Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/qivQ0o2jIE7YKn8W1TFGHLO0ioc.roa
File: qivQ0o2jIE7YKn8W1TFGHLO0ioc.roa (raw, json)
Hash identifier: XQKfXsxKUoS2l3c5RD5xwbUVsvpOH/SMlB7CZOOHTf0=
Subject key identifier: AA:2B:D0:D2:8D:A3:20:4E:D8:2A:7F:16:D5:31:46:1C:B3:B4:8A:87
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 018CC4937B8A3D9DDABC3D1F1887EF1F37F1
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/qivQ0o2jIE7YKn8W1TFGHLO0ioc.roa
Signing time: Mon 01 Jan 2024 10:30:48 +0000
ROA not before: Mon 01 Jan 2024 10:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16188
IP address blocks: 185.178.116.0/22 maxlen: 22
217.29.32.0/20 maxlen: 20
2a00:b580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7b:8a:3d:9d:da:bc:3d:1f:18:87:ef:1f:37:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa2bd0d28da3204ed82a7f16d531461cb3b48a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:1e:b2:04:2f:a8:24:52:9c:2a:06:90:58:
bd:44:0d:5e:fe:67:99:46:1d:0c:08:2b:c4:ab:78:
dd:82:03:26:80:73:de:c7:e0:50:d2:9d:2e:59:a6:
42:7f:0d:04:8e:3a:39:33:6e:b2:95:c8:57:ff:8c:
46:a6:67:be:c1:21:63:1a:67:63:7d:6f:47:23:72:
e5:c9:dc:4d:d1:da:e5:93:9b:df:18:c8:47:ff:c0:
8a:d5:68:5c:44:ee:fc:df:bb:f5:5a:53:44:7f:d8:
44:fc:2e:62:69:aa:66:8e:a7:4a:df:d1:6b:07:ac:
a2:b8:ec:5f:56:1a:20:79:81:42:16:c9:0a:12:8a:
8f:66:fc:bb:e8:9d:c7:1a:db:91:e7:8b:70:1d:2a:
22:4b:9f:89:b5:6c:62:7b:d2:af:cd:cb:d7:b8:62:
28:6a:43:30:1f:37:f1:ce:45:6e:05:35:60:64:04:
46:b0:9c:2c:eb:2a:66:09:80:6d:a8:d6:d9:fb:50:
50:99:d6:a2:0f:79:2d:47:6f:27:d5:5c:1c:91:9c:
85:cc:63:8e:c5:23:37:f8:7e:c3:38:4d:f5:1f:c6:
ac:df:08:08:0c:da:7d:f8:05:ce:6a:00:f6:05:49:
0c:b8:10:63:66:6b:5b:36:2a:61:1a:c5:d7:39:09:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:D0:D2:8D:A3:20:4E:D8:2A:7F:16:D5:31:46:1C:B3:B4:8A:87
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/qivQ0o2jIE7YKn8W1TFGHLO0ioc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.116.0/22
217.29.32.0/20
IPv6:
2a00:b580::/32
Signature Algorithm: sha256WithRSAEncryption
63:55:39:23:ab:eb:2d:76:02:4f:e7:79:49:c4:74:8d:be:22:
61:1c:fc:6e:59:4b:85:98:8a:47:e8:bd:eb:ba:dd:06:96:ea:
fd:1e:fb:bf:61:b9:68:9f:3a:fa:0c:62:86:15:4f:ab:8b:2f:
99:07:b8:7d:7d:19:15:17:22:6c:f8:96:7d:42:b3:ce:37:3a:
21:57:78:22:11:0f:d0:b2:49:e5:dc:69:d9:38:85:05:21:c6:
c8:16:80:1b:12:19:59:19:3e:5e:e9:a7:dc:15:e9:72:e5:1f:
f1:21:fe:f3:7a:df:6b:9f:d7:95:79:84:de:8d:4c:36:f7:33:
4d:2a:dc:e5:7d:92:44:8a:81:44:db:5e:61:c3:b0:f9:42:1f:
df:f9:5f:45:6b:b9:05:3b:fa:07:d4:57:0a:c1:73:89:f0:93:
d8:f3:64:53:c6:a0:69:a7:3b:d1:34:60:be:2a:e1:a4:02:1f:
ff:04:88:b9:a9:10:7a:50:87:ab:df:d2:01:a5:11:1f:67:93:
0f:da:d8:5c:f6:57:ca:2e:0d:c0:25:1d:15:8a:5b:b3:6b:9b:
3c:37:1d:cf:b7:aa:b3:5e:19:77:4e:b3:40:0b:4f:9c:6b:65:
dc:04:c0:52:db:c3:26:94:6a:00:51:7d:ef:d7:c0:dc:d6:94:
77:c8:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:27 2024 by rpki-client on console.sobornost.net