Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/QN91rJGm7D_VNrCEFLSkJ_4f-bs.roa
File: QN91rJGm7D_VNrCEFLSkJ_4f-bs.roa (raw, json)
Hash identifier: hHcOj1bR0tBRVTxlAX8Z6Z9QTfm4kICoEuJOLH9eFig=
Subject key identifier: 40:DF:75:AC:91:A6:EC:3F:D5:36:B0:84:14:B4:A4:27:FE:1F:F9:BB
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 0190C206590BD78C76DFCEA121F5EEA0F45B
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/QN91rJGm7D_VNrCEFLSkJ_4f-bs.roa
Signing time: Wed 17 Jul 2024 18:48:34 +0000
ROA not before: Wed 17 Jul 2024 18:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210541
IP address blocks: 31.42.112.0/23 maxlen: 23
31.42.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c2:06:59:0b:d7:8c:76:df:ce:a1:21:f5:ee:a0:f4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jul 17 18:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40df75ac91a6ec3fd536b08414b4a427fe1ff9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:0d:c7:ac:f1:d2:61:2d:96:bc:e1:3e:89:
0e:34:5f:03:a3:de:d9:4d:78:dc:99:27:56:a0:ad:
ce:b1:b3:9f:d4:92:06:c9:72:36:22:21:5e:20:40:
51:33:f1:85:8d:ea:65:18:ef:53:46:07:cc:49:34:
ec:af:a1:10:a9:fa:c3:18:22:f9:0b:db:56:07:cb:
32:e5:2f:6a:70:94:0d:b9:18:47:cb:11:77:96:12:
11:55:2c:54:9e:ea:ea:bc:64:31:42:2d:d1:fe:d1:
ce:cd:89:a9:ed:64:65:66:48:af:00:dc:95:33:fd:
d1:24:97:ee:76:f6:5b:2e:97:d8:43:d9:91:4e:b9:
e7:9d:e4:6e:85:11:a7:5c:75:bc:c7:05:80:5e:76:
7d:80:97:53:0d:85:1b:73:79:65:cd:b6:ab:25:87:
ae:fb:d0:cc:9f:a7:72:1c:32:fc:6c:0a:05:0c:d4:
1e:fd:af:21:5f:6d:f0:1d:4a:07:f1:a5:22:99:bd:
ae:ee:b3:fb:5d:60:ac:89:6a:72:4f:b4:a2:24:3c:
af:e0:17:f5:26:d0:ac:b7:e7:f3:ed:f9:f1:1c:6f:
72:13:55:78:29:f4:ce:08:2c:4a:2a:8b:c2:45:dc:
03:8a:14:23:d6:88:83:88:9c:e4:33:aa:b0:42:0d:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:75:AC:91:A6:EC:3F:D5:36:B0:84:14:B4:A4:27:FE:1F:F9:BB
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/QN91rJGm7D_VNrCEFLSkJ_4f-bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.112.0-31.42.114.255
Signature Algorithm: sha256WithRSAEncryption
18:b6:98:7d:cc:d4:14:82:03:87:91:0a:58:c7:0f:41:ee:2a:
3d:55:93:61:4a:55:67:d3:d2:35:f0:f9:2b:71:b2:4f:99:f4:
10:12:41:3a:ab:6f:63:83:5b:77:7c:02:53:ca:e1:69:b4:a0:
28:61:c4:d3:53:71:77:f6:3d:f1:2a:f0:ad:b8:8b:c0:df:31:
ed:fa:93:81:44:69:70:96:c8:b6:18:d8:3d:7e:f6:86:ac:99:
14:53:eb:34:5f:7f:41:08:88:1b:e8:5e:42:a0:a6:81:f1:3c:
64:8f:95:dd:4b:a5:13:d8:f0:3a:62:52:04:0a:b6:e7:b2:3a:
20:d2:ea:22:53:1b:9b:c5:8c:79:12:23:5f:00:e5:68:96:75:
0f:03:d6:8a:9d:b1:35:77:d5:4c:43:8d:69:bd:b5:20:28:be:
1c:33:b9:e0:40:27:46:ef:17:b0:26:ea:ad:a1:ea:4d:6c:91:
37:c8:3e:c9:3e:45:0a:5d:21:7c:a6:9a:43:2b:b6:44:a5:8d:
7e:12:de:f6:fe:aa:15:fc:0b:6d:6f:52:2c:e9:f7:2e:a2:84:
2f:70:ff:1d:cf:07:7b:ce:e0:74:7a:40:dd:de:3a:60:a9:c4:
a0:9d:d5:d1:4b:46:79:4b:df:b8:30:67:a1:e2:26:bd:83:cf:
07:9f:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:47:23 2024 by rpki-client on console.sobornost.net