Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/QXvTU8U0bwloXsFopg347oxpRdQ.roa
File: QXvTU8U0bwloXsFopg347oxpRdQ.roa (raw, json)
Hash identifier: frm7hBuemLZ1hXdr2cVf5V2C4kgdPWiL0ns834F2+xE=
Subject key identifier: 41:7B:D3:53:C5:34:6F:09:68:5E:C1:68:A6:0D:F8:EE:8C:69:45:D4
Certificate issuer: /CN=a61f79a4778f4f553d4a6f8b4a7dda67f6386c09
Certificate serial: 01856E2F7FFDAFB5DDD9AB2003750C9A39F9
Authority key identifier: A6:1F:79:A4:77:8F:4F:55:3D:4A:6F:8B:4A:7D:DA:67:F6:38:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/QXvTU8U0bwloXsFopg347oxpRdQ.roa
Signing time: Sun 01 Jan 2023 16:34:44 +0000
ROA not before: Sun 01 Jan 2023 16:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60118
IP address blocks: 176.126.252.0/22 maxlen: 22
185.233.148.0/22 maxlen: 22
185.57.83.0/24 maxlen: 24
185.57.80.0/24 maxlen: 24
185.57.82.0/24 maxlen: 24
185.57.81.0/24 maxlen: 24
176.126.236.0/22 maxlen: 22
2a02:59e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:7f:fd:af:b5:dd:d9:ab:20:03:75:0c:9a:39:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61f79a4778f4f553d4a6f8b4a7dda67f6386c09
Validity
Not Before: Jan 1 16:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=417bd353c5346f09685ec168a60df8ee8c6945d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:c9:f9:11:45:2f:95:1c:4d:69:28:1d:11:
4b:84:84:ed:dd:7a:0d:f1:77:c7:8a:a3:51:cc:5e:
ba:af:dd:e7:1f:1b:15:a9:c0:66:3a:a2:4d:41:09:
40:85:3c:da:b7:4e:bc:a5:c0:8f:0f:70:6c:38:28:
77:ac:d8:09:b3:81:ef:a7:ba:c6:b9:e7:d1:85:9d:
78:cc:40:32:35:f5:d7:f0:af:7c:5d:31:31:6a:ad:
5a:3a:51:b3:26:96:2d:85:7a:40:ac:82:7a:a2:a2:
fe:cc:56:d5:69:32:a2:03:18:c5:dc:f5:84:cb:ea:
45:64:db:73:08:1e:29:97:a5:f4:ca:af:de:54:ec:
b5:39:2d:2b:30:61:8a:52:02:5a:d1:5f:99:e5:62:
cc:2d:7a:0e:20:76:04:73:74:b9:32:25:7a:8d:fb:
c6:0f:71:d1:a8:f5:1e:93:c3:c6:78:f1:a3:2b:bf:
d1:7b:7e:45:d0:26:bb:bd:e0:b3:57:89:d6:88:33:
89:3e:81:d2:41:7c:a5:68:5b:27:92:ba:74:eb:de:
6f:4b:70:b4:ec:48:a5:9d:d8:65:2f:40:1a:41:2e:
ec:fa:6d:0b:6a:c8:f5:38:64:2b:96:7e:5c:2d:c0:
d8:17:79:fb:27:1e:bb:ab:64:62:f0:f3:5b:25:4e:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:D3:53:C5:34:6F:09:68:5E:C1:68:A6:0D:F8:EE:8C:69:45:D4
X509v3 Authority Key Identifier:
keyid:A6:1F:79:A4:77:8F:4F:55:3D:4A:6F:8B:4A:7D:DA:67:F6:38:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/QXvTU8U0bwloXsFopg347oxpRdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.236.0/22
176.126.252.0/22
185.57.80.0/22
185.233.148.0/22
IPv6:
2a02:59e0::/48
Signature Algorithm: sha256WithRSAEncryption
81:b7:43:18:5f:ad:16:8f:c3:e5:f5:ed:4f:55:59:80:69:9a:
a3:7b:50:84:03:92:48:05:25:6d:ef:fa:96:c8:0f:1a:c9:38:
56:b1:94:ee:47:19:54:e6:ee:e1:53:59:f2:ed:ae:c8:66:fa:
34:72:ef:2d:59:f9:9b:1c:52:7e:23:07:07:f8:b3:03:2c:46:
55:f8:9f:cc:a6:9c:57:e4:8c:39:65:05:6a:92:62:4f:6a:06:
6b:b5:69:d7:bc:b8:f2:3f:f5:0a:49:f9:11:f9:ec:93:fb:c0:
c5:15:fb:4c:93:be:f5:51:6f:57:b2:41:6a:ac:ea:e0:4e:b9:
4e:27:93:bc:11:a5:8a:e3:9a:8f:90:3a:50:b3:db:f6:eb:c9:
37:21:34:c1:f5:af:29:58:c3:52:55:57:1d:a0:f6:fb:20:4d:
01:e2:c5:e0:0d:08:8d:44:d1:85:e1:a7:4c:1e:31:6d:04:e5:
d8:fc:c9:c8:49:c1:24:52:db:d7:fa:0b:f7:97:92:2d:d6:57:
1a:6d:52:dc:ef:91:39:78:03:83:22:73:99:e6:50:e3:d2:32:
6f:49:5a:1c:6e:75:51:f7:80:d3:da:dc:3f:42:02:50:bf:d3:
c1:ee:39:9a:74:fb:60:68:7f:8a:21:1e:e7:84:fa:50:2e:ee:
b3:f7:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net