Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/QI94quRX_6DUBeUSrm-dmx8it6o.roa
File: QI94quRX_6DUBeUSrm-dmx8it6o.roa (raw, json)
Hash identifier: lnsVcmeSim/VYwUCTheMKFYIVgWfWZIVw2NaLqph16o=
Subject key identifier: 40:8F:78:AA:E4:57:FF:A0:D4:05:E5:12:AE:6F:9D:9B:1F:22:B7:AA
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0193E342768DBF7C9764CCEE2364671A99C1
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/QI94quRX_6DUBeUSrm-dmx8it6o.roa
Signing time: Fri 20 Dec 2024 08:50:04 +0000
ROA not before: Fri 20 Dec 2024 08:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 45.91.22.0/24 maxlen: 24
45.130.141.0/24 maxlen: 24
2a0f:f44::/32 maxlen: 48
2a0f:f47::/32 maxlen: 48
2a0f:2740::/29 maxlen: 48
2a0f:e383::/32 maxlen: 48
2a0f:e384::/32 maxlen: 48
2a0f:e385::/32 maxlen: 48
2a0f:e387::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:42:76:8d:bf:7c:97:64:cc:ee:23:64:67:1a:99:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Dec 20 08:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=408f78aae457ffa0d405e512ae6f9d9b1f22b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:56:f6:6d:06:ed:d4:22:27:8e:c9:46:23:
a3:32:29:f4:1b:84:d8:ed:fd:3c:b7:0d:54:a3:ff:
ad:ef:20:9e:a3:32:f5:1a:b7:02:94:ff:d2:3c:fb:
fd:41:38:37:1b:6f:16:99:fe:42:64:4c:dd:99:26:
d1:46:18:b1:f1:c8:b7:23:00:11:76:db:5e:f3:81:
c7:5e:95:e8:54:e1:0e:3f:e6:ea:ef:a9:42:aa:b6:
2e:66:80:f6:c0:a4:6f:10:a8:ef:3d:de:15:bf:14:
7e:b8:e5:90:4a:54:6c:fd:59:18:66:4c:c6:2f:fc:
df:60:dc:ea:63:82:4f:d3:61:4d:2b:f0:2c:12:0b:
11:21:37:6b:ca:a1:1d:fe:54:c9:75:be:10:e9:4d:
cf:39:9a:73:c7:7f:e9:54:ed:09:ad:0a:32:b6:b3:
38:a7:87:f0:56:c9:35:9b:59:80:ca:df:55:50:b0:
61:e1:30:b3:a4:85:93:23:8f:20:ac:d8:f8:44:78:
d2:e0:fd:7c:f9:86:7d:0b:cd:fb:90:c4:2d:97:df:
c5:70:90:86:80:c4:04:d5:e7:41:fd:8e:b6:8b:a0:
6f:e7:d8:7d:5d:ea:86:07:8f:5c:4c:c4:8a:b9:9b:
31:ec:ea:46:7e:cf:de:c7:65:75:48:be:5b:43:5c:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8F:78:AA:E4:57:FF:A0:D4:05:E5:12:AE:6F:9D:9B:1F:22:B7:AA
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/QI94quRX_6DUBeUSrm-dmx8it6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.22.0/24
45.130.141.0/24
IPv6:
2a0f:f44::/32
2a0f:f47::/32
2a0f:2740::/29
2a0f:e383::-2a0f:e385:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e387::/32
Signature Algorithm: sha256WithRSAEncryption
88:67:7f:0e:df:84:f0:00:07:4e:91:ec:10:03:33:20:2c:b3:
66:ef:86:d4:d2:9b:fc:aa:7e:3f:04:2b:c2:24:f9:66:f7:e9:
37:75:d0:aa:97:d4:e9:6f:7c:c5:bf:60:d7:f0:44:90:6f:07:
cc:df:d3:53:46:63:40:5e:19:64:9e:da:cf:4a:0a:75:41:9a:
b7:f5:f4:48:e5:ff:83:14:45:da:c9:3b:4f:d7:50:8c:49:04:
8a:34:0a:2c:74:9d:44:6e:6c:66:d5:4e:6a:cb:be:b3:e4:6c:
bd:17:d8:1b:69:8d:10:c2:f3:be:98:06:7a:d3:e4:98:de:d9:
a0:40:39:8c:7b:98:88:73:14:3a:d3:21:09:85:4c:33:c3:09:
38:97:9a:ec:32:db:92:0b:be:40:0d:06:c9:54:f8:db:c5:59:
c2:d4:7c:f6:0b:a8:92:25:6b:4a:b3:13:a1:07:59:a3:ef:62:
89:1e:97:ad:53:41:c1:32:2f:4d:19:01:e1:cc:92:b4:79:be:
13:87:70:ae:72:0b:1c:46:6a:90:4e:d6:0e:f9:df:f3:8c:e5:
03:4a:42:68:97:c3:20:d0:72:96:f7:d3:32:1a:df:54:d6:a5:
34:f0:86:eb:cf:0e:30:45:ce:0c:ab:ab:66:6e:27:51:1d:8a:
1d:01:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:14 2024 by rpki-client on console.sobornost.net