Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/qdba9XlB-cPjFIeLPK89fH4z7YE.roa
File: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (raw, json)
Hash identifier: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=
Subject key identifier: A9:D6:DA:F5:79:41:F9:C3:E3:14:87:8B:3C:AF:3D:7C:7E:33:ED:81
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 01942220358C3B0AADB595D6805E6D55D750
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/qdba9XlB-cPjFIeLPK89fH4z7YE.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41489
IP address blocks: 81.187.42.0/24 maxlen: 24
81.187.96.0/20 maxlen: 20
81.187.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:35:8c:3b:0a:ad:b5:95:d6:80:5e:6d:55:d7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9d6daf57941f9c3e314878b3caf3d7c7e33ed81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:4c:48:f9:d3:50:7e:ca:a7:40:98:6f:8d:
e1:d0:30:d5:c9:fc:0f:7e:ad:77:d3:4e:af:fa:e2:
54:98:ed:e1:f8:6f:7d:b8:a9:5a:04:78:ba:54:8f:
f6:64:09:a0:f7:f4:a2:42:0a:75:86:8f:ff:b0:4e:
81:17:09:14:de:6b:0b:29:ee:be:b5:70:e7:f3:ba:
4b:7b:94:b5:0f:28:3c:a6:84:24:6e:fe:94:14:40:
53:5e:41:b9:47:55:b5:d3:76:96:1f:1b:80:bc:ee:
ab:f5:3c:c2:de:d1:3d:16:19:53:89:11:ad:50:90:
52:19:fd:77:70:31:7b:20:72:66:bd:74:7a:5c:61:
cc:2b:7d:c3:8b:07:da:71:02:4a:07:7f:34:42:50:
23:9c:08:29:11:f8:94:73:77:41:25:85:7d:50:36:
54:d6:42:f3:4f:9b:02:48:d8:bd:0f:70:24:54:de:
e1:a0:db:a4:d5:17:ad:bd:bf:36:5d:0e:a4:a5:2a:
94:85:c1:07:c4:f9:c9:b5:f6:da:66:d1:0d:a0:b8:
e8:ad:69:3c:fe:33:72:a4:a2:ba:4a:b0:56:4f:d9:
3a:a2:47:f4:33:0c:77:e4:06:d1:65:da:25:8d:5e:
32:d0:b8:89:02:cd:06:cf:b1:ef:f7:60:08:27:3d:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D6:DA:F5:79:41:F9:C3:E3:14:87:8B:3C:AF:3D:7C:7E:33:ED:81
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/qdba9XlB-cPjFIeLPK89fH4z7YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.187.42.0/24
81.187.96.0/20
81.187.128.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c1:80:20:13:f6:0c:7f:a1:79:08:e7:dd:de:02:e1:16:63:
d6:5a:15:8a:a0:e6:13:3b:d0:67:a3:64:31:b3:60:97:59:55:
1f:24:ad:7a:d6:21:18:34:46:be:d9:7a:84:10:e2:c3:f7:40:
d0:c6:ed:e1:e8:8d:1c:70:27:cf:f0:3d:e6:b4:07:a3:ef:00:
1e:3b:5d:bb:d7:f5:3b:48:73:bc:17:e4:d6:d0:d5:d0:52:60:
37:2c:db:e5:de:ab:ab:96:6f:91:5f:a1:e9:a6:0a:06:b3:64:
d3:0c:2b:fe:dd:2f:a9:73:41:53:34:cd:8a:07:d1:fa:de:76:
f7:59:fe:06:f6:d9:d5:54:dc:c2:a9:1b:bf:7d:69:a2:87:46:
2c:c0:c9:3e:5f:51:db:44:11:d1:26:2a:c7:95:be:a4:25:b6:
28:8e:e6:ea:ba:1b:94:f1:9b:6e:5a:ea:51:e7:2e:c9:b8:44:
06:a4:c3:34:ca:07:96:76:d2:56:f6:20:33:c3:7c:5d:33:48:
fa:b2:8a:56:1e:3d:9c:ad:d4:08:6b:89:8a:7d:43:b5:b9:3d:
b1:0a:b7:cc:b4:22:3b:1f:fa:c2:c3:cb:19:61:69:c7:a4:f9:
2b:e7:a6:11:eb:77:6a:77:ae:46:5d:e5:9d:42:f3:df:a2:05:
d4:dd:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net