Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/qglND7LtkZtX7CiWfpEXZWwtu1Q.roa
File: qglND7LtkZtX7CiWfpEXZWwtu1Q.roa (raw, json)
Hash identifier: Pl9pMVO0hhNMu9vdJlfMnmaebwLOaPSpsOAMn/v4g6k=
Subject key identifier: AA:09:4D:0F:B2:ED:91:9B:57:EC:28:96:7E:91:17:65:6C:2D:BB:54
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01948DFEB1CE5D7015001825DF4C4F2DC12E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/qglND7LtkZtX7CiWfpEXZWwtu1Q.roa
Signing time: Wed 22 Jan 2025 12:31:06 +0000
ROA not before: Wed 22 Jan 2025 12:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41564
IP address blocks: 89.251.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:fe:b1:ce:5d:70:15:00:18:25:df:4c:4f:2d:c1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 22 12:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa094d0fb2ed919b57ec28967e9117656c2dbb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:38:7f:cd:82:c6:bd:2e:9f:78:65:cc:cd:
aa:74:7b:be:96:85:6f:bf:68:dc:2e:30:b2:59:c5:
cd:bd:13:c5:cd:d6:01:fe:6e:de:86:d8:78:59:4f:
76:d3:7a:8f:d7:48:7c:c7:fe:11:5d:f6:01:9c:35:
88:46:10:72:de:58:a1:9d:c3:8d:a6:32:05:9d:b3:
fc:13:a3:12:ea:6a:b0:54:a6:1b:85:12:f6:0c:99:
b5:be:a2:5f:a6:5c:5f:20:84:32:a4:91:e0:f8:2e:
e6:c3:93:7d:48:0d:44:1f:cb:54:22:39:b8:ad:b2:
a7:1e:a1:b4:0f:88:96:2d:f9:63:8e:f7:55:a3:de:
c4:d8:f7:d5:62:8e:5c:df:aa:57:fc:5c:63:43:bd:
40:ea:66:0f:dc:ba:43:8a:e9:60:b9:f9:bf:18:50:
98:60:91:21:c6:6f:87:5f:02:a5:19:63:fe:a6:23:
13:ef:a8:c9:ba:25:75:13:17:34:d4:4a:f4:55:00:
c7:13:98:ad:1f:be:33:f3:73:97:bd:90:fb:c0:81:
90:fd:d9:e3:49:49:0b:24:0e:a3:15:f1:f6:3c:9c:
41:ed:59:3f:58:c4:7a:80:c1:cf:fa:44:04:ee:b7:
c0:d3:a1:36:71:c6:c3:7a:40:59:f9:9e:80:af:a9:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:4D:0F:B2:ED:91:9B:57:EC:28:96:7E:91:17:65:6C:2D:BB:54
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/qglND7LtkZtX7CiWfpEXZWwtu1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.0.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a4:28:f3:2e:e2:14:8e:c4:f9:eb:c8:61:c2:2a:5c:94:38:
a5:67:e6:6d:4f:95:cf:25:49:27:86:81:98:f3:09:03:12:ff:
9b:c1:ad:84:9d:8c:38:f8:82:6f:64:35:bc:30:0b:5c:99:fc:
2b:3c:5f:1b:d3:d2:8d:c0:ea:7f:b9:8e:f0:29:c8:f8:04:ce:
4e:86:17:1b:e4:b5:87:22:04:bc:3c:1e:2a:e2:db:fd:09:ad:
fb:03:0b:04:c8:23:86:dc:f7:2e:cd:70:a4:ba:a6:4e:cb:c3:
1c:2d:78:c6:43:df:b7:da:03:09:63:a2:84:b2:0e:c0:00:49:
e8:c1:27:ca:37:a4:43:87:12:eb:7a:98:da:95:ec:52:77:ad:
f1:da:3b:e2:da:cd:70:f8:35:67:2f:52:a7:10:fd:f2:80:32:
98:7c:a5:ff:6d:33:42:bd:f1:39:96:13:a0:c7:42:16:5e:33:
93:fa:dd:0b:32:4f:c4:1e:3f:de:96:d1:27:80:67:99:d2:81:
fb:9b:8a:c5:95:e6:24:d0:9f:68:61:3a:1f:49:9f:02:e8:ac:
1f:03:c6:0b:36:7e:f1:3b:4f:1b:1d:c3:65:66:8d:a0:c8:0b:
c2:d0:d0:61:d3:6a:69:c4:24:f0:ed:80:89:59:1d:d6:1c:c1:
5f:49:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net