Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/qe7WgTc0pmEzzldB9WeXLDwRwuY.roa
File: qe7WgTc0pmEzzldB9WeXLDwRwuY.roa (raw, json)
Hash identifier: QJYNnjPlPIICfSb9VCBEBsTZ9KLpm8+zxTVc8XyL9RY=
Subject key identifier: A9:EE:D6:81:37:34:A6:61:33:CE:57:41:F5:67:97:2C:3C:11:C2:E6
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 01941FFA83CA6080541BD1EB1E4C7A6DFDDA
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/qe7WgTc0pmEzzldB9WeXLDwRwuY.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204631
IP address blocks: 185.136.120.0/22 maxlen: 22
193.27.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:83:ca:60:80:54:1b:d1:eb:1e:4c:7a:6d:fd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9eed6813734a66133ce5741f567972c3c11c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:1d:56:84:a5:af:cb:d9:13:55:27:ab:5b:
b0:7f:da:8e:41:4a:4f:6b:f1:54:50:8d:f7:c6:1a:
f0:a0:60:67:4e:8c:c3:b7:b2:a9:cf:cb:29:b0:c0:
e1:3d:8d:85:f9:a3:97:45:2f:54:42:4a:05:bf:d3:
2c:43:ee:e8:31:87:a5:6f:4d:af:21:61:27:bf:99:
f7:9f:64:2f:66:5b:00:38:e8:2c:89:dc:e9:f5:e4:
36:d8:ba:b4:e2:a0:cb:78:3e:0e:66:ec:ba:9c:82:
0c:0a:de:ee:e7:e9:04:33:89:41:6b:0e:16:16:b9:
74:a9:ea:6f:ab:84:02:81:a3:c4:23:f5:cc:b8:8a:
07:73:99:96:89:73:45:07:07:86:5a:3c:ce:89:94:
b2:e1:4a:fa:3c:53:04:5e:4a:2f:0f:8d:2f:31:03:
76:88:fb:3a:75:20:6d:7c:81:93:c0:0f:b3:fd:db:
b8:19:20:69:d3:3b:1f:e1:90:a4:1f:84:93:5a:3d:
a0:e8:2a:54:5d:d2:9c:f9:af:c5:48:5f:e3:66:55:
07:e8:b8:25:6e:71:e4:22:2d:69:b5:5d:e0:31:ac:
d6:ea:d0:3b:ec:53:5c:b3:2b:02:2e:27:14:e2:03:
af:0e:db:c8:4c:a3:72:6a:9b:35:ca:a7:32:00:38:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:D6:81:37:34:A6:61:33:CE:57:41:F5:67:97:2C:3C:11:C2:E6
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/qe7WgTc0pmEzzldB9WeXLDwRwuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.120.0/22
193.27.218.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:23:fd:50:cf:16:b6:6e:c9:56:11:3e:de:3f:c5:62:67:2c:
78:18:99:eb:33:8b:ba:4f:a9:fa:9c:a4:8f:1e:73:71:de:4b:
61:bb:41:07:ee:07:8f:a0:3e:1e:7f:84:8d:e5:f9:69:ed:ae:
d8:5d:19:68:a7:73:8f:77:5a:ed:29:23:0a:09:a7:b0:cf:15:
13:fc:af:39:7a:18:07:ef:67:ea:8e:26:f4:fb:61:ec:11:90:
21:bb:d8:62:dc:18:fb:d3:29:99:43:5c:a7:8b:7f:23:96:60:
8b:3f:84:ca:e8:b7:5b:0e:f5:fc:cb:41:d8:27:c6:1c:81:45:
29:4d:41:89:fb:8f:a7:2c:43:a8:02:18:33:ab:fe:f8:7d:85:
e4:6d:7f:ec:8d:98:dd:54:d7:62:09:f2:fc:8c:73:00:8d:70:
cf:4a:86:d4:fe:69:d6:55:1e:df:94:79:1c:b2:c6:63:15:4b:
12:5f:91:b3:de:8d:70:95:17:6d:1d:dd:9c:f7:55:48:2a:31:
59:37:fc:b6:62:99:ff:42:f8:47:89:31:55:e7:ec:ed:27:e9:
48:ab:52:3b:a7:e5:ab:72:9a:58:6e:f6:fe:58:c1:0a:16:b0:
16:28:b0:b7:65:33:a0:c6:3d:51:be:5b:b3:8d:36:c5:e3:4a:
8f:8e:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:59 2025 by rpki-client on console.sobornost.net