Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/qNut__4tdZLk1BbU8qRMsO7FLqk.roa
File: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (raw, json)
Hash identifier: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=
Subject key identifier: A8:DB:AD:FF:FE:2D:75:92:E4:D4:16:D4:F2:A4:4C:B0:EE:C5:2E:A9
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 019420D5F4C2BAC7FE1D3457E1FD36149B17
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/qNut__4tdZLk1BbU8qRMsO7FLqk.roa
Signing time: Wed 01 Jan 2025 07:48:00 +0000
ROA not before: Wed 01 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206084
IP address blocks: 194.15.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f4:c2:ba:c7:fe:1d:34:57:e1:fd:36:14:9b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Jan 1 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8dbadfffe2d7592e4d416d4f2a44cb0eec52ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:f3:3d:54:4c:8c:f7:ff:db:62:4b:fe:8c:
8e:a3:3e:6c:65:51:a8:c7:9e:5b:ed:fe:55:38:07:
bc:bf:21:82:98:40:ba:43:ca:ca:82:23:d4:e8:70:
b5:70:37:c1:ee:78:9d:db:21:f1:ea:f7:a2:4c:9a:
e1:39:c5:84:ac:20:e9:df:fd:16:85:30:e2:8f:4b:
47:f6:47:9a:8d:1b:b1:39:b3:19:da:f9:1a:97:69:
5a:54:69:17:3d:99:4e:3d:3b:b5:bf:11:be:0f:fd:
a4:47:2a:f3:a8:cd:8f:fc:63:7f:01:a1:a0:82:50:
35:7f:1c:0e:b3:76:2d:cc:a5:09:70:90:6b:fb:3f:
a1:ed:d2:ee:6b:95:fd:af:a2:cd:91:f1:1d:ff:9d:
68:33:3b:0b:c2:12:e6:b6:05:1e:92:51:6d:57:45:
48:11:78:e9:b2:80:0a:01:bd:b7:16:93:55:f4:b2:
1a:ba:7d:04:34:50:31:b8:cd:d1:82:e7:1b:3d:bc:
13:de:48:33:d7:09:5f:2e:84:98:cb:47:ea:99:a7:
0f:15:70:eb:cc:4f:09:72:2f:e9:54:bc:15:63:90:
f7:ad:38:33:32:a9:6b:e3:6a:33:3e:81:73:07:9c:
b7:2f:0d:88:14:fe:ce:06:76:d8:4c:e3:11:81:12:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DB:AD:FF:FE:2D:75:92:E4:D4:16:D4:F2:A4:4C:B0:EE:C5:2E:A9
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/qNut__4tdZLk1BbU8qRMsO7FLqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.251.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f9:a3:48:4e:f2:ab:4e:13:62:f4:53:33:d6:22:35:dd:75:
c0:8e:09:14:17:4c:f0:0d:f8:86:86:05:88:d4:cd:96:5b:9d:
50:8b:38:c9:3f:ed:d2:fa:4d:73:14:04:87:ff:2c:f6:7a:b8:
8d:09:c6:6c:c5:bc:cf:ee:12:52:ff:d0:4f:ef:d5:1a:86:2a:
b8:6f:05:7c:45:a1:23:3b:90:d0:09:b7:a2:3a:58:82:5d:94:
1a:56:7a:ca:52:b2:ed:69:4e:2b:13:67:23:0f:0a:1e:f6:a7:
01:c2:8e:30:39:bf:63:a1:d5:18:79:15:d8:dc:3b:b8:a0:67:
87:8b:54:e2:be:32:ff:f3:9c:cc:35:c8:dd:0f:3e:eb:ee:93:
9e:73:d4:8e:46:ef:e0:8b:7f:2a:37:9a:20:53:36:88:ca:10:
1c:c4:14:9e:b1:ed:89:37:0b:19:5f:5b:e0:e5:3d:82:79:86:
71:b8:27:76:64:c2:fc:09:46:f6:0c:b4:5f:92:0b:04:45:27:
7f:8b:82:75:33:ff:7e:c8:fd:59:83:ed:32:0b:b9:3c:64:e2:
fd:f6:04:ad:52:a8:89:af:ab:ba:5c:fc:44:a3:7d:fc:bb:ca:
0b:3e:2a:b6:1b:09:69:36:55:41:82:3e:10:e0:93:cd:b4:74:
00:c1:56:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net