Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_tqY0So0PFHKlkpZWTFPdIKievM.roa
File: _tqY0So0PFHKlkpZWTFPdIKievM.roa (raw, json)
Hash identifier: YV2kihI8TYQdZnb/cf2CQj4plBqOpVDSmRAjBYvZ+X0=
Subject key identifier: FE:DA:98:D1:2A:34:3C:51:CA:96:4A:59:59:31:4F:74:82:A2:7A:F3
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0193B5023B73284CB2546DBE418B63BC33FE
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_tqY0So0PFHKlkpZWTFPdIKievM.roa
Signing time: Wed 11 Dec 2024 09:17:22 +0000
ROA not before: Wed 11 Dec 2024 09:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 83.147.223.0/24 maxlen: 24
94.241.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:02:3b:73:28:4c:b2:54:6d:be:41:8b:63:bc:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Dec 11 09:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feda98d12a343c51ca964a5959314f7482a27af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:5e:e8:d6:a7:30:dd:35:27:42:8e:5d:65:
c7:92:b8:de:63:68:02:c5:c7:6f:6d:0f:2f:12:08:
df:31:ed:d0:15:92:1e:fc:aa:7b:17:f0:98:3d:64:
1d:b7:25:2b:10:22:56:7f:a1:c1:51:73:cc:ed:20:
05:64:c5:f9:b4:3e:e9:a4:8f:43:e6:f8:2d:a8:0e:
83:20:33:0e:98:1f:ef:7d:75:24:67:8a:81:42:0c:
84:59:83:37:11:56:37:dd:57:52:67:71:11:e8:9b:
60:76:23:d2:de:d5:70:57:78:16:a4:22:a4:96:d3:
66:76:cc:c2:47:10:90:c2:24:3b:e3:8b:58:e1:b3:
ca:58:8c:ff:e9:1b:4b:d8:df:08:e3:fd:e9:60:b7:
e9:11:fd:cb:39:fa:11:49:b3:02:be:38:15:a0:23:
4a:a2:44:1e:00:33:14:17:2f:f9:e6:4f:72:91:86:
e3:b5:57:03:fe:68:b0:e3:29:22:81:a1:bc:e8:9d:
e8:04:33:13:7d:3d:ed:8d:27:5a:af:91:03:74:aa:
76:e9:dd:fb:80:fb:cc:02:33:b0:e0:37:8a:07:4c:
0f:fe:b5:f1:b0:31:02:47:5a:18:ea:77:25:c9:4e:
dd:9b:ff:c4:fb:3a:5e:f5:6e:50:fa:f4:0f:0b:f9:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DA:98:D1:2A:34:3C:51:CA:96:4A:59:59:31:4F:74:82:A2:7A:F3
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_tqY0So0PFHKlkpZWTFPdIKievM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
94.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:27:1e:9f:f8:6b:46:77:70:b0:41:fa:3a:91:7c:bd:a5:57:
37:fa:79:12:07:32:b9:d7:52:17:a8:2c:bc:3a:0e:37:69:4e:
8c:70:68:cc:ca:69:37:69:04:18:dc:b5:e0:8a:0d:fd:d3:2a:
04:fd:6b:14:35:0a:c6:e2:a1:bf:ba:75:04:c4:bd:8f:90:fc:
eb:06:50:3a:34:8b:63:91:08:e6:a8:76:bb:7e:ec:65:45:e2:
f9:32:c8:d1:ac:e3:19:26:c3:4f:7e:fc:ec:34:ec:ff:68:b1:
25:09:3d:69:8d:59:91:60:9a:4b:3e:b9:b9:da:19:a0:33:a2:
fa:b2:40:94:7d:ad:75:44:54:c4:f2:bc:10:a9:81:52:f6:e2:
3d:c8:2d:0c:47:1a:1c:70:de:a1:b7:04:84:b6:7c:34:56:a7:
4c:78:b4:60:d0:2c:9c:e2:b5:bf:3f:18:26:ba:4e:f2:1e:c0:
7d:94:ec:93:c8:a8:73:d9:13:ce:d8:ed:52:6b:64:fb:20:67:
98:bf:52:36:20:84:f3:98:f1:8a:24:a5:06:58:5f:b5:f4:4f:
2a:b1:8c:18:5a:68:a9:99:dc:ac:83:c1:31:b3:ee:0a:f9:8e:
b4:b4:bc:37:0a:7b:23:fb:60:cc:0d:17:30:ff:95:d2:d8:86:
cb:0d:8a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net