Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/qDQj2i79pZYtwis1stkVmdhu_cA.roa
File: qDQj2i79pZYtwis1stkVmdhu_cA.roa (raw, json)
Hash identifier: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=
Subject key identifier: A8:34:23:DA:2E:FD:A5:96:2D:C2:2B:35:B2:D9:15:99:D8:6E:FD:C0
Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial: 0194236A3B26B393AE9145A88C214740B7AD
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/qDQj2i79pZYtwis1stkVmdhu_cA.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31543
IP address blocks: 195.60.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3b:26:b3:93:ae:91:45:a8:8c:21:47:40:b7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83423da2efda5962dc22b35b2d91599d86efdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:8b:b8:be:37:cb:b4:8b:77:24:bb:f5:d8:
c9:d4:1b:c9:db:d8:5a:0f:cf:82:0a:22:74:f1:ce:
7a:4f:74:16:15:ce:db:18:bd:c5:c5:34:16:49:9c:
f9:60:26:57:e5:a0:da:81:9d:f5:c6:0f:fc:b6:53:
89:4f:0a:da:32:04:7b:93:23:ad:38:39:f2:17:bb:
f2:b6:37:7f:27:79:a7:b8:27:6a:02:a6:06:e4:81:
82:c3:a7:cb:e5:d5:23:c4:c8:c3:9d:ba:f6:68:d5:
2f:ff:08:ef:ed:37:75:f8:03:b5:b7:c2:b6:10:d6:
58:f2:b7:e7:16:15:93:da:c6:47:8f:a7:c3:5b:44:
a2:65:64:f2:38:6e:ba:20:90:fa:31:71:56:88:28:
0f:9e:1a:8e:74:ab:a5:d0:78:d0:b2:fe:2d:69:7b:
fd:4d:e1:01:71:14:9e:73:21:67:40:3e:0e:33:d4:
62:7e:76:25:ff:96:25:4a:79:9e:53:40:0f:5a:fa:
f9:cb:a1:9f:0f:23:06:6a:d3:f8:5c:35:9a:9d:53:
af:4e:bc:85:dc:06:c3:12:c6:2a:bb:d6:82:20:35:
c5:ee:13:72:91:30:f9:71:79:5c:2e:8b:78:8d:3b:
01:10:37:82:01:48:a1:f3:18:af:cc:9d:f7:31:d8:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:34:23:DA:2E:FD:A5:96:2D:C2:2B:35:B2:D9:15:99:D8:6E:FD:C0
X509v3 Authority Key Identifier:
keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/qDQj2i79pZYtwis1stkVmdhu_cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.66.0/24
Signature Algorithm: sha256WithRSAEncryption
57:06:44:67:d2:0c:9d:75:63:e5:4f:d6:b4:d5:8c:64:2a:f1:
aa:64:62:f4:85:89:e3:e6:f8:ae:b5:0e:55:12:2c:82:ce:0b:
fa:f0:ca:5c:cb:3b:25:f5:d5:e6:66:a1:74:39:ee:86:1c:69:
db:f2:5d:56:e7:11:eb:e2:8c:28:9f:cb:e1:fe:7e:21:f1:c9:
49:32:1a:27:35:19:5b:82:db:d8:79:8c:bd:a3:df:16:41:6b:
b1:30:78:f9:0c:f6:09:03:e0:58:82:f1:de:a3:0f:24:3b:c0:
f4:77:81:48:3d:3d:f3:1a:7a:9f:31:d6:c8:62:5e:7b:be:6d:
99:4b:b5:45:00:21:bf:10:92:63:2b:53:25:34:b9:4a:93:21:
b0:a7:8f:17:46:d8:f3:22:db:cb:d1:5a:e1:31:2f:79:27:cf:
3a:86:d9:9c:21:c5:63:c6:94:dd:76:80:50:3e:b2:e6:8d:b8:
4c:90:5f:d3:d9:78:4c:6d:93:d3:62:44:6d:c4:7e:fa:c8:4a:
9d:f8:45:4e:0d:c1:31:ec:05:34:0d:2c:cd:68:4d:d2:4e:05:
ce:64:0f:72:86:ec:6f:ff:84:4d:1c:30:7f:e0:eb:8a:16:6b:
83:57:a4:70:6f:a8:bd:ea:25:8b:b0:cd:e3:4b:bf:f0:58:62:
0a:b5:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net