Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/QdY4ovk6NV6tiPxiCMKc3aBtYTM.roa
File: QdY4ovk6NV6tiPxiCMKc3aBtYTM.roa (raw, json)
Hash identifier: 0lNOpf952ioYcAZG6Xy+d+n+CWcFfadnsVpyLlU45EQ=
Subject key identifier: 41:D6:38:A2:F9:3A:35:5E:AD:88:FC:62:08:C2:9C:DD:A0:6D:61:33
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 01936E9A0D73EEE282E2A722BE38B13D1DDD
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/QdY4ovk6NV6tiPxiCMKc3aBtYTM.roa
Signing time: Wed 27 Nov 2024 17:10:09 +0000
ROA not before: Wed 27 Nov 2024 17:10:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201754
IP address blocks: 91.198.56.0/24 maxlen: 24
193.42.218.0/24 maxlen: 24
2001:678:fec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:9a:0d:73:ee:e2:82:e2:a7:22:be:38:b1:3d:1d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Nov 27 17:10:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41d638a2f93a355ead88fc6208c29cdda06d6133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c6:ab:0b:0d:d9:d4:57:c8:8d:65:93:a6:16:
58:62:7d:88:de:00:83:18:50:f7:83:88:9a:f3:e1:
4f:2c:ca:58:6a:6c:64:dd:1e:56:0a:b8:81:3b:c7:
d7:ab:92:bb:8c:3b:44:8f:3e:1c:59:40:13:b4:32:
21:a6:11:49:c9:1e:57:18:7a:2e:85:d2:29:af:64:
c3:a0:4a:2b:17:d8:cc:64:6c:a9:54:f0:29:29:73:
1b:1f:f9:89:6f:e8:3c:e2:95:ad:8d:fe:50:47:da:
51:c9:ec:42:4e:d6:99:2e:94:6f:44:b6:b4:5a:14:
37:c9:12:b6:ad:a2:80:eb:6e:67:6b:57:a7:cb:81:
bc:28:87:16:ce:53:66:3c:a6:6c:6b:ac:f2:98:80:
54:00:b0:bf:c9:11:89:91:0b:ad:a0:6f:0e:85:d3:
36:91:37:7b:91:0e:69:01:1b:7a:8d:e1:75:7c:bd:
78:ea:b0:2b:78:98:72:89:07:74:ab:79:3e:5b:81:
c7:1b:e8:a1:78:1b:72:c7:3c:10:d9:31:a6:03:6c:
81:c1:c0:ce:1e:a3:91:70:70:9f:3a:10:53:60:d4:
33:8f:49:68:7a:be:b3:96:ac:b9:7a:ea:2d:7f:7d:
f5:5b:91:01:37:c7:85:d7:52:05:1e:37:fb:0d:91:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D6:38:A2:F9:3A:35:5E:AD:88:FC:62:08:C2:9C:DD:A0:6D:61:33
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/QdY4ovk6NV6tiPxiCMKc3aBtYTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.56.0/24
193.42.218.0/24
IPv6:
2001:678:fec::/48
Signature Algorithm: sha256WithRSAEncryption
56:eb:4b:7b:d0:fb:67:7a:3a:97:08:d2:e0:30:b3:99:2a:ec:
02:c2:d2:e9:d5:b7:61:92:fc:97:ae:41:db:db:59:ee:15:a6:
e0:47:80:b0:96:b4:4f:67:fe:0a:f2:71:ef:f1:1c:82:9c:7b:
06:6b:be:49:85:eb:f0:51:6e:7f:a0:0d:5a:38:68:0a:36:79:
5c:9c:17:3d:4d:71:83:a7:8a:2c:78:02:33:8c:e1:7f:db:3d:
0e:58:59:f8:05:26:77:74:d5:73:11:21:35:b6:bc:d3:fa:e5:
c6:00:9a:3f:b3:e1:e0:0f:ba:51:1b:2b:9f:ac:b6:dd:69:58:
3b:27:71:8f:2f:7c:d0:e9:d3:c6:87:99:e8:e3:c1:8e:23:9d:
da:d1:e8:b7:38:af:4e:93:f9:78:30:24:91:ce:fd:1a:aa:4a:
d9:a6:05:42:1b:8a:d6:68:22:82:5a:2d:9f:33:eb:71:3e:c2:
02:59:e9:5b:74:da:27:1c:d2:95:e7:e0:e0:fe:1b:07:20:86:
ac:e0:11:57:7a:fa:2f:cc:9f:93:77:bd:91:3c:65:dd:30:e6:
34:9c:c5:a0:86:26:7d:be:47:bd:be:c2:e0:12:cf:fe:69:15:
70:67:4f:2a:a7:0b:0f:69:2f:f8:d4:84:eb:2c:68:ab:a9:e4:
b0:39:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:36 2024 by rpki-client on console.sobornost.net