Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d5d899-4def-4ddb-ab95-9c65100e8084/1/N-ZQR5B-3FedPv5cuc79bTqTbTM.roa
File: N-ZQR5B-3FedPv5cuc79bTqTbTM.roa (raw, json)
Hash identifier: AmP8O8c4ncjCil24tywARLqLKsN5Nlf9K8/ZxU5bAkQ=
Subject key identifier: 37:E6:50:47:90:7E:DC:57:9D:3E:FE:5C:B9:CE:FD:6D:3A:93:6D:33
Certificate issuer: /CN=c00973a431b41b601ce81849d4d5dfd2654f76a7
Certificate serial: 01896478F05E93A48BB28774C472ED61DE43
Authority key identifier: C0:09:73:A4:31:B4:1B:60:1C:E8:18:49:D4:D5:DF:D2:65:4F:76:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAlzpDG0G2Ac6BhJ1NXf0mVPdqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d5d899-4def-4ddb-ab95-9c65100e8084/1/N-ZQR5B-3FedPv5cuc79bTqTbTM.roa
Signing time: Mon 17 Jul 2023 15:29:54 +0000
ROA not before: Mon 17 Jul 2023 15:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 109.94.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:f0:5e:93:a4:8b:b2:87:74:c4:72:ed:61:de:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00973a431b41b601ce81849d4d5dfd2654f76a7
Validity
Not Before: Jul 17 15:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37e65047907edc579d3efe5cb9cefd6d3a936d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:e9:4f:78:9e:e2:d6:6c:85:60:44:24:f4:
f4:d3:f0:a0:4c:68:8d:b6:9a:c0:2d:f2:c3:d3:e8:
30:eb:ae:52:f1:b6:39:93:7d:03:11:7b:95:5a:fe:
43:f4:f6:99:d6:8f:a2:20:72:89:9f:36:15:41:7c:
e4:05:a0:1d:73:6d:28:8b:4b:19:2e:0d:f0:8a:4b:
a3:36:cb:9a:eb:1f:7c:70:ab:6a:7c:39:50:f8:9b:
8f:b0:cc:27:ce:b3:88:f4:c5:df:56:eb:0c:d8:ac:
e3:bd:a6:d7:0e:9e:91:53:f9:32:55:a9:bd:bd:c0:
66:48:31:e0:50:50:1b:9c:8c:45:83:59:41:18:8e:
3d:41:d2:14:f7:97:15:fa:47:3f:b0:ed:3e:fe:26:
9b:82:54:94:1d:8a:90:6c:52:85:a6:de:70:1d:ac:
04:d8:fe:1f:94:2a:5d:7c:7e:08:2a:21:5f:08:47:
51:48:93:0d:65:ef:1d:6f:cb:52:19:96:88:d8:8e:
79:be:98:1a:3d:c0:ee:cc:72:00:b7:5e:fa:59:10:
39:96:92:5d:19:c8:30:a8:2a:7f:e7:86:77:7d:21:
65:e5:c5:b3:01:03:b7:e5:26:a0:8e:7f:8e:ec:ce:
96:fc:b6:75:02:b5:fc:7b:1f:98:2f:3c:88:5b:f0:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E6:50:47:90:7E:DC:57:9D:3E:FE:5C:B9:CE:FD:6D:3A:93:6D:33
X509v3 Authority Key Identifier:
keyid:C0:09:73:A4:31:B4:1B:60:1C:E8:18:49:D4:D5:DF:D2:65:4F:76:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAlzpDG0G2Ac6BhJ1NXf0mVPdqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d5d899-4def-4ddb-ab95-9c65100e8084/1/N-ZQR5B-3FedPv5cuc79bTqTbTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d5d899-4def-4ddb-ab95-9c65100e8084/1/wAlzpDG0G2Ac6BhJ1NXf0mVPdqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0f:8c:12:6f:01:0e:df:39:ae:72:17:6e:f2:9a:aa:7a:9f:
52:09:a5:7f:7c:ca:51:1c:e9:02:43:6d:10:30:f2:ca:2c:28:
f1:bc:69:0a:63:3f:b2:35:d4:de:7f:74:47:a1:53:53:97:f9:
f0:57:ba:16:57:1f:85:a5:23:23:a0:8d:b4:cd:5c:d5:b3:f3:
a8:08:d6:71:b7:11:01:29:25:5e:af:bd:a6:f9:ec:19:f0:ce:
7f:29:d0:48:53:5f:77:06:9a:63:35:13:20:36:98:0c:f3:0f:
34:16:9a:61:ca:6d:01:fe:ee:99:07:c1:9e:40:21:34:6f:cb:
e5:83:a3:92:da:13:e7:f7:ce:f7:fb:06:d7:e4:22:8e:b6:1b:
ad:61:dd:ae:3c:d8:12:19:3c:84:e2:da:5d:1d:32:75:c4:cf:
b9:9b:8a:ff:d9:a2:f4:91:08:23:e1:94:af:be:64:82:1d:21:
28:81:0e:2a:3d:9f:48:a5:cc:75:4b:6e:21:a4:37:f9:ca:83:
a4:0b:ab:55:00:e4:19:f5:c0:9c:d6:58:06:7f:8d:4f:91:4e:
d5:a8:a4:79:28:70:a9:ae:2b:15:c9:ae:09:7e:3b:ab:e0:fc:
fa:1b:22:ca:12:14:13:e4:19:57:5f:ce:db:a2:cf:20:59:bd:
8d:15:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net