Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/qoTWjgbmMEUmoU_49iYroDJpUfc.roa
File: qoTWjgbmMEUmoU_49iYroDJpUfc.roa (raw, json)
Hash identifier: 3K+OOBB37cT2cm7YqnntpcjzjaZAUuEbo+QZKiZz25M=
Subject key identifier: AA:84:D6:8E:06:E6:30:45:26:A1:4F:F8:F6:26:2B:A0:32:69:51:F7
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01942826D51FC9631E8636D65FECEF9C8825
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/qoTWjgbmMEUmoU_49iYroDJpUfc.roa
Signing time: Thu 02 Jan 2025 17:53:41 +0000
ROA not before: Thu 02 Jan 2025 17:53:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29447
IP address blocks: 78.208.0.0/12 maxlen: 12
78.208.0.0/17 maxlen: 17
78.208.128.0/17 maxlen: 17
78.209.0.0/17 maxlen: 17
78.209.128.0/17 maxlen: 17
78.210.0.0/17 maxlen: 17
78.210.128.0/17 maxlen: 17
78.211.0.0/17 maxlen: 17
78.211.128.0/17 maxlen: 17
81.56.0.0/15 maxlen: 17
2a01:e09::/32 maxlen: 32
2a01:e10::/30 maxlen: 30
2a01:e11::/32 maxlen: 32
2a01:e11::/36 maxlen: 36
2a01:e11:1000::/36 maxlen: 36
2a01:e11:2000::/36 maxlen: 36
2a01:e11:3000::/36 maxlen: 36
2a01:e11:4000::/36 maxlen: 36
2a01:e11:5000::/36 maxlen: 36
2a01:e11:6000::/36 maxlen: 36
2a01:e11:7000::/36 maxlen: 36
2a01:e11:8000::/36 maxlen: 36
2a01:e11:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:d5:1f:c9:63:1e:86:36:d6:5f:ec:ef:9c:88:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Jan 2 17:53:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa84d68e06e6304526a14ff8f6262ba0326951f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:13:45:de:39:1f:27:59:42:9f:88:f2:1e:
3a:80:a9:05:24:49:d5:2d:d2:df:d9:ae:75:a3:32:
61:48:d6:de:dc:bc:56:b4:3f:b6:72:4a:84:22:d7:
14:b8:8b:d2:92:09:8d:3a:12:4b:b8:d9:ef:26:bf:
b3:12:3b:74:03:71:8d:92:88:fc:d7:03:7a:e6:d4:
01:17:98:47:59:20:1c:a7:ed:ed:e4:75:4f:d0:fc:
e9:5f:b4:f0:83:b4:89:7a:3f:b0:9b:1a:71:f5:56:
d0:fd:3d:56:a8:3d:1b:59:be:e0:a3:b6:04:b9:60:
02:e5:5e:c0:2d:a1:a6:dc:85:39:35:81:25:fe:22:
d5:4c:e9:43:19:ac:13:67:3d:ff:94:ea:c3:35:38:
e7:3c:44:b4:a8:e2:66:4f:63:30:d1:91:ef:e3:39:
b9:d7:3b:07:cd:02:d3:6a:ee:6d:ed:6f:07:5c:4d:
6c:9f:6e:09:33:a6:a5:21:9b:41:89:7f:9e:95:00:
60:1e:64:2c:f0:e1:01:51:6a:64:21:d3:52:85:8d:
7d:74:68:bf:3f:34:b1:1c:21:db:f9:69:de:82:a7:
30:ee:3d:45:1e:49:af:a7:49:a7:5a:9e:28:96:1b:
60:a2:54:f4:54:72:c9:b5:79:c1:49:31:11:93:13:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:D6:8E:06:E6:30:45:26:A1:4F:F8:F6:26:2B:A0:32:69:51:F7
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/qoTWjgbmMEUmoU_49iYroDJpUfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.208.0.0/12
81.56.0.0/15
IPv6:
2a01:e09::/32
2a01:e10::/30
Signature Algorithm: sha256WithRSAEncryption
85:f1:47:27:34:a2:10:33:89:96:f4:a4:e1:1a:7f:52:2e:24:
9a:ef:e2:b6:f8:62:05:b2:f7:e3:29:ce:b3:65:11:35:2f:46:
d5:ef:32:5b:c6:28:77:8b:be:6a:e5:fb:98:39:f6:ae:3a:85:
f4:3d:6c:16:70:d6:25:06:b7:3b:e5:3d:e1:d3:42:25:63:33:
ff:5e:22:93:f8:40:af:41:7c:70:56:e5:82:8b:7e:fe:68:a3:
cc:9d:c8:c4:00:13:d6:3b:6c:ed:af:a7:4d:3d:ac:cd:15:b3:
e1:9d:e9:7b:58:a5:79:c2:e3:85:18:2a:88:66:0b:c6:8c:34:
14:5a:56:bb:91:78:a6:98:6e:8b:3a:0d:4a:5f:ca:f7:4c:00:
d7:7f:69:7a:e3:f3:8a:3d:07:cd:c5:a1:ad:01:a2:4f:4e:a1:
a5:78:c0:9b:19:f8:a7:74:cc:97:d6:9b:75:56:33:ef:02:40:
cd:a0:91:88:19:b1:48:7b:03:1b:e7:4e:27:de:b6:fd:23:c9:
d6:5e:e4:2d:7e:67:68:13:1e:1d:c8:71:84:53:f1:53:d5:fa:
b4:a1:67:02:2f:69:8f:1e:31:92:39:38:21:41:ab:8c:bf:34:
e7:8c:a8:da:40:64:09:06:88:d7:df:48:9a:e0:38:df:6b:e4:
36:5c:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:50:04 2025 by rpki-client on console.sobornost.net