Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa
File: Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa (raw, json)
Hash identifier: FQv+IrKxJOgkLV5JEMBWkTPo0W/To8EL8sbfGOS1Pm4=
Subject key identifier: 43:5E:47:73:06:41:83:E6:F4:C4:CD:E7:E6:C1:42:79:65:2A:3C:C5
Certificate issuer: /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial: 019426D96097909659033A6188E78E489792
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204558
IP address blocks: 79.170.72.0/21 maxlen: 21
85.118.168.0/21 maxlen: 21
185.29.0.0/22 maxlen: 22
188.95.200.0/21 maxlen: 21
2a00:91c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:60:97:90:96:59:03:3a:61:88:e7:8e:48:97:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=435e4773064183e6f4c4cde7e6c14279652a3cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:74:b3:d1:62:2c:60:ab:e2:5d:0e:0c:ca:
ec:dc:4a:88:c4:dd:0f:e3:e2:c3:f0:84:a3:e0:2e:
13:a2:aa:77:4e:97:79:cb:9d:27:28:5b:e6:e7:69:
49:eb:79:40:5e:df:11:e5:b2:37:80:63:51:d4:ff:
b4:65:24:3c:de:23:75:f6:c9:b3:e7:1f:db:ca:d6:
8c:a3:77:2a:0b:cf:17:3c:6a:fa:47:3d:ea:60:04:
57:33:a6:db:de:a5:2f:29:f9:fb:66:d1:5c:c8:73:
fb:ae:f2:ed:c2:a6:8c:29:33:6c:9d:2c:62:99:29:
4c:25:9e:e0:54:ba:ce:4c:3a:c4:9a:5e:3c:86:52:
b6:22:0a:2b:06:9e:36:0b:70:a7:15:03:9e:1d:f0:
ab:07:e7:17:6e:95:cb:e5:89:9f:26:b9:b8:52:9b:
de:0e:a6:14:6e:be:52:35:68:74:53:ca:18:ba:43:
7e:3b:2e:b5:83:9e:d9:73:5d:b4:5f:29:c4:b5:c1:
f0:7f:71:a6:62:13:17:ac:c6:d1:50:a2:91:f0:cb:
b8:dc:47:e8:10:46:ca:f0:52:46:85:60:54:15:d2:
b1:0c:0c:f4:80:18:82:14:26:31:f8:e9:ae:b8:bf:
f6:a8:99:41:43:a7:5d:d3:85:e5:0d:66:27:87:84:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:47:73:06:41:83:E6:F4:C4:CD:E7:E6:C1:42:79:65:2A:3C:C5
X509v3 Authority Key Identifier:
keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/Q15HcwZBg-b0xM3n5sFCeWUqPMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.72.0/21
85.118.168.0/21
185.29.0.0/22
188.95.200.0/21
IPv6:
2a00:91c0::/32
Signature Algorithm: sha256WithRSAEncryption
20:d3:9d:1d:07:43:11:4c:62:6a:93:f2:3e:47:51:74:fa:a0:
68:73:de:04:44:87:31:42:fd:e1:75:e4:78:6e:6f:3b:a2:48:
38:27:75:5d:24:bd:cf:55:2d:4a:b7:a8:dd:1f:3e:88:73:fd:
c6:84:29:27:de:12:e1:af:16:9a:d5:3b:fb:c1:14:2a:17:d4:
1d:f6:7c:24:7f:d9:de:3a:9a:4b:81:53:b0:0e:a7:e9:4a:41:
c6:52:7c:91:4f:d2:e4:c6:a2:aa:19:02:37:9a:3f:15:15:dd:
2e:2a:25:0d:19:de:78:c5:ae:1e:6f:0a:8f:d1:50:fb:ba:68:
0f:9a:4e:9a:d7:28:4b:dd:cf:84:d2:c4:e2:2e:1d:a4:78:88:
86:ed:fd:14:e4:cc:fc:7b:f0:26:36:11:54:c2:42:07:f3:8b:
b6:d4:79:dc:ce:52:13:b8:33:33:e3:b3:63:fa:e4:f5:bd:38:
30:42:43:a2:50:0d:60:30:d9:17:ed:08:7a:ac:69:a6:64:f1:
56:6d:18:56:f0:8c:e6:99:0d:04:0d:af:a3:c0:e6:57:c7:33:
61:52:15:e4:1b:cf:7c:50:e8:f6:f4:4d:2b:11:25:47:55:b9:
88:f5:69:a5:cc:1d:72:b0:68:2b:2f:d5:31:8b:7a:cf:ca:48:
e0:06:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net