Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/JFQr7osNZ-xDaHyrVSWBOzIYAv8.roa
File: JFQr7osNZ-xDaHyrVSWBOzIYAv8.roa (raw, json)
Hash identifier: NQkGIktSBfFE1UvP9RsIgI/ZiaogrfZzFBBw6U3RG9k=
Subject key identifier: 24:54:2B:EE:8B:0D:67:EC:43:68:7C:AB:55:25:81:3B:32:18:02:FF
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 0193C07B3DCDFF24D09E020A646F73E13B9B
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/JFQr7osNZ-xDaHyrVSWBOzIYAv8.roa
Signing time: Fri 13 Dec 2024 14:45:22 +0000
ROA not before: Fri 13 Dec 2024 14:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60349
IP address blocks: 194.38.36.0/22 maxlen: 23
194.38.36.0/24 maxlen: 24
194.38.37.0/24 maxlen: 24
194.38.38.0/24 maxlen: 24
194.38.39.0/24 maxlen: 24
2a09:6d40::/31 maxlen: 31
2a09:6d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:7b:3d:cd:ff:24:d0:9e:02:0a:64:6f:73:e1:3b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Dec 13 14:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24542bee8b0d67ec43687cab5525813b321802ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:63:b3:6e:15:4c:30:d3:87:da:bf:9d:e8:
95:46:9c:3e:42:82:f2:f4:bd:94:d9:a1:32:3f:b4:
aa:96:12:38:97:4b:69:3e:f7:c8:36:4c:92:29:ca:
bc:83:61:03:7b:fa:fc:d8:35:67:97:69:73:db:3b:
aa:32:ec:89:83:cb:ed:f3:44:b0:3d:d3:cc:03:f4:
3d:a2:36:85:12:3b:83:2c:ad:31:e6:24:6a:97:5d:
f9:69:53:6b:19:34:81:09:56:c7:10:c6:53:f0:d2:
d2:07:f6:19:44:ec:6b:59:90:39:e7:6b:21:91:45:
ad:12:c5:3a:fe:82:f6:8b:b8:06:f1:8f:ee:92:30:
5d:08:2c:80:c7:5d:f4:8a:55:31:3a:6a:20:b3:8f:
ec:db:52:1b:2d:96:96:77:b5:f0:99:3a:72:31:39:
5d:85:d9:b9:cd:50:cf:46:be:bb:c7:e3:21:b0:fe:
93:68:71:22:70:f9:ee:2a:ca:83:d0:7a:f8:9a:07:
35:74:8f:55:95:a1:2f:96:d7:36:5d:53:75:30:12:
4e:00:47:f7:3e:8d:ce:5f:fd:25:de:b1:24:8e:5f:
61:5f:88:d2:f3:c0:fb:a2:02:9f:07:13:45:a3:18:
85:b8:ad:45:d5:e3:f1:dc:f7:08:1e:e4:c5:38:5b:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:2B:EE:8B:0D:67:EC:43:68:7C:AB:55:25:81:3B:32:18:02:FF
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/JFQr7osNZ-xDaHyrVSWBOzIYAv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.36.0/22
IPv6:
2a09:6d40::/31
Signature Algorithm: sha256WithRSAEncryption
b7:5a:1b:77:36:40:93:3c:c1:fe:57:b7:ef:7f:21:9b:bb:53:
ef:50:7b:cd:07:0a:ba:07:2e:66:ba:90:13:37:33:9a:d9:3f:
55:2e:a4:61:4c:e3:27:55:3b:33:62:cb:fa:a5:27:b2:ac:40:
01:1f:2a:b3:6a:c3:41:87:ac:d3:b5:8d:38:6f:28:82:eb:04:
ea:1d:e5:f4:85:f5:4b:0b:ad:e2:63:12:10:1f:2d:7e:af:81:
5a:89:96:bb:a8:58:1c:e8:06:b4:46:e8:9d:6c:a2:f0:88:21:
db:e8:3f:ba:ef:19:65:c5:2f:37:21:d2:c9:39:c5:8a:28:48:
5a:cf:8b:ba:30:70:7b:5a:1c:04:b9:1b:fa:7b:47:72:78:33:
8b:a8:ca:b0:1e:65:48:ee:f9:69:d3:b8:09:98:62:7a:ca:24:
b8:b9:1c:81:7a:64:2d:44:c5:b9:86:4f:0f:73:35:d1:2c:84:
2a:ab:97:b3:8d:b4:65:40:01:0b:8d:d7:9b:a5:8e:c0:ba:b7:
dc:73:a3:95:d9:3b:66:0c:78:d8:51:d5:15:0d:18:01:5e:d3:
55:36:3c:0f:f4:61:7a:83:eb:47:7e:82:99:fb:dd:ef:67:10:
34:0d:01:15:06:6e:56:ca:cd:b9:8a:8b:7c:b0:29:5d:6d:05:
c4:0c:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:44 2024 by rpki-client on console.sobornost.net