Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/qs1JWbE-8Qg_3DADHg82UZLRgLk.roa
File: qs1JWbE-8Qg_3DADHg82UZLRgLk.roa (raw, json)
Hash identifier: GwsKvXza8+FRqhHl7U0dNTsqvqx+AGXE1OTWkTaMtlE=
Subject key identifier: AA:CD:49:59:B1:3E:F1:08:3F:DC:30:03:1E:0F:36:51:92:D1:80:B9
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019420D65206B187FC1E586D106CF881DCA8
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/qs1JWbE-8Qg_3DADHg82UZLRgLk.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16229
IP address blocks: 213.169.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:52:06:b1:87:fc:1e:58:6d:10:6c:f8:81:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aacd4959b13ef1083fdc30031e0f365192d180b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:1d:5a:c2:42:97:81:54:50:5d:ef:61:0e:
a5:e3:8a:2b:02:2a:d8:e9:a8:93:f8:9b:b4:48:d1:
5a:56:6a:9d:1b:e9:ba:8c:4c:44:43:b8:56:c6:33:
0b:c1:36:b0:54:c1:a5:fd:e3:10:1e:5d:63:2e:64:
b6:e7:dc:a6:77:c8:79:bf:a4:46:dc:49:af:b7:e5:
21:e7:6b:9a:02:cf:2c:96:e3:42:c2:e5:6c:5f:08:
c8:51:a3:09:32:ac:80:45:63:bf:70:2d:f6:c4:83:
7c:02:55:44:7f:e5:2c:f3:a2:e2:7c:f2:e1:08:58:
82:98:8a:77:79:49:44:b6:b0:5b:5d:44:91:10:7e:
8c:f1:3e:eb:68:fa:6f:45:70:c7:d5:f0:b8:60:01:
87:29:9b:e3:eb:c7:50:a7:be:af:45:e8:87:5b:f8:
a9:e9:4b:ac:d0:88:2c:14:e7:cd:c0:97:03:17:d7:
a7:f1:b1:17:61:cc:01:2e:1c:ad:c4:72:1a:8d:4c:
a3:96:de:16:e2:d0:8f:d1:42:c1:fa:ec:c4:21:3d:
2e:4f:73:71:a4:e4:e3:4e:74:9e:a1:99:04:df:a4:
d0:9a:34:10:ec:f1:4a:46:99:58:73:c8:b5:e5:ca:
d1:0f:91:87:98:70:4d:04:e5:d1:b9:00:e8:15:db:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:49:59:B1:3E:F1:08:3F:DC:30:03:1E:0F:36:51:92:D1:80:B9
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/qs1JWbE-8Qg_3DADHg82UZLRgLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.154.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d4:93:02:b4:84:53:f8:ca:08:f1:d3:4e:49:7f:3e:9f:8b:
45:c6:0d:de:a2:3d:f9:06:a2:33:ac:13:97:33:df:ef:2d:dd:
cb:cd:a1:4f:af:1c:91:c0:dd:50:99:79:86:91:51:84:27:a8:
d3:0c:01:c5:53:8f:09:c7:9c:63:30:04:66:6d:85:e4:fb:38:
b0:c7:f0:97:8b:65:6c:2f:8d:fb:75:07:fd:6d:14:6a:ef:c3:
0b:1d:e3:67:fb:49:ff:98:0c:39:f7:99:fb:55:29:4f:bd:a2:
63:7d:7a:dd:ea:84:88:70:09:86:01:0b:ec:d9:40:7a:68:f0:
26:cc:b6:59:3e:27:ef:64:76:8c:8f:c2:9d:ce:68:85:7c:f0:
a5:4a:50:6f:a6:9a:65:be:9e:35:e7:cf:0f:ea:76:af:8c:ee:
1c:f9:83:c5:bc:b4:26:ef:87:be:c8:7d:21:59:9c:af:fe:5d:
88:36:17:4d:46:7d:46:9e:4a:17:01:d2:52:c6:b3:6a:4e:80:
a6:02:3e:e4:68:22:ca:eb:19:32:13:02:4b:6a:ec:ed:18:ac:
73:24:9d:9c:0e:93:2d:1c:87:92:29:c6:e8:7e:9a:47:0f:7f:
4e:a0:6b:d4:ee:4c:53:86:cd:11:69:a4:71:07:2c:14:ff:8c:
62:96:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:51 2025 by rpki-client on console.sobornost.net