Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/QvOFAf8FV-u4BHZ7nVnLpgpZ8-o.roa
File: QvOFAf8FV-u4BHZ7nVnLpgpZ8-o.roa (raw, json)
Hash identifier: xTswaXIuzP+4J3jL8v5PcwUSYu10jxnq7ts41cuAvZE=
Subject key identifier: 42:F3:85:01:FF:05:57:EB:B8:04:76:7B:9D:59:CB:A6:0A:59:F3:EA
Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial: 0194228D1ECE485D5C788C55A345D8DE5D41
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/QvOFAf8FV-u4BHZ7nVnLpgpZ8-o.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57513
IP address blocks: 185.132.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1e:ce:48:5d:5c:78:8c:55:a3:45:d8:de:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42f38501ff0557ebb804767b9d59cba60a59f3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:5c:bf:80:73:b8:53:4e:3b:85:fa:11:30:
8c:d9:2a:14:51:36:fd:00:6a:91:a5:c6:5b:ba:18:
92:d0:08:2e:44:57:30:2f:ce:02:0a:49:cc:37:64:
53:0b:35:06:13:b2:a1:6c:49:4f:f4:35:f5:b8:00:
5f:b1:ac:95:aa:f0:f0:76:6f:9f:01:5a:a9:40:d6:
f9:6a:39:86:21:a6:83:77:cf:f3:cf:aa:b6:e4:12:
3f:a0:69:de:3a:4a:8e:6b:dd:62:23:cc:27:c4:55:
3c:2b:34:cf:33:ce:67:30:b8:61:b8:63:d9:83:0b:
be:06:b7:ef:14:00:e1:17:bd:9c:62:77:0b:f8:6c:
80:3f:ce:d7:47:78:b6:1c:87:cb:8e:34:4a:f7:08:
7f:8b:76:59:ed:30:05:4c:bd:c8:88:a7:9d:32:94:
d4:ec:e0:79:74:e0:5b:bc:9e:eb:9b:d3:27:aa:88:
d7:52:8e:7d:13:81:4c:26:fa:1b:0e:26:04:74:51:
47:d2:e6:46:3b:30:1d:c7:4e:3d:4f:2c:4a:18:97:
22:e6:c6:cd:09:8b:eb:12:95:94:df:87:a6:1c:6e:
30:3e:ce:a7:52:ed:96:d4:18:47:17:b7:b8:bc:55:
0e:6f:af:52:ea:ec:27:91:51:b8:c9:a6:97:2a:37:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:85:01:FF:05:57:EB:B8:04:76:7B:9D:59:CB:A6:0A:59:F3:EA
X509v3 Authority Key Identifier:
keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/QvOFAf8FV-u4BHZ7nVnLpgpZ8-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7b:0f:08:fd:59:f0:d6:b3:b9:e3:00:c0:1e:c8:a3:d9:0e:
a0:fb:e3:95:64:db:19:f8:f1:c4:68:29:90:38:2e:6c:80:66:
18:b1:19:c6:5b:81:49:cc:63:76:3d:4f:ce:a1:84:ee:19:01:
8c:9a:92:64:a2:0c:4b:5e:85:e9:c8:4f:34:6c:c2:74:f9:54:
97:b9:8f:15:d6:b3:9e:87:75:6a:1f:7d:90:13:63:53:41:8c:
02:15:91:c4:0a:74:15:5f:ab:28:26:1a:e9:d9:9f:56:61:7f:
df:86:47:34:3c:74:98:73:9a:4c:9c:3a:91:10:bc:3b:c9:fd:
94:99:a1:08:26:ed:0b:3c:23:1e:2b:62:78:ae:e8:69:dc:b7:
79:8e:7e:d5:e3:6a:69:95:4a:1a:4c:04:fb:7c:65:9f:4b:f3:
7c:37:87:aa:39:0d:4b:57:90:2d:70:c4:2d:4e:87:dc:53:a1:
d1:f3:35:a9:1d:44:dc:b8:2e:50:6e:47:9e:48:b1:76:25:8a:
c8:83:3b:5c:af:fd:8a:3b:37:eb:98:7d:47:2b:e0:8e:58:d2:
0c:f7:04:3e:f8:e7:95:c1:a9:3b:02:87:d2:03:fe:bf:c1:fe:
4c:b9:d1:4d:6e:33:7a:35:4c:75:ba:99:06:b8:f0:b8:7a:58:
e0:f8:4b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net