Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/QUI1aaOrFot6N7LXYMIJeh5LGn8.roa
File: QUI1aaOrFot6N7LXYMIJeh5LGn8.roa (raw, json)
Hash identifier: 3hRLH91kve2ni/Uw2YZZTPS8ETVWrEwwR7ivPXyo5G8=
Subject key identifier: 41:42:35:69:A3:AB:16:8B:7A:37:B2:D7:60:C2:09:7A:1E:4B:1A:7F
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FA911FC62C462AB3B17E4AAD9A2D6
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/QUI1aaOrFot6N7LXYMIJeh5LGn8.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 45.132.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a9:11:fc:62:c4:62:ab:3b:17:e4:aa:d9:a2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41423569a3ab168b7a37b2d760c2097a1e4b1a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:c9:93:78:cc:5b:ed:f8:72:b8:84:64:dc:
89:b4:e7:4d:eb:a9:46:23:92:c4:16:e4:f2:76:f0:
38:6f:c2:36:11:e7:84:dc:04:02:d0:31:55:3b:14:
8f:64:8b:77:75:c0:b4:73:f5:87:cd:47:be:30:97:
dd:9f:ab:e0:7e:6a:c0:ba:d8:eb:84:6c:17:ad:51:
b5:ba:9a:d3:93:ca:ce:e2:9f:dd:e6:d0:f5:82:e6:
df:1f:f8:ec:b6:42:5c:21:a8:a2:da:96:b5:e8:e1:
5d:72:71:99:8d:61:2b:3a:81:e2:dc:18:25:51:64:
58:3f:49:28:59:fe:06:38:89:de:ea:a8:67:38:00:
1a:7a:93:17:69:c1:c9:06:3c:91:ae:04:6d:85:47:
af:d5:fc:fe:0e:2b:f9:99:df:44:b3:a2:59:13:cb:
18:ab:7a:dd:a4:eb:59:9b:67:b7:b1:a5:69:f3:31:
f5:34:3e:9e:0e:3c:eb:a0:59:85:7b:9c:fd:88:f6:
c5:b5:7f:73:48:ea:9f:ca:57:9a:c2:27:be:e9:cb:
3f:5d:76:bb:7a:8e:1c:bd:18:38:0f:f1:8e:b6:88:
89:ee:a5:90:12:da:99:08:3b:6a:5f:02:1c:0e:d8:
76:2f:39:41:9c:1d:52:af:e0:3e:1f:6f:86:6c:f8:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:35:69:A3:AB:16:8B:7A:37:B2:D7:60:C2:09:7A:1E:4B:1A:7F
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/QUI1aaOrFot6N7LXYMIJeh5LGn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5d:27:83:c8:fb:05:9f:ea:8c:4d:ab:e1:c7:55:fd:ea:60:
24:42:7a:ba:bb:bf:58:cb:f9:7e:41:4b:75:8a:05:3a:ed:00:
ea:ef:35:1f:1c:80:58:b6:f3:5d:6f:9f:fb:ba:2f:c1:46:e9:
76:dc:74:fe:e7:ab:dc:13:51:43:e0:97:64:b1:59:8a:6b:ef:
de:9f:90:53:3d:29:86:eb:ee:99:bc:bd:1f:36:fe:51:c5:22:
84:e0:2e:06:e8:42:32:8a:0a:aa:98:b2:22:38:79:94:03:c8:
56:6a:37:49:6b:fe:42:6f:7e:4a:c2:19:af:f4:39:b9:fa:22:
8c:bb:f8:b8:c4:5b:43:49:f5:29:48:e2:ae:86:0e:03:b6:b2:
1f:ef:fc:c5:96:9c:90:b6:da:da:7e:44:48:76:25:d4:f8:7e:
e5:05:ec:c4:37:3a:4e:ee:fa:09:ae:e6:0e:29:29:3f:e7:70:
94:ad:01:e1:36:63:a1:f0:91:57:d5:42:e7:ea:fc:d3:dd:f7:
80:61:70:85:29:df:73:94:7b:e4:f2:30:3c:69:8c:93:d8:21:
57:91:60:d3:63:52:85:63:a2:9d:5c:ed:68:ae:72:ad:fa:b7:
a3:e2:ba:f3:b5:54:b4:9f:9b:12:b1:d1:64:41:75:d0:84:86:
05:20:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net