Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/Q39EicWKCAbcPFSCPOWxVuicNBs.roa
File: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (raw, json)
Hash identifier: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=
Subject key identifier: 43:7F:44:89:C5:8A:08:06:DC:3C:54:82:3C:E5:B1:56:E8:9C:34:1B
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 0194266B475CEA34F89D5AAFB9E9B2AB4ECD
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/Q39EicWKCAbcPFSCPOWxVuicNBs.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199833
IP address blocks: 81.177.186.0/24 maxlen: 24
81.177.254.0/23 maxlen: 23
2a03:aa00:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:47:5c:ea:34:f8:9d:5a:af:b9:e9:b2:ab:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=437f4489c58a0806dc3c54823ce5b156e89c341b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:b0:b1:48:a6:aa:3f:cd:60:e6:0e:0a:3d:
98:7b:e7:e9:61:5b:63:9b:bc:20:3f:73:2c:ba:58:
a4:06:5b:8b:86:00:ed:ec:9c:83:c9:da:45:09:71:
17:ed:e1:f3:09:57:48:df:4b:73:ab:8b:a4:5e:6c:
f7:18:c9:80:e0:df:ed:92:fa:4c:52:f8:71:a8:c9:
1d:8f:cd:4e:6d:78:f6:30:34:85:c0:de:74:c5:ef:
f9:e0:1c:cf:4b:d6:94:1d:23:b7:c4:ee:4c:9d:0b:
63:1f:31:33:32:11:e4:9c:32:f4:38:eb:5f:73:ca:
da:ff:18:a0:83:15:57:7f:93:13:21:5b:7d:7b:04:
e1:9d:93:b1:fe:4b:11:a5:60:e1:7a:9a:3a:d8:d6:
00:37:cc:86:da:4e:a6:91:74:d9:64:37:9b:a9:ae:
31:28:24:ef:5b:db:ac:1a:fc:30:62:2e:1f:ff:d8:
6d:4a:41:6a:8e:2e:e1:d8:fe:52:05:20:12:b4:f3:
d7:ed:52:ed:6b:d3:b7:b1:87:ba:90:98:c3:9a:af:
4c:44:18:67:33:6b:8e:30:21:07:b4:e7:4d:a4:4b:
fc:b0:49:2b:ee:ea:5b:a7:92:f1:67:f3:24:ea:ff:
51:2b:04:d9:10:41:51:a2:4c:ad:62:63:23:15:0b:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:44:89:C5:8A:08:06:DC:3C:54:82:3C:E5:B1:56:E8:9C:34:1B
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/Q39EicWKCAbcPFSCPOWxVuicNBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.186.0/24
81.177.254.0/23
IPv6:
2a03:aa00:1000::/48
Signature Algorithm: sha256WithRSAEncryption
60:25:90:80:5b:bb:f6:eb:6b:dc:41:61:57:15:f1:90:ba:7c:
c6:9e:35:b6:97:53:3a:cd:59:ae:95:3f:09:4d:c2:12:dc:40:
f9:d4:d1:f1:26:67:d4:6c:db:48:cb:e1:86:8d:6c:2c:a5:d5:
16:74:f5:19:08:16:8d:79:86:05:7a:fc:1d:87:60:16:9b:6b:
12:ca:c7:fd:10:b6:34:90:17:07:dd:b7:c2:3f:09:c7:8a:27:
fa:15:b1:87:18:25:bd:4d:c1:3d:0a:5a:6c:37:86:aa:d1:c8:
e2:af:e4:9c:0a:95:51:fe:9f:89:ee:96:97:bb:5e:15:5d:e2:
1c:ca:24:b1:eb:17:d1:88:1f:ab:44:d0:aa:62:42:3c:db:c5:
53:ec:0b:56:0d:67:6d:a1:cd:2c:a7:4c:1b:f7:0d:0b:a8:af:
a3:61:34:59:35:3f:06:a1:e0:e5:16:f9:ab:ee:9d:67:5f:72:
d0:7d:a3:aa:3c:cb:30:5a:86:71:e9:d1:e2:66:42:f2:5a:50:
87:45:f1:83:fa:fb:88:a7:88:3c:83:67:78:e0:ac:31:2b:6a:
d2:55:31:a5:bc:56:a0:f4:6c:b3:c9:b7:9a:8b:4c:8f:6b:3d:
07:44:d2:2d:93:35:55:d7:63:08:19:a7:02:27:41:3c:aa:02:
a4:cf:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net