Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa
File: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (raw, json)
Hash identifier: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=
Subject key identifier: 40:B2:31:D3:60:C1:90:9F:01:4D:AD:4A:1D:E3:06:7A:1F:98:74:C9
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D6538F857FA4F797B3100A40935B1F
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48900
IP address blocks: 78.130.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:53:8f:85:7f:a4:f7:97:b3:10:0a:40:93:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40b231d360c1909f014dad4a1de3067a1f9874c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:7c:33:7c:61:05:63:3d:8d:fd:73:44:c8:
b9:7b:98:2b:ee:79:99:41:5d:b8:da:37:68:a2:48:
d4:8a:d8:3c:8c:8b:93:2c:8a:8a:ae:6f:08:40:41:
ba:e1:7e:42:4d:a3:df:0a:10:16:96:50:7b:4e:2d:
a3:56:a0:02:90:27:17:c1:bf:f6:6f:7c:6e:50:58:
c9:65:00:45:2b:35:ef:16:1b:cc:6f:35:47:f8:da:
c6:0b:1f:be:da:b6:38:e4:6d:b8:3c:49:79:b5:29:
e6:95:f1:1e:09:f8:83:06:d6:ce:32:32:8f:a6:27:
a7:3d:b6:29:e1:5b:99:7a:de:f3:b7:0e:08:0a:a7:
7b:81:a6:5b:cf:d7:1e:eb:5a:41:e9:8e:08:b5:e4:
f9:e5:8d:2f:24:97:3a:6d:1f:06:7a:38:95:1d:00:
6a:d5:a2:c2:6e:76:24:82:69:8f:d3:1a:a9:14:3a:
52:2e:c4:34:bb:c5:ce:30:f7:03:81:12:28:3c:f6:
fc:96:06:f4:a2:1e:96:29:48:32:6d:ac:e1:cc:fd:
24:c7:b5:37:9a:57:cf:3e:81:86:91:2d:b5:2d:60:
f7:be:b1:e2:4a:cd:68:6b:b6:08:38:92:43:91:fb:
5b:60:f0:f3:72:56:4e:a7:3e:e2:f5:67:e1:f9:16:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B2:31:D3:60:C1:90:9F:01:4D:AD:4A:1D:E3:06:7A:1F:98:74:C9
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:6d:74:7a:c2:c6:46:8d:b7:1a:6d:91:ca:6d:ce:5a:a0:f7:
de:95:55:49:38:19:30:9b:c5:d4:4e:ae:2b:85:54:0c:6a:75:
e2:d2:20:ec:17:4d:25:5e:46:c0:8b:fb:79:89:6a:46:06:b7:
bb:d2:43:53:2b:2c:b6:e2:70:df:5d:45:d6:7e:0c:4d:4f:50:
b8:12:25:e3:d1:04:0a:73:99:60:01:d1:95:d6:2a:0d:e3:1d:
6a:7d:85:69:f7:26:e3:10:6c:7b:96:dd:3e:10:a6:b1:9a:f6:
1d:fc:87:55:78:e3:ba:aa:cd:cd:bc:29:27:92:ca:1a:8a:0a:
c9:af:c8:df:54:09:5c:c3:15:90:08:2e:51:ce:b8:bc:eb:46:
eb:2f:21:1f:94:b9:e1:8e:54:4f:d0:11:1b:b1:e4:7a:2c:1c:
86:27:5f:e7:8f:61:d6:fd:b5:85:18:47:16:d9:af:b5:5b:3a:
9a:3d:e2:61:73:c8:bd:e1:6e:97:66:97:d4:16:1f:c9:ae:3f:
73:67:92:a4:34:b0:2c:82:ac:ed:32:ea:f2:42:20:11:58:e8:
dc:6f:02:d4:2d:21:f2:ca:86:39:16:d3:b4:e5:b6:38:0d:10:
e3:c8:e7:46:67:d8:27:4d:54:5c:ad:2f:9c:1c:f1:c3:ca:6b:
a0:b3:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net