Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa
File: qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa (raw, json)
Hash identifier: 2E8e6YWLaIukfT6w9as+SzWaRk3QDMUINAxBnfY7Uh0=
Subject key identifier: AA:2E:C8:22:C1:E2:C3:6A:F9:02:92:E3:AA:69:DF:21:9C:83:62:B2
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 0194221F584087C2F3DD00B94A4EDEA3814D
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa
Signing time: Wed 01 Jan 2025 13:47:46 +0000
ROA not before: Wed 01 Jan 2025 13:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48422
IP address blocks: 185.93.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:58:40:87:c2:f3:dd:00:b9:4a:4e:de:a3:81:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Jan 1 13:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2ec822c1e2c36af90292e3aa69df219c8362b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:4e:d5:b0:27:7b:5e:25:87:9a:13:00:65:
7f:a0:ee:80:91:0a:a0:1c:82:12:f9:42:7d:64:98:
eb:cb:4a:07:86:a2:f9:98:ca:38:1d:87:ba:54:9a:
b5:d2:cf:4d:a0:e1:c5:26:d7:9b:3c:2c:87:19:3a:
23:ac:27:81:e4:17:47:a0:a1:08:c1:18:59:15:e9:
3e:18:f4:c2:56:db:91:de:1d:49:50:26:25:87:78:
b9:99:82:64:43:23:8d:8f:b0:91:9f:91:ee:d4:bc:
67:4a:a5:77:44:07:41:e7:06:d4:5a:96:51:e9:d1:
6e:ec:e1:17:5c:ed:4c:f7:10:33:7c:2c:ec:a2:9c:
f7:98:1f:30:24:4c:24:04:24:38:64:dc:2e:57:f7:
82:3f:5b:d5:6f:56:b5:21:49:d6:fb:47:b2:11:ed:
5c:c5:f8:68:67:7e:b0:00:a3:ea:43:f1:a4:93:7d:
b1:9c:c0:f0:ce:88:8b:3a:e6:bc:29:99:4f:6f:76:
a9:76:8b:ee:a0:e9:86:65:dc:90:44:f2:6f:8b:37:
73:2f:19:13:83:12:dd:84:8e:4a:f2:9f:46:d9:c8:
4e:d4:1c:3d:7e:5a:b4:09:d4:11:ef:af:49:43:fd:
4b:09:1e:bf:09:07:41:8c:26:84:d9:7b:35:e1:4e:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:C8:22:C1:E2:C3:6A:F9:02:92:E3:AA:69:DF:21:9C:83:62:B2
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.184.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0c:82:9f:54:32:28:85:d5:e9:68:13:b3:50:0a:4b:5b:2c:
75:3e:04:5a:ca:e3:6f:e4:56:02:ac:a3:22:f1:2b:bb:76:1d:
33:af:b4:e3:fa:42:bc:04:66:e7:42:43:b7:0b:a6:6a:40:2a:
fa:95:b1:a6:c9:8a:2c:aa:12:ed:7b:bf:4b:6a:86:80:af:74:
2c:16:5e:88:a9:c4:25:d2:92:58:a3:fa:b6:29:0c:6b:c6:91:
34:ea:97:36:2a:94:91:e1:63:3f:2d:63:f8:8b:d5:3d:bc:e3:
8f:80:4a:23:d7:4b:b9:a7:7d:9b:fe:aa:b5:c7:68:09:30:84:
fd:c9:52:a6:0e:a3:cd:15:0d:a2:fc:90:bd:ac:70:5d:88:e2:
77:cb:67:ff:b4:7c:08:30:41:a0:67:e2:c0:55:dd:de:f7:17:
37:35:22:b0:d0:df:00:99:bd:51:c7:d3:46:d0:94:7f:f8:14:
0e:00:93:7d:1e:2f:00:aa:7e:09:e4:e3:07:7f:3c:44:b0:09:
08:9f:6a:03:80:2a:3d:f2:ce:b3:dd:d9:73:bb:25:11:a8:c5:
53:e7:f3:06:5b:99:82:78:2f:de:ec:fb:b5:04:8d:f4:cc:b5:
da:88:a5:f9:fa:71:5a:f5:73:59:6e:de:a6:7f:67:9f:f7:42:
60:59:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net