Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/QBsToBJpbd_nRq5EIjRck6T3KbA.roa
File: QBsToBJpbd_nRq5EIjRck6T3KbA.roa (raw, json)
Hash identifier: KZeNSeGK7PvW4oyfh6BDCeqEbjJDhVh49ggmavvGkaQ=
Subject key identifier: 40:1B:13:A0:12:69:6D:DF:E7:46:AE:44:22:34:5C:93:A4:F7:29:B0
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 019426D92580C194E14D493F64FFD0243F51
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/QBsToBJpbd_nRq5EIjRck6T3KbA.roa
Signing time: Thu 02 Jan 2025 11:49:12 +0000
ROA not before: Thu 02 Jan 2025 11:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208422
IP address blocks: 45.87.116.0/24 maxlen: 24
185.186.0.0/24 maxlen: 24
2a09:e201::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:25:80:c1:94:e1:4d:49:3f:64:ff:d0:24:3f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Jan 2 11:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=401b13a012696ddfe746ae4422345c93a4f729b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:e8:38:4c:85:14:52:ac:c2:fa:7f:71:bc:
62:10:09:7e:d0:30:49:fd:93:e2:40:6c:8e:58:0b:
71:6b:1e:3d:aa:71:fb:4f:64:49:1d:32:fa:e5:e2:
f0:83:07:39:84:d0:c1:dd:65:60:51:56:cd:1e:fc:
b7:21:83:9b:61:17:4f:f2:3d:70:97:cb:dc:61:08:
35:44:06:a1:78:a7:44:47:dd:27:e4:1e:0f:f1:35:
7c:8f:11:b9:f1:d2:b8:78:85:48:f8:e6:e2:c2:46:
a3:a4:94:76:f4:2c:a8:2f:4e:23:53:28:d9:9d:88:
eb:19:cd:0b:5f:55:80:ed:94:d4:ef:bb:ea:d4:17:
34:a0:60:e5:fe:e0:14:0b:88:d0:73:83:ee:88:9a:
a1:f2:06:bc:82:f0:91:0d:f3:95:e0:21:f7:da:a5:
8c:e2:ad:0a:e7:9a:1f:13:d0:ca:3c:e7:66:79:08:
e5:02:42:1f:89:f6:8e:fc:85:b6:bf:3c:bd:f2:a2:
69:9c:db:6b:68:68:6c:6c:0f:d2:f6:d8:57:4c:2b:
12:c5:94:d7:ba:05:3b:a5:cb:2f:aa:f5:89:1c:84:
ad:21:42:1f:06:5a:a1:87:c2:1c:e3:72:a0:7b:0f:
8b:17:51:8b:ef:d8:43:7d:3c:a5:da:23:02:21:33:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:13:A0:12:69:6D:DF:E7:46:AE:44:22:34:5C:93:A4:F7:29:B0
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/QBsToBJpbd_nRq5EIjRck6T3KbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.116.0/24
185.186.0.0/24
IPv6:
2a09:e201::/48
Signature Algorithm: sha256WithRSAEncryption
19:ee:43:0e:9e:82:aa:4c:d8:fe:fa:60:dd:e2:9d:da:b8:13:
b4:d5:36:f6:59:dc:bf:38:08:c1:1d:41:b2:81:d0:8a:b5:99:
e0:88:62:75:bc:7a:47:0e:c6:35:97:44:65:e4:74:49:a6:4a:
33:6b:22:56:b8:8f:97:91:b7:38:68:e5:c2:cf:b2:dd:cf:58:
e6:c5:e8:3c:3a:9a:ae:ac:2c:5d:88:7e:89:40:b8:df:29:d5:
54:55:62:05:d5:8a:ca:7e:5f:8d:7e:52:a3:3e:9a:ac:9d:9b:
28:09:07:dd:dd:69:cc:8a:9c:ea:b6:39:83:81:37:dd:dd:3a:
87:28:62:e8:00:92:1f:8c:4c:93:b6:df:83:ac:d9:e1:86:d1:
8d:23:72:14:12:1f:d4:d8:89:c3:d2:0c:11:e7:b8:de:81:89:
02:bb:b4:67:7d:84:42:73:6d:5a:f5:48:4d:f0:64:4b:22:47:
aa:91:f7:d3:73:be:9b:2a:85:bf:0e:4d:83:f5:a1:5b:01:92:
25:41:a4:c4:87:2b:24:cd:ea:96:be:83:c3:06:5a:c9:6a:c8:
a4:28:53:da:95:90:e7:ee:45:cf:25:d2:a7:d6:c7:ee:10:0a:
4d:b8:aa:f2:39:9b:61:6d:02:e8:6b:54:31:1e:e4:02:19:5b:
52:94:6a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net