Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/qY-Uigvu7Ribqi4DdNkXZQ5rHJA.roa
File: qY-Uigvu7Ribqi4DdNkXZQ5rHJA.roa (raw, json)
Hash identifier: VvkUkyuh3kPnO+PyS2LvwJ5XukAYOHs/3etywQB0ZYY=
Subject key identifier: A9:8F:94:8A:0B:EE:ED:18:9B:AA:2E:03:74:D9:17:65:0E:6B:1C:90
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 01941FFA25200354DCF5E65DA80835E18A1A
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/qY-Uigvu7Ribqi4DdNkXZQ5rHJA.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35401
IP address blocks: 87.244.0.0/21 maxlen: 24
87.244.16.0/21 maxlen: 24
87.244.32.0/21 maxlen: 24
87.244.40.0/21 maxlen: 24
87.244.48.0/21 maxlen: 24
87.244.52.0/24 maxlen: 24
87.244.53.0/24 maxlen: 24
87.244.54.0/24 maxlen: 24
87.244.55.0/24 maxlen: 24
87.244.56.0/22 maxlen: 24
87.244.60.0/23 maxlen: 24
87.244.62.0/24 maxlen: 24
87.244.63.0/24 maxlen: 24
185.138.160.0/23 maxlen: 23
217.170.112.0/20 maxlen: 24
2a02:26e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:25:20:03:54:dc:f5:e6:5d:a8:08:35:e1:8a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a98f948a0beeed189baa2e0374d917650e6b1c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:2a:a6:26:38:4c:3a:74:67:78:c8:af:a3:
49:f3:a9:75:63:71:0e:b9:ad:d5:00:14:97:22:21:
54:a7:e8:72:e1:ec:40:c1:ea:c8:d8:04:cd:2d:4c:
04:54:f2:14:07:ac:d1:3e:00:8f:cd:a1:c7:16:2f:
0c:29:90:56:83:92:56:3c:35:84:05:d8:cc:75:50:
45:76:a2:2e:71:a9:19:b0:34:1b:a0:95:ed:3a:5d:
71:32:23:05:96:82:21:14:a3:44:85:a2:ed:14:d4:
bc:7a:a2:48:e5:f9:db:bc:7d:ba:57:bc:bd:35:6d:
50:16:ba:e7:bf:e9:3b:e0:ff:84:e0:0c:f6:ea:cb:
51:db:48:28:0f:95:76:46:e2:07:5b:c8:61:85:63:
c4:2b:b5:eb:00:36:27:be:07:e6:38:40:70:5d:ad:
aa:0f:21:4c:1c:2a:2c:52:b8:c1:e1:88:06:1d:fa:
f9:df:c3:1c:2c:2d:62:7e:b8:9c:da:71:c4:16:1b:
c0:8f:2e:93:3a:bb:43:d9:18:ab:3b:dd:d2:2c:b1:
5b:86:9b:d6:92:77:0f:42:d4:3a:1e:3c:ea:7a:b4:
53:14:a9:01:dc:1d:db:74:6d:6f:1b:a2:67:51:62:
e4:e5:e3:21:ff:f5:60:99:24:6e:4b:05:84:51:78:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8F:94:8A:0B:EE:ED:18:9B:AA:2E:03:74:D9:17:65:0E:6B:1C:90
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/qY-Uigvu7Ribqi4DdNkXZQ5rHJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.244.0.0/21
87.244.16.0/21
87.244.32.0/19
185.138.160.0/23
217.170.112.0/20
IPv6:
2a02:26e0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:74:df:d5:17:98:f3:70:f0:cd:58:c9:00:f7:bb:60:55:19:
69:09:5d:3d:f8:61:64:7f:21:1b:9f:b0:e0:65:5b:ff:74:8a:
70:5c:d2:52:47:18:de:a4:c6:6d:56:61:18:5d:55:5b:04:5d:
0a:5f:aa:c8:d6:18:5a:19:62:50:18:6b:46:c1:71:97:90:76:
e2:ef:d5:99:3d:36:ec:a1:50:c2:ab:88:1b:6b:c7:70:e8:b8:
ca:86:b6:46:a9:9e:cc:d5:1e:d7:13:30:46:cc:d1:93:a1:d7:
fe:df:7a:38:9e:77:20:4a:c3:97:eb:e2:46:90:72:70:de:c1:
fd:4e:af:ac:b8:88:2e:67:da:89:f7:03:fa:14:00:18:80:5d:
4f:e3:fb:25:2f:fd:85:2a:14:42:7c:7e:a9:1c:b5:be:33:d4:
25:66:e0:3c:b5:9a:f3:13:6b:af:74:bc:44:65:89:f3:f8:ea:
64:4f:d2:bd:fa:e2:9c:ce:36:ed:bf:48:4a:24:3b:8c:6b:58:
a6:bf:da:66:d9:ae:95:e4:dd:d4:4c:89:79:70:bc:41:95:6a:
dc:d2:24:c1:94:04:3b:7f:5f:ca:61:f2:bb:f6:d2:2e:bc:4e:
7f:fc:52:ab:52:cd:33:17:a3:45:78:a7:52:27:49:79:e6:41:
66:31:07:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:58:37 2025 by rpki-client on console.sobornost.net