Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/QHLCgk4OIA3HKocxUS-EXSCE4FI.roa
File: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (raw, json)
Hash identifier: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=
Subject key identifier: 40:72:C2:82:4E:0E:20:0D:C7:2A:87:31:51:2F:84:5D:20:84:E0:52
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 01942068277C75AF22D7245B415A3E55D894
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/QHLCgk4OIA3HKocxUS-EXSCE4FI.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210570
IP address blocks: 176.126.127.0/24 maxlen: 24
2a12:7c6:abc::/48 maxlen: 48
2a12:7c6:affe::/48 maxlen: 48
2a12:7c6:c001::/48 maxlen: 48
2a12:7c6:d001::/48 maxlen: 48
2a12:7c6:e001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:27:7c:75:af:22:d7:24:5b:41:5a:3e:55:d8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4072c2824e0e200dc72a8731512f845d2084e052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:f1:d7:db:a1:a9:f8:41:6d:9a:7b:37:40:
d2:62:c5:e3:c3:35:e9:14:40:c9:05:71:ac:a8:64:
49:59:fe:12:01:b6:02:33:07:d4:2f:f7:62:d0:e4:
43:a3:a3:c7:92:8e:a8:66:54:57:6d:d0:66:2e:b7:
a6:07:8f:12:84:bf:2c:f4:d7:9e:4a:99:8d:b5:53:
0c:26:d0:3b:9b:bd:3d:02:ae:d7:07:a3:1e:de:05:
52:59:99:f0:c3:16:2f:0f:a9:96:a6:7f:61:57:fa:
e1:eb:cd:46:03:d5:5e:52:5e:f2:ff:ed:62:c8:b5:
0f:87:d0:05:76:a7:20:11:3a:e1:a4:cd:ba:58:97:
1e:c7:26:4b:47:92:3c:bb:88:c3:30:57:d1:eb:4e:
cc:96:a5:de:c6:44:10:55:16:eb:7b:a1:dc:15:76:
39:47:bb:ae:1b:a8:22:a2:2d:06:d6:69:2b:e7:95:
da:9e:51:4e:71:e9:33:48:4b:32:97:65:69:36:79:
bb:7a:59:09:db:9a:b9:86:95:e0:1a:12:7e:e9:12:
19:40:69:d3:4b:1b:47:57:35:8c:a1:9c:20:ae:85:
96:4a:c0:c6:77:a8:2d:e4:cc:67:9d:27:25:8e:18:
f5:4d:73:7f:7f:eb:2e:06:4a:ab:e4:d1:2e:7b:6d:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:72:C2:82:4E:0E:20:0D:C7:2A:87:31:51:2F:84:5D:20:84:E0:52
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/QHLCgk4OIA3HKocxUS-EXSCE4FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
IPv6:
2a12:7c6:abc::/48
2a12:7c6:affe::/48
2a12:7c6:c001::/48
2a12:7c6:d001::/48
2a12:7c6:e001::/48
Signature Algorithm: sha256WithRSAEncryption
17:e9:36:c2:35:6e:9e:70:42:30:8a:d1:02:b1:0f:f6:62:8a:
2e:fc:44:9d:1e:3a:ff:73:c7:af:0a:e8:60:7f:a3:b1:0d:0a:
d2:8c:b3:f0:03:0c:e7:ff:42:65:16:27:69:db:cd:dd:59:83:
a1:76:8c:26:c7:c6:7f:89:b8:ff:8a:d1:9a:c7:99:23:da:29:
28:e2:6f:79:af:81:dd:5e:cb:d3:32:4c:02:1a:e5:0c:44:57:
6d:d1:e5:db:28:b9:78:9a:12:15:11:0c:1b:06:b9:65:68:80:
d5:20:57:27:7f:4d:33:e9:54:eb:4e:97:92:bf:23:4e:05:e0:
45:09:92:f5:7e:34:81:d4:f3:84:64:16:77:1b:ef:9d:c0:ba:
63:a7:a4:bf:61:05:4c:2b:c5:9c:a3:e9:56:43:8d:f7:c0:f9:
a1:75:05:ec:5e:c3:38:26:af:8f:96:75:50:ef:55:92:4a:b4:
a6:bd:f8:dc:3e:f7:a3:db:79:dc:ca:e5:c9:11:d7:be:77:6a:
2e:67:17:aa:b6:77:be:7c:10:43:21:a3:80:0f:45:fd:3d:e7:
e7:5a:c0:2d:db:c1:60:a8:31:dc:5e:c9:bd:1a:23:cf:32:a1:
29:2d:7a:76:77:7c:38:7f:4a:80:9f:d8:51:06:d5:9a:48:e6:
fa:07:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net