Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Qaxmaz4yDituToGKhFTyMojcc_Q.roa
File: Qaxmaz4yDituToGKhFTyMojcc_Q.roa (raw, json)
Hash identifier: 7tyg6scFo6EbUbeQv25JU3vRCIfnuCW/2VMKYP1vw4I=
Subject key identifier: 41:AC:66:6B:3E:32:0E:2B:6E:4E:81:8A:84:54:F2:32:88:DC:73:F4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01961ECA3C5631943F2487C0E536C117FD38
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Qaxmaz4yDituToGKhFTyMojcc_Q.roa
Signing time: Thu 10 Apr 2025 08:21:32 +0000
ROA not before: Thu 10 Apr 2025 08:21:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51659
IP address blocks: 193.124.2.0/24 maxlen: 24
194.87.68.0/23 maxlen: 23
194.87.70.0/24 maxlen: 24
194.87.106.0/24 maxlen: 24
194.87.196.0/23 maxlen: 23
195.58.48.0/23 maxlen: 23
195.133.5.0/24 maxlen: 24
195.133.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:ca:3c:56:31:94:3f:24:87:c0:e5:36:c1:17:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 10 08:21:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41ac666b3e320e2b6e4e818a8454f23288dc73f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:ce:78:6c:1a:c1:b5:ba:a8:69:d9:79:fd:
d2:6e:0e:8b:e7:b9:3a:db:6e:4b:a9:36:27:a0:4b:
3d:7c:c6:8a:85:09:2d:e5:03:17:14:18:e7:cb:36:
f3:5f:55:eb:2d:cf:88:e4:13:d2:6d:09:21:26:dc:
12:f3:79:0c:52:64:3f:36:2a:e5:e3:1a:8f:b6:d1:
2b:84:2c:5b:b4:ad:1c:55:85:2f:d6:07:b5:05:d6:
2d:78:e9:7d:cf:db:11:f7:17:cd:c5:34:ba:45:3a:
5b:82:c1:c6:d1:ba:14:c9:98:99:e1:11:d6:be:1c:
dd:f0:e7:04:6a:ff:af:6b:2c:8c:20:4d:df:9b:fc:
7f:88:43:25:ab:4b:f4:00:7c:f4:9d:8a:3b:b1:ff:
8b:95:85:a9:b6:e3:98:11:a5:a1:6b:68:7d:70:09:
4e:a7:4a:4c:f4:e8:25:88:58:6c:a4:86:fa:e7:b9:
63:7d:aa:57:74:21:9b:43:54:37:a3:7f:8d:81:1b:
a4:8d:98:39:a4:0e:ab:e7:21:a8:c6:a5:78:b7:ac:
ad:98:9e:02:a9:e8:ca:50:d7:72:44:cd:0e:57:1c:
75:b9:ff:d3:ce:11:d6:fb:94:f1:a6:8f:3b:77:dd:
68:6c:42:a6:91:1e:ad:66:34:96:30:c7:50:4d:e5:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AC:66:6B:3E:32:0E:2B:6E:4E:81:8A:84:54:F2:32:88:DC:73:F4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Qaxmaz4yDituToGKhFTyMojcc_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.2.0/24
194.87.68.0-194.87.70.255
194.87.106.0/24
194.87.196.0/23
195.58.48.0/23
195.133.5.0/24
195.133.23.0/24
Signature Algorithm: sha256WithRSAEncryption
34:06:af:67:67:1f:9d:79:ce:a1:e4:85:65:d8:1e:1c:48:17:
f3:26:ff:24:2a:18:0b:42:00:42:ae:0a:ea:f2:83:f5:4b:41:
7d:9b:64:b5:93:06:37:9c:6b:98:22:c8:38:0e:e5:54:86:e4:
d9:1a:46:a4:d5:89:62:c0:c4:31:b6:3d:4f:e8:a1:1d:7c:68:
ba:67:8e:a9:e3:91:16:d9:51:85:81:5a:74:63:99:68:77:e6:
6f:69:46:7d:40:16:c6:9a:8f:9b:49:5d:83:c5:05:17:93:5a:
de:fe:49:fd:22:78:e8:e9:bf:79:fb:b4:6a:49:61:88:0f:cc:
51:64:41:95:f4:30:ac:61:31:9e:5f:07:66:0e:a4:48:cc:8f:
e9:81:03:2c:c7:19:32:4d:28:d6:f8:02:20:32:12:ea:86:74:
13:5a:d2:c1:8b:47:97:7b:43:f7:20:2a:ba:f1:82:31:20:c1:
3d:f0:17:08:86:19:67:10:94:07:6e:69:ee:1c:b6:aa:8c:23:
aa:12:88:4f:bc:f9:d0:8d:cf:33:1e:ab:1e:94:23:38:25:6d:
b1:c1:d1:73:c6:d3:92:7c:a8:1d:f5:e4:cd:a3:b5:09:d1:42:
08:26:cf:8e:a7:3a:d4:84:47:fa:0c:22:ca:f3:72:d8:57:e2:
6a:be:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net