Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/qD-2pb2qng4nBMfMJeGVrrBitCQ.roa
File: qD-2pb2qng4nBMfMJeGVrrBitCQ.roa (raw, json)
Hash identifier: zUfXGUbYQ8uBiHtXgD2WsAWohVApi6QI7gTEEQIzGnU=
Subject key identifier: A8:3F:B6:A5:BD:AA:9E:0E:27:04:C7:CC:25:E1:95:AE:B0:62:B4:24
Certificate issuer: /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial: 019423690F1064309C28818CE5B6D0F81CAC
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/qD-2pb2qng4nBMfMJeGVrrBitCQ.roa
Signing time: Wed 01 Jan 2025 19:47:55 +0000
ROA not before: Wed 01 Jan 2025 19:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28773
IP address blocks: 91.236.138.0/23 maxlen: 23
188.190.160.0/19 maxlen: 19
195.78.38.0/23 maxlen: 23
2001:67c:2ee4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0f:10:64:30:9c:28:81:8c:e5:b6:d0:f8:1c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
Validity
Not Before: Jan 1 19:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83fb6a5bdaa9e0e2704c7cc25e195aeb062b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:78:4b:26:29:50:2a:00:bc:17:2a:75:78:
03:72:0d:70:f7:f8:07:2a:37:97:2a:b2:24:37:9b:
95:d4:29:fb:0f:63:4a:f7:38:43:93:6d:6c:af:81:
54:0c:1e:b2:6b:b0:97:bc:ae:74:ae:0e:92:b8:1c:
6b:70:ec:b1:ff:ac:b4:42:8e:c4:94:14:fb:c2:be:
19:01:b5:53:c0:a9:f9:57:d4:1a:ec:83:9a:d7:c1:
de:f5:86:69:05:6c:1b:bc:12:2d:15:11:cf:36:df:
59:41:41:de:d2:f6:8f:dd:18:07:6b:68:44:ba:a7:
cc:85:f0:e2:4d:be:e5:70:ce:de:08:9d:53:df:2c:
91:08:f2:63:59:c8:4c:4c:21:a4:93:aa:54:7f:19:
88:64:d7:05:d1:ca:a1:40:23:dd:87:0a:df:2f:61:
df:7a:11:43:3a:1d:af:af:f2:e2:b7:e0:13:84:0a:
cc:38:fc:90:28:18:b1:b2:45:00:30:06:92:dc:08:
a0:94:1c:2a:db:a2:75:de:f1:46:bb:09:81:ea:f2:
fe:d7:f1:66:52:de:ec:14:0f:99:01:a9:77:25:e3:
06:91:e0:fb:fe:dd:41:80:c5:88:c2:fa:8a:7f:61:
34:4f:2b:e9:15:36:76:ea:ea:52:66:ec:14:32:20:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:B6:A5:BD:AA:9E:0E:27:04:C7:CC:25:E1:95:AE:B0:62:B4:24
X509v3 Authority Key Identifier:
keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/qD-2pb2qng4nBMfMJeGVrrBitCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.138.0/23
188.190.160.0/19
195.78.38.0/23
IPv6:
2001:67c:2ee4::/48
Signature Algorithm: sha256WithRSAEncryption
3e:7e:3a:ba:a1:2e:a2:42:a6:7b:00:c5:15:27:95:fe:8f:50:
f7:38:13:05:2d:7c:2a:e9:76:75:71:dd:93:0e:0f:23:58:f9:
f5:f0:04:9b:c8:2b:4a:1e:17:70:1b:12:5e:ee:fa:65:39:47:
05:8f:7d:be:03:53:bb:3e:a0:36:21:dd:dc:4f:22:48:3a:24:
8d:2b:a0:51:c9:66:60:75:30:83:98:9f:fd:30:fb:4b:90:3a:
91:86:ca:26:62:7f:ab:92:5e:02:93:fe:3c:24:e1:a1:b5:28:
17:e8:ff:8e:d3:2d:3b:81:88:10:a1:da:1d:16:ef:70:1e:bd:
6f:c5:26:b4:47:70:1e:b3:6f:68:39:ad:c2:09:7b:d5:62:2a:
07:61:b6:2e:5f:6e:40:ea:06:df:5b:0a:39:80:45:20:3b:67:
cf:9f:a9:b1:f6:a8:a4:ef:a7:b8:f3:37:1c:b0:a4:f4:e4:d4:
c2:58:54:cd:d4:42:42:8d:6d:df:ff:9e:06:78:ec:54:d2:d2:
9c:5f:7d:4b:7e:2f:aa:5c:ed:7c:5f:26:1b:b7:ee:35:87:85:
2d:ad:c8:5c:6d:8d:d0:79:3c:79:1b:c9:9b:9b:7a:37:96:bf:
ca:87:4e:cb:ea:6f:6e:02:6f:9f:d9:c0:66:3a:5d:77:3d:ed:
f8:70:ec:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:53 2025 by rpki-client on console.sobornost.net