Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/urrVq_kKwwqtzGPHF_bWQudwmAo.roa
File: urrVq_kKwwqtzGPHF_bWQudwmAo.roa (raw, json)
Hash identifier: BAyPxS0OLy44D+UIDRjc/KzqIEDRi29uRV4UJfqErdY=
Subject key identifier: BA:BA:D5:AB:F9:0A:C3:0A:AD:CC:63:C7:17:F6:D6:42:E7:70:98:0A
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 018CC349219E3E7B794078BAC74743D4435E
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/urrVq_kKwwqtzGPHF_bWQudwmAo.roa
Signing time: Mon 01 Jan 2024 04:29:58 +0000
ROA not before: Mon 01 Jan 2024 04:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216451
IP address blocks: 37.230.40.0/21 maxlen: 21
89.107.160.0/21 maxlen: 21
185.188.200.0/22 maxlen: 22
2a0b:2400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:21:9e:3e:7b:79:40:78:ba:c7:47:43:d4:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Jan 1 04:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=babad5abf90ac30aadcc63c717f6d642e770980a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4e:d5:39:a8:96:22:de:0f:30:d8:04:2f:ef:
5a:61:0d:f0:7a:6f:52:c2:21:de:93:64:f1:71:a9:
18:47:0f:c3:f4:6c:f7:e2:2d:1b:03:21:09:b0:d5:
66:9f:e5:92:e0:f1:c7:ae:4f:84:de:7c:26:af:b3:
bf:d7:d2:39:38:c1:c4:ba:cd:da:a1:ed:40:08:5e:
2c:ca:b8:0c:e2:b6:4a:00:77:05:65:01:a1:a6:22:
ac:30:fa:ab:1f:d3:b6:7b:af:56:d7:12:5f:d0:d5:
8a:29:fd:7c:94:6d:45:12:b2:63:e6:5b:91:ac:33:
6c:d8:b0:23:62:40:5d:57:58:c3:7c:7f:b8:5e:bd:
19:94:6b:54:06:ca:a0:bc:1d:72:b2:95:80:fa:90:
4f:25:22:be:60:6e:46:fd:6a:7b:df:03:79:25:6c:
8f:81:20:9c:bb:95:94:8c:8f:59:62:f9:51:ae:95:
ca:ba:9b:1a:83:72:93:c2:05:d9:6c:96:c5:cb:eb:
b4:97:4c:e8:8d:e5:6e:a6:eb:93:a5:4d:7b:5b:7f:
bc:ca:da:10:65:5e:5a:04:2f:28:5a:7e:bc:46:0f:
f3:59:5c:f3:cb:ea:38:bc:89:4f:68:bf:f8:10:88:
b5:44:9d:2b:57:ea:3b:4f:3c:26:03:a1:d8:20:0e:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BA:D5:AB:F9:0A:C3:0A:AD:CC:63:C7:17:F6:D6:42:E7:70:98:0A
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/urrVq_kKwwqtzGPHF_bWQudwmAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.40.0/21
89.107.160.0/21
185.188.200.0/22
IPv6:
2a0b:2400::/32
Signature Algorithm: sha256WithRSAEncryption
0d:50:ac:ad:42:d5:d7:0e:d3:07:04:ba:7a:d8:4f:05:01:0f:
81:65:df:0b:c3:9d:82:dd:e3:b8:b7:d6:17:b8:3a:44:49:78:
d2:89:c2:2e:4a:05:75:1b:87:55:58:cf:b8:9c:91:2e:be:67:
37:0c:05:7f:8b:3c:f7:7a:ca:fe:0c:dd:a9:5b:fc:d5:a3:54:
9a:87:a4:2d:76:42:65:90:94:d2:31:e4:51:a7:d1:44:8a:2b:
0d:61:27:ec:e0:80:2f:11:2b:04:63:72:f7:7a:9c:e1:52:55:
fb:c6:b7:5e:1c:0f:d8:91:63:bb:56:26:60:8b:19:97:42:32:
73:7f:d6:f0:3a:af:63:66:db:5e:5e:bd:89:cc:28:e8:03:9b:
b9:9e:4f:75:99:1a:0c:12:26:bd:e4:f4:00:3d:a6:a9:2a:9c:
0e:5a:81:0d:8d:a1:45:a7:25:ab:eb:1b:6a:8c:88:0c:ce:a8:
11:9b:9d:10:aa:cd:e2:92:6e:16:18:74:b8:d7:5e:54:f7:a2:
b7:53:70:6a:ff:f0:9d:f8:fc:a5:a1:d8:19:b3:0f:d2:89:b7:
dc:58:fe:2e:fa:9f:e0:0b:8e:31:fd:14:f1:9b:28:c0:87:ec:
7f:69:a8:f3:90:f2:4b:be:1a:4a:1d:ab:43:23:fe:7d:6f:ce:
ee:2f:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:17 2024 by rpki-client on console.sobornost.net