Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/QhB2ZKTCEnesOeMDeOfWU4I0Nyc.roa
File: QhB2ZKTCEnesOeMDeOfWU4I0Nyc.roa (raw, json)
Hash identifier: /fNvrDEh/+Li+0nMk2T9SuyVCM8Gv/ZKsHIzrxeSePA=
Subject key identifier: 42:10:76:64:A4:C2:12:77:AC:39:E3:03:78:E7:D6:53:82:34:37:27
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019427B5BF0F186359AB4B50C070AF671B10
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/QhB2ZKTCEnesOeMDeOfWU4I0Nyc.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 195.42.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bf:0f:18:63:59:ab:4b:50:c0:70:af:67:1b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42107664a4c21277ac39e30378e7d65382343727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:3d:6c:7a:74:1e:74:36:42:d6:f9:56:e0:
23:d1:c3:5d:45:ed:14:f8:0f:25:e2:56:e5:59:d9:
63:e2:40:74:09:be:8a:91:4f:9c:63:23:95:34:e6:
d2:88:da:37:71:6b:4e:e4:72:a0:6d:b4:12:05:2e:
4e:45:8a:5a:3a:8f:8b:ba:c3:a4:e6:b2:10:ce:82:
64:a5:fa:3b:df:03:f0:24:50:a0:e7:1a:17:9b:47:
84:33:bb:da:ef:3f:e4:9c:3a:84:17:0e:68:7e:7e:
df:1a:50:59:1e:eb:e0:f1:72:8e:2c:17:64:fd:6e:
d6:71:4c:da:1d:76:58:f7:a0:6c:97:0c:9c:a4:f0:
33:f8:b4:81:c3:57:ae:ec:d8:fd:e1:1e:9c:77:5c:
7e:ad:8c:31:71:af:74:f8:e4:07:7e:db:ce:d2:e6:
95:d7:c2:81:8c:2f:41:1b:06:18:14:c7:d0:a7:17:
ce:70:6a:8d:3d:d4:45:71:ea:e9:a6:3f:54:fc:1d:
bc:6b:13:b9:49:6a:4f:e5:55:bb:8b:6a:15:c8:84:
fc:8e:c9:a6:48:fb:24:fb:1c:e7:ea:6c:3d:24:90:
02:61:c7:48:ff:61:4c:67:9d:1f:75:b3:c8:ab:be:
22:97:fb:97:02:d4:63:86:15:f8:42:b4:53:dd:fe:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:76:64:A4:C2:12:77:AC:39:E3:03:78:E7:D6:53:82:34:37:27
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/QhB2ZKTCEnesOeMDeOfWU4I0Nyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.240.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:96:fc:81:86:71:19:38:a0:c7:2a:8c:f0:10:eb:5f:c6:5d:
d3:ca:3d:ef:20:97:9e:72:bb:12:f9:3f:09:95:13:de:e2:16:
7b:74:fa:e7:79:72:86:d8:0c:41:a7:0d:3f:47:17:62:2d:19:
bd:68:ae:f8:07:70:8c:f2:02:fc:d7:a6:48:83:ae:5e:cd:05:
17:f1:7f:4c:3a:77:b8:d6:57:be:b4:a3:2d:c0:ab:4e:b0:f7:
41:a4:f9:3c:30:2e:d1:f2:e4:ff:f5:87:c9:c4:63:ef:f6:68:
03:92:19:86:0b:6d:2c:5c:e7:9c:55:d1:78:48:e3:c1:5a:9e:
8b:e4:3d:f7:f6:96:4f:f9:77:ea:0c:5a:a3:b9:e9:64:17:47:
24:2c:eb:97:b5:32:37:58:85:9d:14:9d:85:4d:2d:12:e2:5f:
6a:d5:25:56:92:f8:cd:11:b7:0c:ff:23:5a:7c:d5:d7:f6:ac:
d6:5e:9c:93:d4:29:b8:2f:ec:08:9e:a1:f2:c5:6b:b1:68:18:
ef:a8:9a:a7:c3:0a:b3:b3:87:0d:a7:33:ff:d9:f9:0f:b2:4e:
37:02:8f:3b:86:fd:2e:6c:c3:91:64:ca:76:57:31:c0:0e:ba:
f0:6d:fb:29:ae:c3:f5:9c:44:65:d6:63:2b:7d:3b:6c:37:bb:
88:7c:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:01 2025 by rpki-client on console.sobornost.net