Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/qFcAGWMPBkUMz4jiu1WvZFMpC0E.roa
File: qFcAGWMPBkUMz4jiu1WvZFMpC0E.roa (raw, json)
Hash identifier: ohOlj00HSECo0AiGR45z8IheDKyeItPJ84Cw1lAeWyY=
Subject key identifier: A8:57:00:19:63:0F:06:45:0C:CF:88:E2:BB:55:AF:64:53:29:0B:41
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 01937729D390737E1170266092CCA6CA0D12
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/qFcAGWMPBkUMz4jiu1WvZFMpC0E.roa
Signing time: Fri 29 Nov 2024 09:04:09 +0000
ROA not before: Fri 29 Nov 2024 09:04:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25530
IP address blocks: 62.113.32.0/23 maxlen: 24
62.113.33.0/24 maxlen: 24
62.113.34.0/23 maxlen: 23
62.113.38.0/24 maxlen: 24
62.113.40.0/24 maxlen: 24
62.113.45.0/24 maxlen: 24
62.113.46.0/24 maxlen: 24
62.113.47.0/24 maxlen: 24
62.113.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:29:d3:90:73:7e:11:70:26:60:92:cc:a6:ca:0d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Nov 29 09:04:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8570019630f06450ccf88e2bb55af6453290b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:f1:61:42:5d:d3:df:eb:0c:f9:a8:0f:bd:
ba:91:f6:1d:f7:96:42:cd:72:67:98:0f:9b:0b:8d:
f3:5c:05:f7:45:86:14:8f:f4:cc:c8:72:cc:2d:0c:
26:75:ff:e3:9f:7b:95:21:40:28:23:f4:38:75:98:
9d:64:42:e9:25:96:21:89:18:d5:ef:af:40:0c:f0:
5b:4b:ed:4a:c9:e7:16:26:10:ae:22:50:48:95:d8:
cd:fa:29:6d:c9:9f:5d:33:52:fa:73:e1:73:74:48:
7e:45:37:bf:e6:3b:93:06:09:d4:bd:de:d7:a7:a0:
67:b8:20:07:f9:ff:f3:16:30:2e:44:12:1e:03:83:
cb:f5:00:a1:9d:a0:51:8c:a4:fa:95:93:74:74:68:
f4:97:94:b4:4b:40:1d:3b:d3:0e:b4:b9:77:e9:bc:
9c:bc:2a:da:27:5a:d9:3a:f2:d8:07:f7:70:f2:a2:
a4:e4:cc:89:12:0d:6f:b8:bd:4e:21:58:3d:32:dd:
a9:ec:e7:c4:c5:ef:6f:9c:08:ed:2e:7b:83:8c:42:
25:5a:e5:12:31:ca:a4:19:81:d8:0b:82:27:97:88:
f1:e2:c3:d5:17:7a:6d:4b:d4:0e:8a:28:74:e9:c4:
9d:37:14:2a:9d:76:c1:9d:c0:7d:2d:af:3a:6d:3a:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:57:00:19:63:0F:06:45:0C:CF:88:E2:BB:55:AF:64:53:29:0B:41
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/qFcAGWMPBkUMz4jiu1WvZFMpC0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.32.0/22
62.113.38.0/24
62.113.40.0/24
62.113.45.0-62.113.55.255
Signature Algorithm: sha256WithRSAEncryption
6f:b7:d7:28:12:e1:eb:8a:66:a3:29:2a:97:7c:07:09:d5:ed:
2f:fe:b8:a6:f4:88:59:30:0c:01:ff:5b:86:f6:fe:ae:41:51:
f8:3b:78:53:78:d4:68:3b:ab:59:f1:a8:73:e9:98:96:c8:dd:
eb:0c:bf:e8:bb:46:e1:c8:0e:f2:29:c8:3b:b1:dd:d6:13:01:
da:c4:00:ee:56:a7:17:8e:42:df:29:4f:8c:6a:4c:47:1f:49:
f8:dd:1b:f7:4c:12:81:38:ed:a5:5a:63:0c:b3:2d:ba:ea:ff:
6b:ff:7e:41:66:38:09:db:69:c7:25:c3:d5:be:3b:01:81:97:
cc:85:ee:4e:cc:7c:1b:d5:0e:49:8d:6c:2d:ee:56:3f:67:e6:
ed:1d:65:d2:74:a0:15:af:a0:6a:a8:7c:9b:f6:d3:ed:d0:72:
f3:02:d2:7d:3c:10:72:e8:37:2b:ad:9a:ed:0e:06:10:58:3b:
99:1d:05:1e:db:6e:0a:75:0d:22:32:bc:8d:7e:ed:fd:3c:c1:
08:05:2b:fe:25:8d:49:3f:3b:63:06:99:9c:e5:41:79:58:b3:
87:91:e0:e4:e1:71:74:75:ca:20:fa:17:3c:87:cf:a4:79:57:
4d:6e:9d:97:a5:06:7d:cd:7c:31:ac:97:3e:b8:13:9f:63:61:
6a:d0:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:12 2024 by rpki-client on console.sobornost.net