b4:2e:87:c7:bb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Jan 25 16:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa0993ea088140d79d02aab55f74135175eea94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:0e:60:3b:fc:65:3f:9c:61:e6:cf:f0:42:
75:4b:ea:f7:38:01:e6:8d:ce:83:65:d5:04:47:08:
62:0d:b1:84:90:4a:d0:ef:c7:76:62:34:a8:92:9e:
63:14:c0:ee:df:f2:82:ff:3d:5a:ba:af:84:dc:53:
d7:92:86:71:99:24:bd:a0:a7:64:b8:78:21:af:f1:
e6:c6:17:66:26:a4:8f:88:e8:64:fd:97:2c:54:19:
e9:34:6e:ca:70:ad:b3:04:ef:8b:37:36:2f:7e:8b:
2a:02:25:2c:bf:af:1e:bd:e7:c3:62:7c:63:ee:e8:
fd:58:f7:a7:c5:79:85:9c:f9:31:f8:dc:14:20:58:
16:10:b6:c5:05:05:af:58:24:25:c8:ce:7b:1a:8c:
29:09:34:58:bc:71:b9:0c:c4:0d:e3:cb:f4:e7:12:
dd:a1:27:d0:27:fc:15:ef:27:94:7f:33:16:82:cb:
05:09:9b:34:08:24:09:7c:bb:44:9a:a2:a7:40:aa:
fb:2b:ed:06:a4:a3:12:29:49:d1:20:d7:22:8c:3d:
9a:b9:c9:0c:ab:54:08:d8:14:6c:a7:cb:06:18:46:
35:cc:f3:1d:2c:2d:7b:b7:5b:38:98:8b:13:95:46:
80:2c:f7:d8:55:a0:92:27:dc:ca:0e:ef:fb:0f:21:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:93:EA:08:81:40:D7:9D:02:AA:B5:5F:74:13:51:75:EE:A9:4F
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/qgmT6giBQNedAqq1X3QTUXXuqU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.176.0/22
IPv6:
2a14:3900::/29
Signature Algorithm: sha256WithRSAEncryption
6a:39:62:32:12:f1:00:dc:de:a9:9a:4b:bd:b6:d8:fb:0b:5a:
24:44:f7:3e:62:b0:c7:af:e7:3f:57:29:72:ae:8f:bf:e1:7a:
03:da:46:85:b8:71:9a:be:c4:7b:e6:61:54:33:c4:df:b0:0c:
ba:d0:95:99:bd:3c:9c:bf:53:e9:c8:21:94:80:dd:c7:da:4f:
c7:b6:40:b1:63:3e:ce:95:c3:71:bb:a1:82:e0:f0:d2:70:9b:
a2:dc:3c:69:9f:5b:58:b2:23:3f:ca:6b:c1:41:fb:b3:39:4d:
49:71:45:e7:1f:6e:a0:75:92:6b:80:f3:e0:6f:40:02:33:70:
3a:de:a7:17:a2:31:37:fd:0e:ed:63:cf:da:0c:4f:ad:8c:b4:
8f:a4:21:7e:d8:9d:dd:1a:f0:6b:64:83:20:ea:d5:78:30:b9:
54:64:1f:dc:0e:db:fa:d9:c7:6a:22:91:b2:ec:a2:20:6e:62:
f3:df:b0:bd:b3:ae:a7:d9:74:f9:d6:d9:4d:7e:26:85:15:a6:
7f:5f:65:7e:3c:9d:24:6b:5b:0f:41:ac:3a:1d:e4:3d:01:6c:
34:7f:69:d3:d8:1b:c6:cb:2b:aa:5d:f8:49:81:58:15:cf:7d:
0f:98:12:86:61:d3:a5:93:6a:91:92:86:4c:1c:5f:70:c8:b5:
bf:9c:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net