Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/quo7um72LoLwmBl-5eESCN_AXl4.roa
File: quo7um72LoLwmBl-5eESCN_AXl4.roa (raw, json)
Hash identifier: 1BfWWL4QrKp/NQq2OqoYcm1MGusX0U07r5d1XyDCavc=
Subject key identifier: AA:EA:3B:BA:6E:F6:2E:82:F0:98:19:7E:E5:E1:12:08:DF:C0:5E:5E
Certificate issuer: /CN=aa308f9956941fa38dbe8ce8bd2ca975d11b162f
Certificate serial: 0188DD3B80260593EBEA8B5086504242831E
Authority key identifier: AA:30:8F:99:56:94:1F:A3:8D:BE:8C:E8:BD:2C:A9:75:D1:1B:16:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjCPmVaUH6ONvozovSypddEbFi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/quo7um72LoLwmBl-5eESCN_AXl4.roa
Signing time: Wed 21 Jun 2023 09:14:04 +0000
ROA not before: Wed 21 Jun 2023 09:14:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39405
IP address blocks: 85.208.216.0/23 maxlen: 24
85.208.218.0/23 maxlen: 24
85.208.216.0/22 maxlen: 23
2a09:8c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:3b:80:26:05:93:eb:ea:8b:50:86:50:42:42:83:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa308f9956941fa38dbe8ce8bd2ca975d11b162f
Validity
Not Before: Jun 21 09:14:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaea3bba6ef62e82f098197ee5e11208dfc05e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:0f:9f:e8:ad:c6:d7:42:1d:4d:84:c0:cd:
e6:50:64:83:f2:3c:90:8f:c6:25:10:b4:9c:44:57:
a8:f1:e1:bd:2c:63:9d:d4:57:10:23:6e:7b:95:82:
8e:9b:b7:dd:12:32:e9:75:c3:15:6a:83:ad:f3:a4:
03:d2:42:e5:47:12:ec:23:46:ae:ff:3a:00:1e:b8:
4b:32:7c:05:d2:41:cc:59:25:57:d8:3f:68:d0:62:
41:de:4a:77:50:b6:24:90:24:e5:32:c8:5e:f1:f5:
10:f6:fa:85:91:84:b0:97:7d:c3:89:30:ce:83:5f:
c1:f5:50:da:7b:23:78:fc:ec:22:4f:de:64:b3:8b:
03:56:aa:55:cc:84:6c:5f:c0:3f:cf:ed:4c:df:1d:
74:f1:ab:ac:a5:a9:bc:16:a8:1f:c3:f6:4d:3a:70:
2e:88:a7:46:30:f7:ca:01:43:65:23:73:a2:e5:ad:
53:79:f1:30:51:11:92:71:be:af:89:42:3f:52:10:
16:4b:b8:79:6d:7d:66:6c:6c:7e:79:ef:d3:00:b1:
cd:29:af:c5:e8:77:ba:7e:a5:30:29:04:ef:ad:61:
e9:5c:74:3e:3c:20:68:32:1e:1b:d3:ab:7e:64:75:
8b:0f:e0:3e:a8:73:a7:49:1d:47:33:6d:fc:c2:79:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EA:3B:BA:6E:F6:2E:82:F0:98:19:7E:E5:E1:12:08:DF:C0:5E:5E
X509v3 Authority Key Identifier:
keyid:AA:30:8F:99:56:94:1F:A3:8D:BE:8C:E8:BD:2C:A9:75:D1:1B:16:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjCPmVaUH6ONvozovSypddEbFi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/quo7um72LoLwmBl-5eESCN_AXl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/47e507-6b79-4046-b839-2d4c38d68f5b/1/qjCPmVaUH6ONvozovSypddEbFi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.216.0/22
IPv6:
2a09:8c40::/29
Signature Algorithm: sha256WithRSAEncryption
5a:21:d4:10:8f:84:ea:c4:eb:5a:cb:85:81:33:1c:07:40:a1:
6d:c1:f7:f1:ec:90:ab:b4:a3:f5:a8:f9:1d:49:96:84:e5:68:
aa:b5:f1:26:44:c0:7d:04:ac:ff:80:44:14:58:0d:45:3e:02:
bc:ea:71:dd:ac:92:28:56:68:45:2a:11:68:15:58:27:eb:47:
60:72:cc:a8:90:02:dd:1a:1f:4d:44:23:85:10:d4:69:90:11:
34:0f:c8:b5:2c:d0:60:e0:87:59:d6:34:e1:87:bb:7e:35:e5:
e5:ec:6f:06:80:2f:34:d7:c5:77:93:db:80:fb:9c:3e:93:d1:
0c:d8:95:ab:de:5d:10:c0:eb:38:a4:b3:7d:9a:8f:0b:eb:b3:
90:4f:3a:f0:2b:26:93:1a:de:2b:6c:a5:25:99:33:cd:4d:c0:
67:3a:4c:de:74:96:fd:e5:f8:5b:38:c8:49:6d:27:92:00:c9:
26:35:9e:20:4f:c4:fc:28:0c:1a:e5:ca:9f:8a:38:fa:bf:c0:
28:b2:fa:05:87:91:70:06:de:7b:57:34:0f:83:08:15:9f:2c:
aa:e9:3f:78:75:7e:bd:4b:63:8c:dc:42:99:b3:79:97:bd:a5:
a9:96:0d:29:18:34:33:37:7e:f8:bb:8b:70:d0:02:4c:d1:be:
10:33:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net