Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/QrSU_Lf7dcN4wLABGo09onOb-5k.roa
File: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (raw, json)
Hash identifier: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=
Subject key identifier: 42:B4:94:FC:B7:FB:75:C3:78:C0:B0:01:1A:8D:3D:A2:73:9B:FB:99
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019427B5BEF02AF81F6C88BEB2ECC1A06455
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/QrSU_Lf7dcN4wLABGo09onOb-5k.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203130
IP address blocks: 193.247.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:be:f0:2a:f8:1f:6c:88:be:b2:ec:c1:a0:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b494fcb7fb75c378c0b0011a8d3da2739bfb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:d1:31:2c:ba:3a:91:30:4f:35:24:f2:f5:
07:f3:aa:a0:7a:96:c2:58:67:12:65:d5:09:42:bd:
71:f5:56:1f:f9:77:4e:03:ed:dc:3f:49:1e:bf:f2:
82:0c:6b:65:e3:c4:a5:ab:b4:4c:f1:2d:d6:c8:36:
72:b6:a0:01:00:e9:b1:45:44:f3:2d:dd:68:0a:cb:
f8:21:64:39:7f:09:96:05:c7:7b:81:5d:0d:cc:b4:
93:39:a8:b6:2b:a8:fc:f0:2e:75:eb:34:d0:bf:0c:
32:33:ae:32:62:59:29:7f:9e:86:e9:d3:5e:22:90:
f9:20:81:1b:c5:72:b0:fb:b7:10:b8:a5:e7:dd:67:
61:13:6f:61:21:0c:3e:1c:f9:49:83:59:ad:73:f9:
6f:ff:a7:62:77:a5:d8:5f:74:4f:7f:84:08:7a:57:
04:3b:48:72:42:33:8c:9d:7f:a0:c1:96:72:66:37:
28:08:b1:e3:c7:0d:60:e4:77:8b:fe:12:b7:44:47:
f9:c2:c7:8d:92:27:9a:22:2a:ff:9a:4b:7f:84:29:
d9:32:8b:fa:fb:6a:d6:fe:54:62:61:ee:d2:04:62:
fb:8d:b0:8c:e9:0a:8e:d8:a2:a5:17:b4:cd:1f:d8:
28:46:e7:b6:88:b5:81:68:4e:6c:c5:79:8b:09:cf:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:94:FC:B7:FB:75:C3:78:C0:B0:01:1A:8D:3D:A2:73:9B:FB:99
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/QrSU_Lf7dcN4wLABGo09onOb-5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.203.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f6:dc:01:68:46:13:f7:c5:9e:68:51:77:b4:a3:e1:46:dd:
e3:9c:86:95:d5:50:78:06:47:28:a1:38:e5:2a:94:cb:2a:3d:
bb:99:9f:61:db:81:8b:c5:0e:4e:63:68:53:a7:75:4b:6a:34:
bd:85:76:63:75:7e:ca:ff:02:fd:7a:82:44:f4:04:dd:6c:2b:
01:b1:b5:9a:06:24:25:3a:09:b7:0e:8c:e7:cf:ab:25:b4:be:
9a:ce:4a:a2:61:c9:b5:8b:3c:54:47:ad:ae:01:87:3e:99:89:
43:fe:f9:f9:46:a0:bf:9c:ac:bb:ba:eb:8c:49:28:c5:9f:10:
79:c4:33:6e:9d:9b:92:94:c2:cc:04:ee:bd:cf:be:c8:4c:32:
cc:90:f0:de:16:ab:b1:fb:41:ae:91:6d:b8:46:6f:34:db:27:
66:dc:89:e5:03:67:f6:7c:be:f9:db:d2:8b:14:0b:07:69:dd:
81:ae:bc:2e:46:93:c5:e9:6c:a6:f4:61:49:57:16:b1:40:35:
76:ea:a5:52:60:7e:1b:00:58:f9:b5:7f:56:91:79:1d:52:a8:
bf:0e:5e:48:22:20:62:02:bf:de:b0:28:2f:4f:e3:b4:61:e2:
02:cc:33:1e:0a:4d:f2:36:a8:77:0f:6d:39:21:29:8c:ab:29:
85:f4:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net