Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/qwqRrA4IWKhUIMAdLi_EPwXmh38.roa
File: qwqRrA4IWKhUIMAdLi_EPwXmh38.roa (raw, json)
Hash identifier: Uk5SIFR+yv7lV6hPW4jFmgLg3jcPSwJTimNZEKXJMV4=
Subject key identifier: AB:0A:91:AC:0E:08:58:A8:54:20:C0:1D:2E:2F:C4:3F:05:E6:87:7F
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 0191C6634EA5C4FD535ABB17CB173357D8A7
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/qwqRrA4IWKhUIMAdLi_EPwXmh38.roa
Signing time: Fri 06 Sep 2024 08:11:22 +0000
ROA not before: Fri 06 Sep 2024 08:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60266
IP address blocks: 185.33.157.0/24 maxlen: 24
185.33.159.0/24 maxlen: 24
2a00:cb20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:63:4e:a5:c4:fd:53:5a:bb:17:cb:17:33:57:d8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Sep 6 08:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab0a91ac0e0858a85420c01d2e2fc43f05e6877f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:8d:76:a8:77:66:90:d5:38:5a:8a:68:83:
ad:6e:9f:74:04:f3:2d:bc:7c:40:0a:07:bf:fa:d7:
2c:30:ad:40:6d:44:e4:c6:08:f9:40:44:44:85:9a:
d3:bb:79:cb:ab:29:e8:95:47:2d:0d:47:09:f2:cb:
ef:0f:5b:a0:62:61:2c:89:2c:a6:7b:0d:66:33:86:
f3:c9:7e:19:43:7d:0f:0d:26:7b:ce:7a:53:a1:fc:
b7:20:a2:5a:ab:19:07:36:17:26:a6:ff:91:57:0a:
f3:b1:72:f4:54:a5:e3:ee:3a:bc:00:12:9a:0e:48:
ee:8d:ec:5b:61:22:55:4d:8c:71:7b:d3:bf:c3:90:
cb:2b:59:5b:90:d9:f0:38:e4:48:52:e0:2a:59:c8:
ec:af:cd:20:42:64:d5:27:82:d4:d3:7c:81:4f:29:
3e:92:8d:91:df:ef:34:5a:21:02:21:d5:f0:3e:28:
53:c0:10:e2:a2:33:9c:f8:6c:1e:b8:85:3e:63:5a:
11:c8:60:b1:fe:00:64:fb:06:01:2c:64:04:92:2a:
87:39:91:3a:31:3c:2f:8d:49:18:0b:41:10:3f:0d:
8d:ff:5b:70:f1:d8:0c:80:d9:3f:4e:35:f8:68:e6:
cd:5b:68:44:83:2a:cb:a2:c9:98:62:36:70:4b:72:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:91:AC:0E:08:58:A8:54:20:C0:1D:2E:2F:C4:3F:05:E6:87:7F
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/qwqRrA4IWKhUIMAdLi_EPwXmh38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.157.0/24
185.33.159.0/24
IPv6:
2a00:cb20::/32
Signature Algorithm: sha256WithRSAEncryption
50:db:45:ac:97:b0:80:d8:7c:dc:01:7c:bf:66:c2:16:cf:7e:
04:ec:28:39:8c:a4:fe:25:55:7e:aa:e8:c2:8a:d9:09:8b:87:
9a:a0:97:b9:8e:b2:5e:09:87:72:61:a2:32:65:2b:60:51:7f:
06:f3:7c:5e:73:36:1e:8b:d0:75:1b:f7:77:cf:9d:7a:dd:30:
e1:8f:6e:51:49:8b:8e:fe:b4:9d:46:8e:9c:ae:4a:2d:10:02:
d1:04:31:97:d8:95:d5:fe:f0:72:13:b5:65:58:92:a7:2b:2f:
46:4a:e7:01:1d:98:f5:e7:e5:6b:7a:a8:bd:b0:1c:5a:d3:64:
8f:06:4b:fb:fe:a3:9c:9b:4c:e5:df:31:4a:be:06:aa:dd:18:
80:ed:ac:e5:e3:9c:fa:05:ef:92:a4:38:b5:61:2a:0c:55:88:
53:db:eb:1d:e1:2f:05:c4:22:d4:90:5f:7e:a1:28:b2:c5:d4:
c8:8a:6f:ca:4d:0d:a2:c9:de:43:28:a1:e6:17:95:ee:97:76:
9f:f2:5b:1f:c0:09:2e:53:e1:46:6b:d4:a7:d1:bb:5c:fc:b1:
5e:fd:c0:cb:63:37:63:13:02:58:b2:03:c7:6d:4a:4a:02:ea:
4f:2d:dd:7f:4a:8d:4f:a0:78:98:f5:08:de:d1:cf:bd:c6:e2:
6f:ad:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net