Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/QdR-26zASr76R7XS2Dex57oAP3s.roa
File: QdR-26zASr76R7XS2Dex57oAP3s.roa (raw, json)
Hash identifier: fnGcrndBlzzt3JhZvTAT6nAtNOssqgiHtmjlZG2laEI=
Subject key identifier: 41:D4:7E:DB:AC:C0:4A:BE:FA:47:B5:D2:D8:37:B1:E7:BA:00:3F:7B
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 01910E9DBF2CDDF59AB9FF64DA1010A5688C
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/QdR-26zASr76R7XS2Dex57oAP3s.roa
Signing time: Thu 01 Aug 2024 15:45:04 +0000
ROA not before: Thu 01 Aug 2024 15:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200726
IP address blocks: 185.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:9d:bf:2c:dd:f5:9a:b9:ff:64:da:10:10:a5:68:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Aug 1 15:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41d47edbacc04abefa47b5d2d837b1e7ba003f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:e6:dd:ba:ed:63:96:45:bb:d1:99:47:0e:
46:a2:7b:fd:f4:13:66:52:87:2e:7d:6e:77:3c:ac:
2d:1e:db:9d:f8:3b:58:d0:2b:1b:df:4b:ad:b8:e6:
f7:49:33:66:2a:30:e7:32:f3:6f:a4:b4:22:bd:5c:
bc:0d:ae:75:d3:92:b5:fc:b6:42:4e:29:74:41:fd:
e8:7b:47:fe:fb:51:c2:bf:07:58:ba:a6:63:17:c9:
8a:e7:c2:e5:b8:37:a3:b9:6e:42:77:24:3f:a1:ed:
49:de:48:2b:91:f0:82:56:48:c5:cb:1d:93:1f:13:
c7:ae:d5:38:8a:11:f1:0b:82:1c:53:5d:85:12:8d:
56:5d:f4:5b:d3:66:fb:b9:cd:3e:fe:4b:d9:40:10:
9b:73:0d:d5:7f:de:d1:51:b9:0c:bb:42:be:48:46:
65:29:57:7b:ec:dc:ca:71:11:52:d3:26:5a:d1:8f:
d2:74:28:8d:6e:ed:dd:b5:60:f4:66:95:17:8f:6b:
cf:09:58:eb:94:3e:9e:bf:82:4c:7f:a2:e1:34:5e:
53:bc:71:1a:7a:ca:93:75:86:d5:27:fb:48:68:1f:
72:6b:16:ee:61:b5:99:79:28:8a:d2:cd:0f:92:bf:
a3:e8:65:3d:bf:93:4a:86:e5:60:d9:42:6c:46:67:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D4:7E:DB:AC:C0:4A:BE:FA:47:B5:D2:D8:37:B1:E7:BA:00:3F:7B
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/QdR-26zASr76R7XS2Dex57oAP3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.72.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:b7:2b:78:fd:fa:79:d3:10:70:58:06:33:83:c3:b0:f4:bd:
12:97:bc:82:64:80:6c:9e:5b:28:ff:e3:03:0d:e6:eb:1c:eb:
29:41:4d:35:bf:8c:9d:86:0d:9e:57:9f:b3:c3:50:b0:14:c2:
03:ca:53:77:ab:94:74:b1:a0:10:65:1e:5e:ce:39:37:7f:04:
b8:15:a2:3a:2e:19:af:c0:1d:00:d6:f1:68:9f:13:80:82:64:
6c:5a:72:4c:29:03:ab:66:90:c8:4e:0c:40:72:2e:2d:17:1f:
e8:9e:63:fb:85:df:9e:8a:2e:92:fe:63:1a:75:02:47:9c:c6:
2f:ac:06:76:7d:c9:27:a8:08:32:fc:f9:7d:eb:03:eb:57:2c:
4f:79:16:62:e8:73:89:12:6a:63:c9:a9:e1:10:d3:42:c9:c4:
fe:bf:8d:90:1d:8f:c8:4d:98:7d:58:e0:dc:f6:01:5d:e9:ae:
ba:82:d0:11:07:a9:92:65:6d:3d:b7:d8:dc:a4:19:0c:59:95:
a2:1d:da:9e:7d:ee:e4:f7:93:e1:2f:8a:c7:1f:53:18:a1:ef:
2f:73:dd:9a:ed:14:be:d8:26:be:7f:92:71:e0:d9:1b:30:95:
cb:53:bc:98:82:79:cf:3d:04:44:af:ed:08:af:fe:f0:25:c0:
65:c8:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:25 2024 by rpki-client on console.sobornost.net