Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/tqmZd2LvNRZuj9JvLfgMPuwsnQ4.roa
File: tqmZd2LvNRZuj9JvLfgMPuwsnQ4.roa (raw, json)
Hash identifier: FxaO/1VMY0bHSvADqDCXMdZI7+dsMEPHunesOi47d/I=
Subject key identifier: B6:A9:99:77:62:EF:35:16:6E:8F:D2:6F:2D:F8:0C:3E:EC:2C:9D:0E
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3C99CDBDB6C104FDE280018317E06
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/tqmZd2LvNRZuj9JvLfgMPuwsnQ4.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57206
IP address blocks: 217.113.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c9:9c:db:db:6c:10:4f:de:28:00:18:31:7e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6a9997762ef35166e8fd26f2df80c3eec2c9d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:93:71:ab:41:b7:63:a0:61:5c:2d:e1:ec:
0d:86:e5:84:56:b4:74:f7:a0:ce:30:40:6c:c2:02:
5d:53:07:7e:23:b9:65:b6:06:8b:7b:59:b0:67:a8:
0c:19:9a:9f:4b:92:16:d9:0e:03:da:9b:3d:08:1c:
0a:d2:d9:87:50:10:7d:44:b8:bf:1d:9d:b2:2a:dd:
e2:d3:79:0e:d3:9d:31:f7:cf:9f:81:48:d2:08:70:
f9:a3:dc:d1:a2:95:37:4d:47:fc:a0:20:72:22:c0:
6e:88:61:4c:19:8f:72:44:0f:2b:e0:5b:37:33:09:
a2:47:8f:e1:bc:74:8e:fc:a4:02:8c:80:49:b4:ca:
13:1c:d5:2f:40:32:4c:d2:42:2c:da:07:b4:e4:13:
96:a7:9f:de:2d:24:89:84:00:fb:d9:eb:ba:f2:03:
8d:5e:16:f7:a4:48:2d:44:4c:73:76:46:8d:28:27:
f2:c2:f3:a4:cf:b6:fe:e2:17:2c:ee:cf:30:1c:ce:
14:42:ba:c1:8b:e3:f1:60:98:37:d1:36:55:72:31:
3d:32:c2:3e:8e:71:e3:21:78:eb:35:d9:20:97:59:
b6:1d:ea:f0:b7:67:ba:c4:10:c5:75:33:48:c9:77:
ce:39:b4:14:a4:6b:6b:06:d5:2f:36:93:10:2b:b5:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A9:99:77:62:EF:35:16:6E:8F:D2:6F:2D:F8:0C:3E:EC:2C:9D:0E
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/tqmZd2LvNRZuj9JvLfgMPuwsnQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.8.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0e:2a:85:17:69:cb:d5:64:2a:e4:c9:63:85:7b:63:4b:eb:
a4:21:03:40:6e:ba:bc:d8:34:c8:ca:76:57:4b:51:1c:bc:ba:
8d:50:d5:f5:92:9a:51:64:2c:82:dd:85:ba:95:6a:1c:22:66:
ef:cd:33:a7:db:74:4c:e7:aa:55:35:72:51:40:e6:6e:a7:8e:
45:73:27:87:8a:33:6a:50:f8:7f:a4:6f:1e:b6:e0:6b:d3:99:
69:3a:c4:3b:ba:92:65:7d:b6:13:c8:e9:7c:5a:3c:4c:91:b3:
3e:a9:4b:24:24:a6:4f:f1:a5:67:82:cb:a8:b0:09:b2:33:8e:
1a:73:10:e2:56:69:a0:b2:7e:0c:c8:26:1e:73:b6:de:51:b0:
c4:e0:15:61:80:3d:57:a7:67:b6:e9:4c:35:32:64:c4:a9:56:
fe:56:6d:b2:a9:d6:cf:e1:96:f5:01:19:a9:98:b0:67:c8:e2:
e5:bb:29:45:00:fd:9b:c0:20:2d:1f:9b:1a:a5:64:ef:b6:5f:
62:c2:93:ce:55:24:62:3a:46:05:d5:e1:bf:bf:c3:8a:4d:70:
e9:57:c5:a7:77:02:89:ba:c2:72:43:2a:1f:04:5d:73:cf:9d:
7c:bf:b1:b9:82:c3:51:c6:f5:bb:a4:03:a8:03:24:fc:dc:d5:
44:60:9c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net