Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/QL_IhkfDmOPnm2eysfES7ENNhNY.roa
File: QL_IhkfDmOPnm2eysfES7ENNhNY.roa (raw, json)
Hash identifier: AIKBgKNbB8TFeXCOI0AMzc17XwQP5BjbkCxgvUg+uvs=
Subject key identifier: 40:BF:C8:86:47:C3:98:E3:E7:9B:67:B2:B1:F1:12:EC:43:4D:84:D6
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019387EB1399AF54616F6B4040070EF1D1B5
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/QL_IhkfDmOPnm2eysfES7ENNhNY.roa
Signing time: Mon 02 Dec 2024 15:09:10 +0000
ROA not before: Mon 02 Dec 2024 15:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205007
IP address blocks: 138.124.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:eb:13:99:af:54:61:6f:6b:40:40:07:0e:f1:d1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Dec 2 15:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40bfc88647c398e3e79b67b2b1f112ec434d84d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:d0:1e:59:0b:f2:1f:8c:c3:23:21:eb:41:
fd:84:52:22:7d:27:ad:aa:63:8a:ab:17:05:02:38:
96:6c:1a:3b:ea:0f:73:44:7c:82:da:eb:a6:e5:6c:
2b:01:37:14:ba:46:45:00:cd:3a:c5:5b:52:53:61:
1a:68:cc:eb:75:b8:d3:f6:f8:97:91:56:14:e0:c3:
5b:8d:35:c4:f5:cb:ce:df:f5:a4:d7:ea:33:55:47:
31:56:14:82:be:8b:5e:b1:c0:01:c6:b6:55:34:91:
16:46:7f:2c:c7:87:1a:23:8d:b8:28:e0:e6:e7:78:
82:41:2a:c9:0f:a4:e5:3e:4e:b3:e2:97:a0:d3:6b:
bf:06:bc:01:88:88:ea:4a:96:fe:e9:08:b1:77:f1:
e9:ff:13:20:e3:82:12:06:3f:63:aa:8d:5e:a4:7a:
5d:37:00:86:d4:09:ff:45:71:7e:1a:4f:00:88:e7:
aa:9d:69:87:10:72:7d:ed:59:52:7d:2e:5b:8d:c7:
20:eb:f5:93:e9:3d:15:f2:6d:e7:ae:6c:c3:36:7d:
1d:b7:a7:a7:b9:7f:37:7d:78:c0:21:eb:bf:ff:c3:
63:b5:c2:73:23:40:0f:15:e0:97:e4:c6:12:b0:17:
86:90:fc:71:8f:58:ac:15:67:a6:f5:d5:78:91:7f:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:C8:86:47:C3:98:E3:E7:9B:67:B2:B1:F1:12:EC:43:4D:84:D6
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/QL_IhkfDmOPnm2eysfES7ENNhNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:31:7c:68:13:d6:ec:b5:54:2d:31:0f:d7:cf:ca:20:34:41:
c4:9b:49:0d:90:c0:45:4e:9b:1c:00:91:0b:71:76:a4:cb:1a:
45:58:b7:85:26:43:92:e7:f1:4c:d9:3e:28:f6:c8:c4:0b:5b:
46:16:f6:d0:32:d9:93:82:3f:f7:7d:85:f0:dd:93:53:71:7e:
a2:2a:d1:c4:3b:92:18:35:04:e5:ce:ef:18:03:60:43:f7:bb:
05:cf:77:c5:85:4d:62:18:68:94:da:3e:56:ea:7e:7a:25:e2:
5e:f0:25:e3:ef:bb:a8:53:90:7f:cc:c6:3a:7a:2f:aa:75:f4:
07:96:bc:d0:bb:c2:23:44:3a:1b:02:5c:67:56:4b:24:85:e7:
a0:ea:a6:d1:df:29:bb:84:2e:b0:6d:a5:84:8d:02:b0:f0:1a:
8b:47:9a:a5:01:9b:df:37:16:33:cc:85:55:ce:aa:11:91:37:
c1:51:0e:80:01:ed:b8:54:e4:2c:ff:56:a8:71:33:0f:62:92:
cc:24:24:1c:39:cb:b1:b2:ae:1c:e6:57:30:b0:7d:cb:7a:50:
19:63:9f:56:19:0f:e3:cc:48:64:9d:10:4a:1e:f7:72:9f:78:
87:ac:e1:d0:73:fb:22:86:5b:21:eb:ce:da:59:52:b1:48:9b:
d3:cd:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net