Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/qJ5hiKkP4vk2MgVZr7OR0KI9up4.roa
File: qJ5hiKkP4vk2MgVZr7OR0KI9up4.roa (raw, json)
Hash identifier: NVSN5UxZ2hbV9W8xroeBnM39Z5yGHWzlgoCiaPGyvKU=
Subject key identifier: A8:9E:61:88:A9:0F:E2:F9:36:32:05:59:AF:B3:91:D0:A2:3D:BA:9E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 01936D57CAF3EEF5DDA97EC96B522F814A23
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/qJ5hiKkP4vk2MgVZr7OR0KI9up4.roa
Signing time: Wed 27 Nov 2024 11:18:10 +0000
ROA not before: Wed 27 Nov 2024 11:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216314
IP address blocks: 91.204.77.0/24 maxlen: 24
91.204.78.0/24 maxlen: 24
91.204.79.0/24 maxlen: 24
195.34.94.0/24 maxlen: 24
195.34.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:57:ca:f3:ee:f5:dd:a9:7e:c9:6b:52:2f:81:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Nov 27 11:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a89e6188a90fe2f936320559afb391d0a23dba9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:f2:8b:fd:4c:b9:63:4f:73:87:a0:c6:68:
c4:8c:4c:a5:e7:ac:55:d3:d0:12:fc:05:a8:ff:17:
8f:37:01:cc:82:af:60:df:71:a9:26:ee:67:cc:83:
d5:0c:81:ed:73:d2:6f:1d:23:c7:82:e6:04:7d:46:
78:b7:62:8b:62:65:db:d8:d9:ff:a0:b7:de:e9:5d:
20:d9:0a:23:52:69:6d:25:17:b2:01:8a:c1:76:f3:
a7:b6:67:cb:ad:3f:3d:03:31:93:12:18:1d:90:92:
06:cc:b4:1a:05:f7:88:4f:24:14:8b:96:ab:10:65:
cb:61:ac:ff:d3:52:29:57:5e:44:a7:4f:36:b2:d2:
47:49:13:1f:4d:b8:e0:e9:4b:ff:1f:a2:0f:c0:bf:
c0:4c:44:bd:d8:cb:5a:43:14:a9:f8:e1:b3:67:d4:
68:92:0b:a0:91:ba:31:ae:cf:88:40:ce:bf:95:c7:
73:b3:62:5c:8c:d2:f0:bc:7a:4b:ce:d1:a6:4d:af:
d4:d8:52:6a:7d:74:54:3d:bc:09:4d:56:1d:13:39:
17:d9:da:41:1f:d2:d8:3d:7f:33:da:31:f2:d3:f9:
2a:f7:f1:f9:45:cb:3f:f8:4b:d5:9c:ee:90:57:be:
05:52:35:1c:00:31:29:42:c7:72:4d:28:fc:92:54:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9E:61:88:A9:0F:E2:F9:36:32:05:59:AF:B3:91:D0:A2:3D:BA:9E
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/qJ5hiKkP4vk2MgVZr7OR0KI9up4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.77.0-91.204.79.255
195.34.94.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:9f:e0:bd:ce:20:ca:8c:cd:1c:ff:b4:53:8c:b6:e7:2a:d1:
8c:77:87:83:c7:82:64:45:5a:b0:a3:47:d9:f9:ed:60:bb:a3:
d6:6f:d6:ad:12:73:5c:68:8a:5a:66:db:b5:46:6c:b0:dc:3a:
b8:bf:fa:07:d5:53:2e:f9:e5:26:59:57:78:49:9e:60:e4:fd:
50:fb:80:ac:6f:eb:d7:19:06:1e:49:b2:b0:af:e3:7e:1e:99:
e0:04:ec:c1:57:9d:76:b1:52:bc:d2:13:bf:c5:92:88:ea:b4:
55:39:94:29:4c:b9:77:3e:78:9f:1f:ab:b2:a5:a7:10:81:75:
e8:b8:41:6a:80:eb:ff:3a:e6:f0:35:52:1e:6c:96:7b:fb:ff:
62:b7:fc:1e:e4:ca:6a:ac:88:99:ff:ce:88:cf:87:ec:50:ec:
c2:4f:c5:fe:a2:5d:ae:e7:1b:bc:db:ec:af:66:f2:c7:f0:aa:
b3:19:40:46:0f:3e:6a:31:73:e7:e7:a4:86:13:4c:62:6f:b8:
26:36:89:ad:10:53:67:51:c7:b0:af:7e:f0:2c:a1:15:9e:ff:
42:14:86:7d:72:9b:03:82:63:05:da:3b:47:67:cd:35:e7:3f:
5c:84:07:05:d6:e1:a1:38:6c:33:e0:b2:c9:9c:09:bb:4e:e5:
ce:d6:9d:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net