Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/CQXJUtISUB5cwvUPb6xtu95hfgo.roa
File: CQXJUtISUB5cwvUPb6xtu95hfgo.roa (raw, json)
Hash identifier: KNQHH4NLXKkymrWWp8hQL/sB+AmGSmvG26kEFvpPmTo=
Subject key identifier: 09:05:C9:52:D2:12:50:1E:5C:C2:F5:0F:6F:AC:6D:BB:DE:61:7E:0A
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 018CC80191C057065C56B95D3C37DAE02703
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/CQXJUtISUB5cwvUPb6xtu95hfgo.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60159
IP address blocks: 194.146.190.0/24 maxlen: 24
194.146.189.0/24 maxlen: 24
194.146.191.0/24 maxlen: 24
194.146.188.0/22 maxlen: 22
2a0c:d540::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:91:c0:57:06:5c:56:b9:5d:3c:37:da:e0:27:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0905c952d212501e5cc2f50f6fac6dbbde617e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:c0:23:96:bf:82:ec:a3:0c:07:a7:89:9c:
47:a4:12:84:4b:d2:60:a4:28:e1:f8:1b:9c:01:9c:
4c:ee:b7:c5:64:e2:01:18:94:c9:15:8c:75:6e:9d:
b3:c4:db:18:80:de:e6:01:00:67:7a:71:73:3c:db:
01:07:e2:dc:d7:08:c6:c2:8d:22:7d:7d:f4:ce:44:
df:77:0e:f8:a4:1e:7e:a7:02:e4:02:18:87:ee:81:
79:6d:73:0f:c2:7a:35:e8:76:fc:de:06:ef:f3:33:
f7:c5:24:cf:69:85:fb:dd:89:5c:81:76:33:ff:ec:
c3:78:42:fe:db:24:d6:1a:76:cf:c4:34:ee:ba:df:
c4:1e:79:93:09:19:d5:e7:c2:d4:a0:c0:09:9c:aa:
37:29:8f:22:bf:2c:86:ca:a8:06:af:45:69:dd:35:
4d:7e:8d:0e:5a:72:8d:38:e6:ff:97:4d:3b:32:12:
ad:ed:a2:00:ab:47:b5:5e:e9:0f:9c:56:cd:96:aa:
e1:12:8f:76:8f:cb:22:36:cc:41:53:1e:86:11:b8:
6e:13:23:f7:2e:5b:4c:43:1f:b1:f9:53:ce:a1:3e:
a7:8f:b0:14:c4:34:e1:07:8d:56:e1:04:e2:ad:db:
d1:2f:0d:bd:8a:11:f1:1f:bc:11:23:c1:61:35:0b:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:C9:52:D2:12:50:1E:5C:C2:F5:0F:6F:AC:6D:BB:DE:61:7E:0A
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/CQXJUtISUB5cwvUPb6xtu95hfgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.188.0/22
IPv6:
2a0c:d540::/32
Signature Algorithm: sha256WithRSAEncryption
37:3c:1c:49:e8:a4:50:08:14:01:f4:03:75:e3:fa:d0:63:18:
e7:08:61:f6:58:fe:c0:da:6e:ca:26:8c:65:c5:52:d6:3e:0e:
9b:5f:98:1b:d8:02:30:f5:a7:c2:c0:07:ee:4c:b6:ab:97:ad:
d0:6d:23:d3:2e:ca:14:c1:a5:2b:a0:04:d0:87:1e:24:a1:47:
9e:6f:04:c2:48:d5:f7:d5:7b:8e:2e:7b:30:37:6c:22:69:36:
1b:8a:23:25:16:00:24:4b:82:5f:fa:44:aa:d7:31:1f:67:c7:
44:0e:f5:a9:a4:39:63:fd:42:7c:ee:e9:c2:5b:5f:b6:80:99:
b3:09:c0:ff:a4:3d:87:d3:8a:fc:aa:f3:e8:ab:80:70:07:79:
9f:34:9b:20:21:47:7f:69:7a:9b:dc:ac:39:2f:0f:d6:f8:2c:
f0:0d:93:a9:b4:7a:01:18:a1:43:d4:4f:e3:cd:a7:e3:47:aa:
7a:cd:7f:7b:2e:81:9f:f9:3b:96:d7:c0:95:75:c3:0a:e6:fa:
36:c1:a8:9c:1d:d2:a7:70:e0:69:1b:e0:b0:d6:a0:d5:3c:35:
69:7c:95:b4:15:37:71:6b:79:b9:f5:63:27:e7:a6:40:18:d1:
5b:af:ab:87:4b:88:b3:b0:15:58:57:08:65:27:2d:17:12:02:
41:be:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:12:29 2024 by rpki-client on console.sobornost.net