Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/QhKGhq9RVjLUPSCejjoRE221C7U.roa
File: QhKGhq9RVjLUPSCejjoRE221C7U.roa (raw, json)
Hash identifier: 0khB5n2A42sHpAsF0tPwxAXTpxJUh3W1WQBMyyOav6Y=
Subject key identifier: 42:12:86:86:AF:51:56:32:D4:3D:20:9E:8E:3A:11:13:6D:B5:0B:B5
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01961530502C8904D8D52071B308A546B6EA
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/QhKGhq9RVjLUPSCejjoRE221C7U.roa
Signing time: Tue 08 Apr 2025 11:36:49 +0000
ROA not before: Tue 08 Apr 2025 11:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215232
IP address blocks: 178.236.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:30:50:2c:89:04:d8:d5:20:71:b3:08:a5:46:b6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Apr 8 11:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42128686af515632d43d209e8e3a11136db50bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:ff:d4:44:c4:dc:d6:b7:8b:3e:88:fd:3f:
36:76:88:d6:48:4e:3a:da:00:de:cf:2d:d9:69:90:
46:14:79:a7:a8:07:a3:ac:46:27:17:9e:b8:33:5a:
a3:0b:bf:e6:04:98:d9:a1:05:e5:03:04:66:ea:6a:
43:81:d8:1c:43:df:ea:41:24:54:cb:65:b4:66:71:
a5:92:5e:f8:cc:13:91:2e:ca:30:ee:45:4d:54:83:
2c:04:b2:00:1c:7c:36:e6:42:19:62:f9:d5:f8:04:
ed:5c:de:fb:19:a6:fb:d0:0d:25:08:e2:40:5f:4f:
2a:46:a6:0c:1a:2b:51:c4:96:b5:7c:97:8c:44:17:
8c:63:38:19:2e:45:2d:4d:e9:13:ec:9e:7e:d1:16:
97:2d:51:95:a7:7b:37:5c:26:e2:e5:c6:16:1a:dd:
c6:a9:07:b4:f7:99:41:3c:6e:0d:e6:40:6e:d0:fd:
a6:f5:77:e4:41:40:4b:64:51:bd:5f:23:41:5f:62:
aa:5a:c6:04:d0:36:00:a1:cc:23:98:a7:e8:c2:fe:
e0:55:ce:32:d5:40:d3:13:0a:be:9c:3f:80:cc:f6:
c7:68:5d:17:6d:f8:ee:d8:59:57:ae:e5:3b:d1:91:
06:54:89:d2:44:67:f4:c4:b7:54:7c:9c:e0:46:da:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:12:86:86:AF:51:56:32:D4:3D:20:9E:8E:3A:11:13:6D:B5:0B:B5
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/QhKGhq9RVjLUPSCejjoRE221C7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.243.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:84:71:06:04:52:8e:43:0f:7e:d1:ee:d1:a5:e5:c2:36:ee:
e6:06:79:18:19:eb:20:48:b0:df:a0:bb:6c:98:f8:5d:1b:de:
3f:2b:1f:b2:0c:77:0f:cc:5f:bf:6b:fa:6e:61:f7:14:15:68:
97:b7:a9:fa:32:92:05:09:17:92:9e:dd:4c:9b:80:95:39:57:
a5:e9:78:af:80:91:cd:bb:25:1c:93:21:e8:83:d4:71:16:81:
01:8f:9a:23:b0:5d:4c:21:a1:9f:aa:28:b5:f4:b8:1a:c8:a8:
c6:b5:00:3f:c7:01:24:8b:b8:48:b8:16:9b:72:34:9f:da:92:
f9:af:98:c4:ba:1e:18:0e:e9:55:2e:8e:32:5a:fc:a8:59:d9:
89:e9:36:b8:9f:aa:16:6f:82:26:b5:ce:5c:23:76:81:3a:45:
88:13:71:9c:c9:f0:09:cd:92:16:f9:11:63:8b:91:5f:b6:50:
61:1b:4f:ec:70:40:77:b1:8c:1b:59:73:2e:d5:b5:75:99:a7:
15:79:42:56:dd:08:80:8b:a1:3b:a4:fa:45:9b:07:7a:32:f4:
f9:4a:b9:3f:eb:fe:83:4e:60:90:7a:ef:fd:fb:26:7f:96:11:
36:be:4e:6e:3b:85:79:70:b3:e1:c8:f3:2b:72:80:6d:6b:2b:
e9:66:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net