Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qypZ3nSxQtXiVvavkUgIAdVG3mQ.roa
File: qypZ3nSxQtXiVvavkUgIAdVG3mQ.roa (raw, json)
Hash identifier: WdHMrRv9/Oy4XyhqDVPJcV+fmEYBgX+DEZf8BATVt0U=
Subject key identifier: AB:2A:59:DE:74:B1:42:D5:E2:56:F6:AF:91:48:08:01:D5:46:DE:64
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D7808A49E6022D92CBB49A7A414E90
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qypZ3nSxQtXiVvavkUgIAdVG3mQ.roa
Signing time: Wed 01 Jan 2025 21:48:33 +0000
ROA not before: Wed 01 Jan 2025 21:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42663
IP address blocks: 213.175.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:80:8a:49:e6:02:2d:92:cb:b4:9a:7a:41:4e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab2a59de74b142d5e256f6af91480801d546de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:86:2a:c1:db:d0:19:8c:54:3a:39:bf:c0:
79:a1:85:e6:83:41:4e:90:6b:18:bf:6d:08:1e:25:
c7:34:6f:e2:8b:01:d1:e9:1b:3c:ec:2f:28:53:88:
96:65:3b:8a:0e:61:9a:c5:bc:f0:fe:63:61:b9:2e:
35:70:f2:a4:e6:c4:4f:d3:84:4b:34:c4:3d:ca:a1:
cc:fa:d9:9a:64:de:de:18:ec:c0:55:3d:80:b5:24:
ee:02:a6:3a:f5:cf:8a:ec:99:50:1f:28:3d:06:de:
4b:a6:9f:7f:28:3a:71:4c:0d:69:4c:4c:0d:ef:b5:
2a:71:8c:16:43:ef:b0:1b:b5:bf:95:c2:45:22:90:
b8:2e:61:f1:66:d8:3e:be:fc:35:5c:02:4d:90:52:
7e:aa:be:78:09:8b:e1:6c:02:51:61:36:fe:14:69:
29:e9:1a:6f:83:22:61:ee:ac:71:35:95:d1:fe:92:
53:84:bb:6e:e9:8b:ef:a8:05:79:ea:b4:b3:9b:ce:
6d:a3:b1:8a:b9:54:8e:03:77:2b:9f:d2:08:26:ef:
28:09:be:85:3b:3e:60:28:79:3d:ab:07:dd:f7:16:
e1:ce:1a:6b:16:9b:1c:d7:92:fc:ae:2c:52:76:b4:
34:7c:41:5f:cf:fa:40:6e:61:7e:a6:b9:43:66:30:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2A:59:DE:74:B1:42:D5:E2:56:F6:AF:91:48:08:01:D5:46:DE:64
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qypZ3nSxQtXiVvavkUgIAdVG3mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0d:01:e2:46:71:45:53:71:7e:bc:9d:4f:61:01:1f:1a:24:
b9:b6:24:71:ed:34:94:a2:66:d3:ea:b2:19:1a:55:74:23:12:
9c:4a:55:36:87:f0:c4:5b:04:18:53:04:eb:2c:48:06:a2:fd:
3e:07:1e:6d:ce:be:68:f7:9d:ae:6f:95:26:83:e8:4b:67:fc:
86:53:68:fa:e6:6d:1a:75:25:94:4e:4d:52:85:6d:2f:0c:e5:
d9:ca:3c:1c:7d:b4:9f:f2:5e:3b:41:a8:6d:57:92:5e:4d:a7:
b2:79:51:08:dc:89:3e:1d:e0:33:1b:97:e2:48:63:d7:b9:f9:
76:1f:53:cd:2b:e9:fc:a7:ed:54:fc:d9:d0:a7:07:28:7b:b1:
d3:14:1c:52:7b:c0:52:70:0b:93:3f:75:e3:17:ed:d0:52:eb:
ab:80:cc:b4:e3:6c:01:89:7b:c8:6e:f3:54:38:d7:2f:8d:8b:
9b:b7:7f:59:bb:16:34:32:3f:13:fa:d4:82:16:13:30:90:a7:
a5:57:24:d8:ed:05:53:20:b4:9a:3a:09:7b:9d:ce:e0:40:73:
10:77:89:9f:37:5c:d7:5d:59:9e:ed:b7:ee:06:f0:a4:3b:44:
70:bd:78:81:61:6f:b0:f0:69:85:e2:dd:e6:1e:4c:7e:f7:7d:
21:4c:9e:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj14CKSeYCLZLLtJp6QU6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjUwMTAxMjE0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjJhNTlkZTc0YjE0MmQ1ZTI1NmY2YWY5MTQ4MDgwMWQ1NDZkZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzyGKsHb0BmMVDo5v8B5oYXmg0FO
kGsYv20IHiXHNG/iiwHR6Rs87C8oU4iWZTuKDmGaxbzw/mNhuS41cPKk5sRP04RL
NMQ9yqHM+tmaZN7eGOzAVT2AtSTuAqY69c+K7JlQHyg9Bt5Lpp9/KDpxTA1pTEwN
77UqcYwWQ++wG7W/lcJFIpC4LmHxZtg+vvw1XAJNkFJ+qr54CYvhbAJRYTb+FGkp
6RpvgyJh7qxxNZXR/pJThLtu6YvvqAV56rSzm85to7GKuVSOA3crn9IIJu8oCb6F
Oz5gKHk9qwfd9xbhzhprFpsc15L8rixSdrQ0fEFfz/pAbmF+prlDZjB5EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKsqWd50sULV4lb2r5FICAHVRt5kMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvcXlwWjNuU3hRdFhpVnZhdmtVZ0lBZFZHM21RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a9OMA0G
CSqGSIb3DQEBCwUAA4IBAQBKDQHiRnFFU3F+vJ1PYQEfGiS5tiRx7TSUombT6rIZ
GlV0IxKcSlU2h/DEWwQYUwTrLEgGov0+Bx5tzr5o952ub5Umg+hLZ/yGU2j65m0a
dSWUTk1ShW0vDOXZyjwcfbSf8l47QahtV5JeTaeyeVEI3Ik+HeAzG5fiSGPXufl2
H1PNK+n8p+1U/NnQpwcoe7HTFBxSe8BScAuTP3XjF+3QUuurgMy042wBiXvIbvNU
ONcvjYubt39ZuxY0Mj8T+tSCFhMwkKelVyTY7QVTILSaOgl7nc7gQHMQd4mfN1zX
XVme7bfuBvCkO0RwvXiBYW+w8GmF4t3mHkx+930hTJ4x
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net