Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/csqfATEhk_BWchEL8sYI1O4FWFw.roa
File: csqfATEhk_BWchEL8sYI1O4FWFw.roa (raw, json)
Hash identifier: pOPfaIiYAUqz2eyGB6UZ2n3g4BitiCPOO5t+6fmMBU0=
Subject key identifier: 72:CA:9F:01:31:21:93:F0:56:72:11:0B:F2:C6:08:D4:EE:05:58:5C
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 01948E0C6CF77E866D8E35E6EFFD4023ED9A
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/csqfATEhk_BWchEL8sYI1O4FWFw.roa
Signing time: Wed 22 Jan 2025 12:46:06 +0000
ROA not before: Wed 22 Jan 2025 12:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35263
IP address blocks: 86.109.64.0/19 maxlen: 19
86.109.80.0/21 maxlen: 21
2a00:1b90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:0c:6c:f7:7e:86:6d:8e:35:e6:ef:fd:40:23:ed:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Jan 22 12:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72ca9f01312193f05672110bf2c608d4ee05585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:0f:52:dd:6e:6c:6a:c0:5a:54:6a:2e:44:
a0:0f:8c:61:6e:c5:33:bb:b9:2e:16:1b:20:64:b0:
60:e1:e6:69:7b:a7:3a:21:f8:94:a1:eb:20:13:af:
9b:28:ca:54:cc:ca:a0:eb:c9:79:63:57:fa:8f:26:
ab:36:19:b3:00:2d:55:9a:47:99:11:84:ca:8e:34:
0f:f3:ee:11:9b:cb:b9:dd:eb:a1:ad:4b:1d:6c:2b:
76:09:03:71:b8:b5:8b:93:de:93:cf:06:6e:0a:a5:
f1:c5:d3:48:cc:67:81:ab:72:61:4a:03:2e:7e:69:
33:09:9c:8d:1f:72:9b:6b:43:75:36:60:6d:3a:4b:
a7:67:c7:bc:08:d6:f2:49:f3:4a:cf:42:48:c6:98:
d1:19:53:1c:d3:bb:e9:c2:25:9c:0b:e5:b4:75:b4:
fd:02:fe:46:9c:d0:fc:07:f0:58:2a:99:cb:43:4b:
17:8c:22:e4:77:8a:a7:4e:ea:87:f9:8a:10:9a:69:
25:d6:b9:db:81:f9:8c:ab:17:79:78:b7:07:c1:c9:
69:9e:2a:66:08:2b:c0:9b:c6:64:0c:20:9c:e1:7c:
ee:fa:22:18:02:74:7d:21:a3:e4:82:1a:ab:3d:45:
30:2e:bb:a3:45:49:e8:56:56:df:10:b8:85:4a:fc:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:9F:01:31:21:93:F0:56:72:11:0B:F2:C6:08:D4:EE:05:58:5C
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/csqfATEhk_BWchEL8sYI1O4FWFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.64.0/19
IPv6:
2a00:1b90::/32
Signature Algorithm: sha256WithRSAEncryption
24:30:af:b3:72:3e:a2:e2:01:46:aa:53:72:65:49:a7:be:8b:
25:a3:58:6d:5f:9c:a2:85:f0:b3:2a:0a:8b:63:8f:f7:ac:4d:
7f:fd:98:2a:73:25:86:75:d5:ba:4f:c9:a4:e2:65:ad:8d:3d:
bf:aa:aa:a4:6d:10:93:50:80:28:36:37:42:17:26:e9:51:f2:
58:65:d1:6a:6c:69:5e:7d:ad:30:c6:8f:7a:ee:80:69:69:96:
a6:9d:5a:7e:65:50:5e:95:5a:f8:79:f9:8a:ea:45:ba:c9:e6:
aa:85:25:ec:ba:9a:63:0f:ae:9e:70:f6:05:7a:ed:01:43:78:
8b:ef:b1:9c:b2:66:30:dc:3b:da:01:30:f3:94:69:05:44:64:
0b:bc:d3:53:32:04:ce:d9:ef:78:2f:e6:36:c4:f3:31:5b:10:
d4:2d:0d:72:64:0f:1c:99:29:65:94:8d:b6:6c:66:ea:39:14:
34:7c:36:ea:a5:64:31:42:ac:27:d4:01:0b:0b:19:5a:21:d5:
c4:cb:82:12:4c:5a:b5:2f:38:d3:db:95:24:b4:d8:46:e9:fd:
09:a8:a7:e5:4d:bb:58:17:b9:3f:e0:bb:1d:0f:5c:ae:fc:09:
df:5e:92:3f:e1:9c:6e:1b:5f:ee:ef:a3:4c:6d:65:6a:b5:d4:
22:7d:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:49:08 2025 by rpki-client on console.sobornost.net