Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/qMEDpZRLrC0RKVzoFu5d0Yn0iVs.roa
File: qMEDpZRLrC0RKVzoFu5d0Yn0iVs.roa (raw, json)
Hash identifier: IfGwXhsO4LUshRhgsyNsDeEfXeX5DUDuXfY5jcbXNqA=
Subject key identifier: A8:C1:03:A5:94:4B:AC:2D:11:29:5C:E8:16:EE:5D:D1:89:F4:89:5B
Certificate issuer: /CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Certificate serial: 01942444D7DF754CDF547DD201B4F2E44DAE
Authority key identifier: 5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/qMEDpZRLrC0RKVzoFu5d0Yn0iVs.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44019
IP address blocks: 193.238.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d7:df:75:4c:df:54:7d:d2:01:b4:f2:e4:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8c103a5944bac2d11295ce816ee5dd189f4895b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:18:94:53:dc:f4:7b:76:1f:cd:d2:3f:03:
20:61:eb:9a:4b:0f:db:ae:11:b0:f7:3f:31:51:1d:
66:43:2c:0a:cf:38:6b:c6:cb:d8:89:d4:71:09:a1:
8c:e8:91:51:18:0f:aa:51:95:b2:d9:d5:a6:4c:4d:
bb:de:4e:16:fa:3d:b4:e1:e9:79:fe:29:36:b9:8f:
24:8c:58:fd:b2:4b:d6:33:13:3d:2f:94:cf:dd:fa:
7a:af:f9:05:24:eb:b8:d2:8e:d9:84:28:90:01:9e:
f1:48:8b:32:30:5a:ec:59:a9:fb:6a:5d:ec:ec:e4:
52:94:5e:7b:e7:0c:94:3b:46:95:75:04:59:13:84:
dc:08:51:ef:ff:2d:dd:eb:a2:25:19:6d:90:bd:8e:
1c:fd:ec:4d:5e:b1:38:ad:4c:e1:d5:28:08:48:5c:
e9:54:66:3d:44:6f:9d:4a:08:24:f2:40:c9:8d:f1:
da:3c:17:21:12:9c:03:96:44:a9:95:72:e1:e5:e7:
39:d1:1b:c4:11:d7:c8:83:01:3e:ac:52:41:f6:78:
13:f2:d7:15:6c:01:d6:4c:c5:1d:a5:b9:8d:49:86:
a5:0d:c3:66:ff:5b:96:76:6a:a9:72:50:b6:37:87:
f2:8d:61:79:f8:d2:42:fc:dd:7c:b9:36:6c:13:54:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C1:03:A5:94:4B:AC:2D:11:29:5C:E8:16:EE:5D:D1:89:F4:89:5B
X509v3 Authority Key Identifier:
keyid:5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/qMEDpZRLrC0RKVzoFu5d0Yn0iVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:89:d1:5c:82:f9:c3:3c:60:46:f7:41:95:66:12:6b:ba:5b:
04:9f:fc:72:90:31:8f:d8:c5:17:14:13:3c:e1:88:1f:85:db:
3c:92:b1:6f:04:b8:96:93:43:a7:4c:05:81:f5:ef:3a:85:d8:
c5:e5:4d:fe:fc:85:b2:db:f7:f7:fa:33:7e:61:35:a9:06:0e:
7b:73:53:79:64:dd:59:b9:72:34:3b:56:b1:66:fc:16:46:09:
99:0e:15:b2:66:90:04:c7:4c:72:97:a7:99:1e:03:49:60:fb:
75:e8:9b:b1:eb:67:85:70:21:a6:a5:7a:ed:76:30:62:13:24:
05:2d:0a:61:5d:de:bc:34:66:e4:89:09:de:9e:df:1d:6f:ae:
31:ab:06:6c:82:48:9d:bf:a2:6c:04:4d:9d:06:fd:03:72:cf:
b1:74:ae:70:18:48:59:2b:27:73:c2:dd:56:34:6b:56:df:9c:
bb:6f:4e:4d:4a:59:c6:c1:af:36:9a:4e:fe:f7:26:79:d1:6e:
45:6c:d8:86:cb:34:82:08:36:0f:85:19:a4:87:a7:22:17:f4:
7c:0b:9b:fa:64:e5:e3:b2:33:e1:e2:88:1f:5b:7c:04:dc:5e:
cc:c5:0f:37:65:26:47:c4:4e:70:09:0b:33:64:49:f1:c1:5f:
3c:24:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:19 2025 by rpki-client on console.sobornost.net