Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa
File: Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa (raw, json)
Hash identifier: SAnzykFF7+yaqNzuYwleeCNNDy8d940iOSnUgG5s+iM=
Subject key identifier: 42:19:39:0D:E3:B3:C5:1A:13:B1:A4:58:E5:43:EE:E7:4C:68:D9:0E
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 019421B1A3B5D6BB16B68812CACD3AD8CAA4
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa
Signing time: Wed 01 Jan 2025 11:47:57 +0000
ROA not before: Wed 01 Jan 2025 11:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197211
IP address blocks: 109.104.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a3:b5:d6:bb:16:b6:88:12:ca:cd:3a:d8:ca:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jan 1 11:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4219390de3b3c51a13b1a458e543eee74c68d90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:23:01:93:4f:dd:7c:3a:7b:ef:be:50:8c:
08:8a:67:b1:97:c4:0f:7a:83:7e:9d:f5:c7:9a:ca:
f3:2b:b0:87:5a:2c:29:48:8d:f9:56:1a:37:f1:33:
42:fc:9e:07:78:d0:a9:a8:09:bb:60:e1:72:41:86:
29:73:a3:e2:be:ef:4c:8f:7f:e2:89:c4:0c:7d:42:
60:72:aa:b8:15:ee:e3:e9:e0:9b:51:97:56:02:7a:
39:99:39:f1:b7:8c:a3:a4:58:b5:24:d3:f3:9d:5a:
93:e9:2b:48:53:0e:c2:49:b3:22:51:41:32:b6:b7:
74:82:76:e6:9e:ba:0b:08:24:cb:f8:5d:7d:52:78:
e1:f9:39:58:94:26:1d:aa:1f:cc:0e:fd:3f:be:31:
c0:85:a3:b6:63:ba:a1:8b:7c:0f:ba:41:02:5b:0d:
ba:d4:67:13:2b:e5:e5:65:e5:d4:f8:7b:8d:c3:d2:
2b:80:5b:bd:ca:5c:6e:20:cb:28:49:9b:a4:29:be:
1d:e1:4c:05:59:8b:9b:24:5c:98:92:2b:d2:a6:2d:
94:3c:e3:2c:12:c3:38:83:ed:ba:4b:c5:d0:f0:1e:
b7:40:2c:11:1c:49:65:8d:61:6a:1c:1a:07:4e:79:
9a:2a:c2:0e:48:02:67:8d:72:94:0d:c3:3f:0b:55:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:39:0D:E3:B3:C5:1A:13:B1:A4:58:E5:43:EE:E7:4C:68:D9:0E
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6c:e5:36:bf:2d:25:dd:5b:df:aa:9e:26:6b:30:9e:f7:0a:
60:84:90:5a:b8:ac:49:ed:f5:8a:f7:9c:60:70:51:43:39:74:
c2:1a:3b:ae:37:76:4c:96:42:57:5f:40:b5:61:b9:de:ec:47:
c1:bc:10:6c:e8:ee:e0:03:78:82:75:f0:50:32:8c:04:27:97:
81:d4:cd:81:b3:f0:cd:e2:dd:eb:f0:8e:9c:21:04:0c:b6:ef:
18:6b:18:35:54:e4:61:19:40:f7:40:3f:63:83:36:c8:3c:3f:
f8:02:43:b2:4a:d9:b9:d1:ed:28:92:d3:db:51:11:1c:1f:d5:
2d:6e:f3:10:f1:02:21:6d:ec:5b:25:ac:20:3e:02:56:3d:19:
f1:41:77:81:81:2a:fb:85:dc:a0:d1:42:72:57:b9:c0:4b:b7:
6f:ce:b1:db:3e:45:cd:16:53:7f:9e:72:39:9e:64:24:1a:05:
32:cd:fa:09:11:f5:56:70:19:0b:e2:73:f1:30:5c:a4:38:51:
1e:ec:5b:32:ae:40:b3:c3:4b:d2:4f:93:37:b9:7a:e3:90:1a:
76:a7:af:27:55:37:68:e5:28:27:1c:07:a8:d9:46:87:68:5c:
29:66:3b:c2:75:50:85:17:21:f4:07:e3:cb:b9:d6:d8:88:2d:
e0:b5:5c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net