Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/bqBZGSGflhGFrLZnDz2ndU5h03E.roa
File: bqBZGSGflhGFrLZnDz2ndU5h03E.roa (raw, json)
Hash identifier: qJgKHqjyRb9wMmWMWrb8Ij2xfJ2rN5CdIaUQYVbznf4=
Subject key identifier: 6E:A0:59:19:21:9F:96:11:85:AC:B6:67:0F:3D:A7:75:4E:61:D3:71
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 018CC5DC82D729DBE090D9D51293608D7997
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/bqBZGSGflhGFrLZnDz2ndU5h03E.roa
Signing time: Mon 01 Jan 2024 16:30:12 +0000
ROA not before: Mon 01 Jan 2024 16:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12591
IP address blocks: 193.178.152.0/24 maxlen: 24
193.178.152.0/23 maxlen: 23
193.178.153.0/24 maxlen: 24
2001:67c:2154::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:82:d7:29:db:e0:90:d9:d5:12:93:60:8d:79:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Jan 1 16:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ea05919219f961185acb6670f3da7754e61d371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:fe:41:44:91:fc:21:c1:74:18:0c:ea:f8:
e2:f2:e5:bd:d1:a8:0b:76:98:d6:a2:b1:72:4c:23:
28:f5:9a:6e:dd:42:38:39:54:64:a8:96:37:a3:57:
8b:9d:08:38:27:b0:b0:ed:4b:08:93:c9:fd:92:88:
45:71:9b:a9:85:d6:64:30:27:25:93:2a:2b:dd:dd:
f5:56:ce:80:70:7e:22:c2:0a:cf:be:d4:6b:1c:b6:
e5:a0:8f:d1:b6:a3:6a:3f:38:ba:bc:17:92:c8:69:
81:12:50:b7:e8:b7:6e:f0:61:e4:0f:86:ad:73:b6:
ea:d4:17:0f:bd:28:18:37:e7:18:d9:0a:81:05:ee:
90:dc:a2:8d:a7:21:23:35:b8:7e:4c:41:44:79:04:
88:b8:bf:62:36:60:4b:e8:f8:0c:98:f3:fb:e6:56:
fa:00:0b:b3:24:33:0e:b9:3a:ca:be:9c:6d:8d:9a:
21:87:55:1a:19:cc:80:9d:85:46:39:d5:83:70:25:
1e:9e:79:36:60:f1:b1:6b:b1:25:a0:6d:70:8f:f3:
5a:80:fb:78:11:1c:6b:2a:d6:08:fb:bd:a3:21:c8:
27:84:09:32:af:a8:ba:43:63:f6:ad:c0:82:3a:a9:
5d:6f:32:bd:7e:de:d8:77:e8:b9:3c:71:94:31:c7:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A0:59:19:21:9F:96:11:85:AC:B6:67:0F:3D:A7:75:4E:61:D3:71
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/bqBZGSGflhGFrLZnDz2ndU5h03E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.152.0/23
IPv6:
2001:67c:2154::/48
Signature Algorithm: sha256WithRSAEncryption
89:aa:6b:2e:90:97:11:b5:4d:79:41:89:70:3f:c5:4b:4d:42:
4a:43:ea:9a:fa:2e:51:39:15:df:4d:ea:53:ea:68:db:f2:6f:
3c:e5:02:02:2e:f6:c4:d0:3a:07:e4:6e:fd:88:fb:df:3b:f2:
f3:3b:a9:9e:8b:68:34:a3:be:19:b7:98:56:89:cc:92:07:6f:
58:04:04:50:9d:59:fc:9c:17:b8:07:82:39:40:10:e5:91:06:
ab:7d:4f:4b:11:6b:2d:61:f0:4b:bb:b2:27:d5:ea:cb:2e:2a:
f4:e0:67:69:ed:31:b1:2c:7b:92:e6:e1:f3:ae:b5:50:2c:5e:
3f:85:b8:51:18:92:83:d8:e3:a2:3d:4a:f0:26:4a:74:5b:d8:
8a:d1:90:5f:7c:e0:44:64:97:7a:68:56:d6:01:66:65:8c:b1:
22:98:ad:47:81:c4:78:c7:14:33:ce:27:f0:ba:fe:3f:12:96:
7b:2b:45:b4:2a:23:d6:69:38:38:f3:e7:73:01:96:fe:b6:90:
73:31:d4:3a:21:5a:c2:f1:a7:9a:64:e1:d1:6f:05:7e:96:f4:
07:51:65:09:d0:fe:4f:bb:88:be:79:ef:fe:ea:18:97:e6:83:
e4:07:6b:f7:de:6b:3d:83:df:3d:de:b1:9e:4e:2e:4a:c5:64:
7d:2c:9b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:35 2024 by rpki-client on console.sobornost.net