Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/qxBXSO0S8sDd8RwIEIxnuLho9RM.roa
File: qxBXSO0S8sDd8RwIEIxnuLho9RM.roa (raw, json)
Hash identifier: 2Lh0Ww/Cz2t/jZ7nHzi0MakiPSU13Sc2QvWmZA9mTsE=
Subject key identifier: AB:10:57:48:ED:12:F2:C0:DD:F1:1C:08:10:8C:67:B8:B8:68:F5:13
Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial: 01901083B025B9EE21E326C27C9702FA7FAD
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/qxBXSO0S8sDd8RwIEIxnuLho9RM.roa
Signing time: Thu 13 Jun 2024 07:33:04 +0000
ROA not before: Thu 13 Jun 2024 07:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29545
IP address blocks: 86.111.32.0/21 maxlen: 21
86.111.36.0/24 maxlen: 24
86.111.37.0/24 maxlen: 24
86.111.38.0/24 maxlen: 24
86.111.39.0/24 maxlen: 24
86.111.40.0/22 maxlen: 22
86.111.40.0/24 maxlen: 24
86.111.41.0/24 maxlen: 24
86.111.50.0/23 maxlen: 23
86.111.50.0/24 maxlen: 24
213.163.229.0/24 maxlen: 24
213.163.232.0/24 maxlen: 24
213.163.233.0/24 maxlen: 24
213.163.236.0/23 maxlen: 23
213.163.238.0/24 maxlen: 24
213.163.242.0/23 maxlen: 23
213.163.244.0/23 maxlen: 23
213.163.249.0/24 maxlen: 24
213.163.254.0/24 maxlen: 24
2a00:1f88::/32 maxlen: 32
2a00:1f88:a402::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:83:b0:25:b9:ee:21:e3:26:c2:7c:97:02:fa:7f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Validity
Not Before: Jun 13 07:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab105748ed12f2c0ddf11c08108c67b8b868f513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:a4:e7:db:93:4d:d8:b8:6a:f8:d5:89:3c:
13:d4:23:a1:26:7c:a2:1b:3a:5e:e9:96:f8:a7:b4:
77:4a:51:c6:d2:8a:ba:4e:28:25:9c:8f:e1:5d:fa:
e9:a6:22:6c:51:f1:24:65:70:51:11:62:b9:34:7c:
ac:ab:f3:44:47:3a:23:0a:47:cd:4f:f8:5a:86:ae:
fb:1f:6a:39:c3:95:e1:24:70:b5:f6:01:75:06:e8:
5c:38:e5:e5:9b:78:39:46:f0:37:a3:d0:c3:4f:d2:
89:5a:a4:f3:3b:aa:2c:d1:be:4e:aa:bb:9f:cd:0c:
63:db:84:0e:31:ac:9e:28:6f:dd:5a:fe:b5:a3:d7:
0f:05:96:73:52:63:7c:ef:94:73:3b:01:81:da:47:
77:4d:a1:fa:7a:f5:dd:00:f7:a4:ec:82:87:3a:b9:
44:28:dc:31:cd:c9:85:bb:ba:63:03:fd:d9:40:1f:
bf:1e:77:6e:bf:f2:3f:89:4f:b7:cc:64:81:6d:b1:
8c:be:eb:d4:8d:db:3d:de:49:a7:52:fb:17:bf:8c:
2f:b4:2c:26:e8:76:11:2e:e5:81:2d:e3:da:a6:70:
e8:84:66:61:68:78:14:0b:dd:b4:b3:a6:5a:4e:7f:
b4:bd:8c:b3:b7:a7:b9:db:8e:ba:9e:98:3d:e5:02:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:57:48:ED:12:F2:C0:DD:F1:1C:08:10:8C:67:B8:B8:68:F5:13
X509v3 Authority Key Identifier:
keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/qxBXSO0S8sDd8RwIEIxnuLho9RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.32.0-86.111.43.255
86.111.50.0/23
213.163.229.0/24
213.163.232.0/23
213.163.236.0-213.163.238.255
213.163.242.0-213.163.245.255
213.163.249.0/24
213.163.254.0/24
IPv6:
2a00:1f88::/32
Signature Algorithm: sha256WithRSAEncryption
13:79:9b:35:f6:06:ed:92:03:ad:57:f6:de:5f:48:95:a3:20:
96:ec:38:7e:84:00:83:b3:31:6f:53:85:e0:a1:e7:ba:3c:a3:
88:c2:15:2b:22:c1:31:02:fd:02:39:0c:7b:b3:0d:b6:bc:ff:
0a:97:07:ff:5f:df:01:c0:8e:f3:49:7e:ab:6d:60:02:4b:e2:
e5:e9:37:8f:28:5f:25:ef:1a:fd:73:70:d6:7d:70:33:ae:72:
57:4c:e6:2d:bc:d9:7c:df:6d:94:83:6f:68:f8:7f:03:77:bb:
74:4a:60:f2:33:2a:ef:22:42:31:ea:7b:07:22:67:8a:1f:f4:
14:6a:9b:c2:e2:e2:29:53:7b:25:46:bb:91:86:10:f9:bc:1c:
e5:e6:57:1a:ac:75:43:b4:b2:e9:f9:12:16:f8:2a:4c:c7:75:
6f:1b:98:02:ce:70:c3:5b:8c:cb:cb:fd:0a:17:cc:c0:39:07:
cb:19:c5:43:aa:f3:ef:f8:80:27:a4:90:8c:0d:7e:34:a9:4a:
c7:a2:e4:09:35:7f:80:e5:c4:4d:49:4e:e7:50:dd:4d:b7:4f:
55:8d:09:03:43:9c:27:cb:51:8a:ea:50:5a:08:43:61:e5:d5:
3f:8e:a8:85:cb:d2:9c:d9:8e:d9:6d:ad:e1:af:f5:5e:0f:96:
fc:83:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:49:37 2024 by rpki-client on console.sobornost.net