Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/QeL0rszTYkTp4_YW-uuoNnt5Noo.roa
File: QeL0rszTYkTp4_YW-uuoNnt5Noo.roa (raw, json)
Hash identifier: aw4xD4CgWZqsa5HTdgpcxK6EOp2Kh5K9VZ2LG0Qihb8=
Subject key identifier: 41:E2:F4:AE:CC:D3:62:44:E9:E3:F6:16:FA:EB:A8:36:7B:79:36:8A
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 018CC3488C348DE1C50696F87EC9C86B3A2B
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/QeL0rszTYkTp4_YW-uuoNnt5Noo.roa
Signing time: Mon 01 Jan 2024 04:29:20 +0000
ROA not before: Mon 01 Jan 2024 04:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60973
IP address blocks: 91.223.238.0/24 maxlen: 24
91.237.33.0/24 maxlen: 24
2001:67c:1124::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8c:34:8d:e1:c5:06:96:f8:7e:c9:c8:6b:3a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41e2f4aeccd36244e9e3f616faeba8367b79368a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:2f:41:08:10:47:ce:8a:dd:d8:77:77:b5:
e8:03:71:65:90:19:74:d9:03:6e:d0:a2:dd:46:ac:
89:40:1d:61:cc:dd:ba:1d:d0:0e:5b:2a:5f:34:56:
7c:1d:06:b8:85:21:95:24:e0:48:f3:35:b4:ff:33:
44:28:80:55:f2:17:a9:8f:7a:60:d7:0f:68:b0:9f:
59:a1:01:01:09:84:3f:af:e1:3d:dd:5a:a5:5a:c3:
74:f1:79:6e:7a:9f:0e:f5:40:52:cc:76:54:ba:92:
82:b6:2e:0f:40:3b:ac:26:aa:e3:b0:a5:2e:d2:1c:
59:4d:7f:d2:1b:3a:35:89:5c:ec:3a:00:4f:5f:0a:
fd:3a:6c:3d:2c:a2:ed:a3:9d:6f:da:24:d7:8f:0f:
e8:7a:c9:79:95:66:e9:82:5a:3c:9c:92:0d:3c:c2:
26:40:4c:ec:ac:6b:03:56:98:79:2b:f5:40:28:33:
22:dc:11:f9:b1:48:35:30:f5:89:66:92:2d:93:3b:
b7:2d:92:73:38:80:50:50:d2:5e:cf:c5:c0:1a:08:
07:fe:f5:05:bb:21:55:2a:66:a0:ad:e4:f7:62:b1:
b1:a7:55:be:00:15:5b:bd:ea:bf:e1:c9:83:fa:9f:
02:98:9a:8f:8d:b4:0f:73:ad:62:17:83:8c:aa:6b:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E2:F4:AE:CC:D3:62:44:E9:E3:F6:16:FA:EB:A8:36:7B:79:36:8A
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/QeL0rszTYkTp4_YW-uuoNnt5Noo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.238.0/24
91.237.33.0/24
IPv6:
2001:67c:1124::/48
Signature Algorithm: sha256WithRSAEncryption
21:48:85:25:05:20:74:e7:96:5c:8e:7e:61:77:cd:2b:5f:a0:
40:27:9c:7f:ba:2e:9f:4e:fe:84:44:23:5b:a0:bb:89:77:44:
8c:eb:f4:77:32:c1:0c:3b:44:02:92:6b:1f:96:6e:fd:90:84:
59:0a:5d:f7:a9:1d:e8:be:bb:50:e1:91:42:7c:ba:52:89:7d:
48:2e:2c:11:04:1c:dc:e1:0b:3c:09:3d:11:ac:63:45:ba:98:
b2:be:e4:04:56:42:0a:79:79:af:e9:60:7b:56:eb:4c:1c:eb:
21:3b:09:15:c1:0e:14:3f:b9:99:3f:cf:60:97:57:c8:a1:96:
25:84:55:37:07:36:86:50:5b:d3:88:ee:6e:c1:77:87:46:66:
31:47:e8:64:a6:c3:68:79:c6:54:9f:07:82:23:27:38:ad:43:
6c:de:16:59:3e:2e:37:7a:cd:23:d1:37:c9:d8:44:74:dc:05:
d9:7e:f9:59:87:2d:c4:f3:23:e0:ad:4a:9d:7b:20:6d:b5:89:
fd:e0:c4:f0:a8:ec:4a:71:a6:93:88:2d:1b:5c:c8:1d:83:c1:
04:e4:bd:41:d6:d4:18:76:52:c0:32:77:a3:e0:d2:8c:4f:d1:
4d:ee:3f:ac:cb:05:2b:dc:81:ef:08:e3:b5:a1:10:53:bb:30:
f1:b4:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:24 2024 by rpki-client on console.sobornost.net