Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa
File: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (raw, json)
Hash identifier: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=
Subject key identifier: A9:54:FC:8C:EA:08:83:73:50:EE:0A:D7:16:BE:08:ED:24:2E:F0:F6
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019426D8D2CBE0D3E645E1624EEBA54C68DA
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa
Signing time: Thu 02 Jan 2025 11:48:51 +0000
ROA not before: Thu 02 Jan 2025 11:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211453
IP address blocks: 176.113.44.0/24 maxlen: 24
2a0c:8840:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d2:cb:e0:d3:e6:45:e1:62:4e:eb:a5:4c:68:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Jan 2 11:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a954fc8cea08837350ee0ad716be08ed242ef0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:05:2d:68:32:d9:bc:20:5e:f8:a4:f2:c0:
e7:15:3c:ac:f9:57:2e:6a:12:08:5e:00:e5:b9:ce:
d2:fe:5e:09:9e:64:ce:60:d3:9d:f6:eb:26:e3:26:
bc:4b:44:ff:b1:ca:eb:f3:93:46:9f:1f:56:d1:15:
06:e4:29:7e:52:cc:9b:82:ae:88:80:82:cd:64:51:
93:3b:f1:a3:b0:af:3b:50:0d:43:27:6d:28:01:63:
78:3e:f9:bc:2f:4e:ae:1b:bc:df:13:b9:e9:77:db:
91:22:0c:78:41:61:3c:8a:83:13:c1:93:6c:e5:37:
15:7a:94:4d:d2:bd:b3:f7:7d:17:60:d9:c3:b5:7c:
60:f6:6a:58:24:ad:1d:7d:f8:3e:6c:eb:c5:e2:1d:
b8:3d:66:82:98:bd:b9:61:cc:7a:b3:5a:b1:66:72:
27:3e:7a:4a:81:01:b1:12:85:ca:71:c7:ca:26:52:
2f:1c:b4:c5:c5:4d:db:d2:60:71:45:b9:40:91:29:
a9:15:45:17:a1:96:96:fd:82:7b:ad:27:36:31:a5:
4d:a1:cd:d4:b3:d9:dd:b1:2f:c4:b8:b3:29:80:0c:
1b:16:1c:12:fa:2e:d8:ea:77:a3:0e:76:8e:da:76:
90:95:57:cf:b6:ec:3a:af:aa:aa:ac:cd:36:3a:3d:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:54:FC:8C:EA:08:83:73:50:EE:0A:D7:16:BE:08:ED:24:2E:F0:F6
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.44.0/24
IPv6:
2a0c:8840:1000::/36
Signature Algorithm: sha256WithRSAEncryption
43:27:da:23:92:ce:9b:d7:a0:ed:b8:d9:9a:58:2b:b2:3b:d3:
7e:f5:10:1f:0c:a6:25:55:19:13:34:49:25:cc:49:91:a1:7d:
38:04:78:eb:7d:4b:2b:9a:b0:6c:11:45:df:f9:6b:a6:8a:6e:
e0:29:c7:47:6d:c4:4e:e3:c2:f0:08:6d:42:ab:26:57:11:2f:
72:fd:9d:0b:ef:2f:14:1c:2b:74:44:bf:ab:66:ac:10:3c:c9:
3e:38:22:25:b2:bc:d4:74:7c:d7:4c:30:68:de:7f:bf:5d:cd:
ff:1b:03:f2:a7:47:7a:ea:56:77:8b:f6:17:42:42:85:01:a6:
23:e1:62:93:6a:82:27:1a:64:93:de:b5:dd:45:d6:ce:07:af:
05:1a:39:d4:5f:23:57:7f:68:d4:09:7d:b7:d1:19:f9:9d:09:
b4:ca:25:b4:e9:4f:05:70:2e:da:05:06:9b:45:0b:71:d9:e3:
e8:88:73:03:c1:e2:10:ba:32:dd:5b:4f:90:ac:a5:51:3e:a9:
d3:98:10:ff:7a:ac:87:3d:a6:84:37:12:85:b3:e4:6f:5c:fc:
c9:c5:77:f9:46:4d:1d:47:f2:0b:7a:18:29:81:10:7a:78:39:
76:a1:b7:c5:ea:df:2f:75:c9:0d:fc:24:c1:0c:16:58:7c:9d:
52:64:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net