Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/5q_QBExX-iJkMtzTZ_fdW28i38Y.roa
File: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (raw, json)
Hash identifier: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=
Subject key identifier: E6:AF:D0:04:4C:57:FA:22:64:32:DC:D3:67:F7:DD:5B:6F:22:DF:C6
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 0194221FA5100EB4C39F2B2C647C930DBDAD
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/5q_QBExX-iJkMtzTZ_fdW28i38Y.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43174
IP address blocks: 131.117.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:10:0e:b4:c3:9f:2b:2c:64:7c:93:0d:bd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6afd0044c57fa226432dcd367f7dd5b6f22dfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:97:d9:5b:6a:08:01:4b:4c:c3:a2:66:b0:
9d:89:bb:2b:46:96:01:c6:5a:da:aa:34:7f:0f:9b:
56:11:b5:5c:90:18:5b:b2:3d:69:dc:6c:0b:14:4d:
b3:bb:5b:be:44:32:b4:da:fb:44:79:23:7d:92:24:
1e:94:49:f7:70:2a:61:79:c4:7d:af:64:ca:c5:6c:
21:94:2c:b5:71:06:7c:ea:79:69:2f:ec:81:95:ca:
91:be:3a:21:63:ea:fe:0a:78:8c:37:5d:59:04:75:
3e:81:74:80:83:95:a4:b1:7b:5d:6f:4d:ea:47:9f:
82:11:bb:da:4a:45:df:6e:72:e7:91:ca:d8:d1:70:
cc:6d:4c:ad:da:6f:ec:23:66:cf:39:3a:fb:16:4d:
ed:16:1e:3d:43:79:3b:86:d6:83:82:72:a6:63:7a:
e1:d6:bd:b8:4b:77:e7:c2:d6:bd:1f:25:d8:3c:13:
eb:cf:58:09:00:49:56:47:be:2d:0b:7a:dc:d4:0c:
b0:a1:c3:3d:04:25:fe:70:07:5a:c8:a6:9c:8e:c7:
cf:c0:b0:91:fe:3e:f4:32:b6:55:74:80:d6:ed:f2:
45:7c:ac:19:85:ad:5b:7f:7c:39:45:e2:f5:74:71:
38:6f:0e:e6:a3:9b:13:06:c1:a7:4a:aa:3d:d1:91:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AF:D0:04:4C:57:FA:22:64:32:DC:D3:67:F7:DD:5B:6F:22:DF:C6
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/5q_QBExX-iJkMtzTZ_fdW28i38Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.117.200.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:4e:fb:6b:fd:2e:57:a7:72:d0:57:60:0a:49:09:5f:13:e8:
ae:de:f8:11:6a:f1:49:f6:91:d0:bd:0d:d3:40:20:58:0d:13:
f2:8d:51:2b:68:a1:3b:99:ec:2f:a8:c5:38:92:4c:36:b1:c9:
a7:59:af:91:c7:eb:6b:49:9d:f6:56:ba:58:5b:7b:bd:39:45:
cb:77:15:30:77:0d:e6:2b:22:4c:cb:c3:30:4d:70:62:9b:63:
58:c6:ee:fd:42:7f:10:a3:7f:33:21:16:18:14:c7:89:16:16:
02:79:44:ad:6e:73:b6:57:1e:93:93:03:32:4a:5f:d5:86:59:
0d:7d:54:09:b1:0f:87:e3:e9:05:c3:7d:6d:aa:22:ab:ca:02:
6a:bf:ef:3a:75:68:ce:1e:b9:a3:0d:21:40:38:0f:eb:58:37:
d1:80:21:ea:bf:90:1f:56:47:fd:43:a7:50:2b:64:b5:b6:b9:
de:fc:c3:a0:1c:73:03:cf:c5:cb:fa:3a:fc:21:5f:68:6a:28:
a1:b1:07:a3:11:a3:c4:0d:ae:80:2a:0f:52:cd:a6:6f:a5:d4:
e9:d3:92:6b:7d:63:a0:ba:1d:f0:42:58:4c:04:7b:6e:28:03:
df:21:84:38:9c:43:6b:bb:9f:1e:5c:be:24:44:ba:11:1c:9a:
6e:33:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net