Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa
File: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (raw, json)
Hash identifier: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=
Subject key identifier: A9:EA:50:23:5C:77:F9:56:5D:37:8B:58:D8:88:12:D9:0B:74:43:10
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 0194228DFB94D70BE55690E5D7DC2401A8D1
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208290
IP address blocks: 81.2.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fb:94:d7:0b:e5:56:90:e5:d7:dc:24:01:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9ea50235c77f9565d378b58d88812d90b744310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:6b:f1:af:e7:7e:43:34:0b:30:87:db:16:
dc:77:b2:b0:f9:be:ad:e7:54:55:54:61:50:de:9b:
ba:8e:be:8d:c6:d5:f1:fb:85:67:5a:ef:50:eb:78:
8a:90:90:61:c0:05:15:54:2d:0d:59:20:1e:6b:98:
0b:3a:dd:27:99:07:47:13:99:b6:d4:ba:40:06:47:
03:04:f6:1c:d7:cc:0c:0a:95:4a:d6:75:0a:ba:53:
f6:56:da:64:b0:78:5b:fc:2b:6b:0d:48:60:61:04:
8d:c4:69:ba:ca:9a:29:11:6a:3d:79:a2:7b:5c:fc:
30:44:46:d2:a1:98:9c:78:ea:af:a9:b3:4b:ca:1e:
e0:93:dc:9f:8f:64:1d:b3:9f:d2:4c:b3:db:86:f5:
5f:91:74:10:1e:b3:4c:e6:37:a5:42:3e:5c:c1:c0:
94:3a:91:e1:38:6a:bd:1b:a7:b2:13:43:6b:83:29:
e7:cd:36:2d:19:61:ca:99:fd:99:9a:f7:a1:39:99:
a3:45:aa:61:ff:11:7f:07:4e:0e:76:aa:d7:51:f5:
67:1c:18:c5:5e:74:42:34:02:b1:49:0e:e6:51:63:
33:84:f4:e7:fd:81:93:d1:7e:dd:c2:6e:83:0d:05:
7d:d6:55:96:6c:b8:09:8a:31:1a:a7:0d:18:58:9a:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EA:50:23:5C:77:F9:56:5D:37:8B:58:D8:88:12:D9:0B:74:43:10
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.2.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:81:39:b2:8c:70:04:78:e6:b3:fe:aa:3c:2f:d0:ee:0f:ac:
93:42:3f:32:bb:bc:3d:f1:b3:dc:ab:9c:02:25:6f:8d:24:32:
fa:99:88:77:c6:0f:d7:00:31:9a:ac:d6:8b:cc:76:90:89:f9:
f8:ea:08:ac:49:cb:93:4e:10:f6:88:75:9e:27:db:f6:25:a1:
d3:2e:66:32:e7:f8:3d:53:12:5a:9d:ad:7b:8b:50:3b:25:d6:
1a:39:5f:cb:4e:af:4d:42:d1:3c:cb:1b:65:a5:15:b8:f2:8a:
9e:9a:e1:76:b1:f4:28:2c:2b:98:de:3d:3e:5a:6f:f2:bf:cb:
1f:09:1a:48:0b:08:ef:70:b9:d2:46:84:e4:62:49:6b:6f:26:
da:39:df:86:c3:54:2e:ec:f3:6a:59:c2:26:d1:82:da:a3:dc:
5c:5f:cc:03:5f:c0:73:6e:e9:9d:1e:b2:c0:61:9e:15:a0:fc:
0a:44:12:58:c5:33:76:a7:db:0e:ab:ca:f1:b8:5f:90:a7:58:
c0:8a:70:2a:56:41:33:38:af:96:d4:29:50:56:f3:53:2c:a5:
f7:b6:9f:cd:7f:88:09:81:ed:46:6c:00:aa:56:e3:b3:0f:e3:
cc:80:66:4f:a0:3a:44:21:b2:f2:42:6a:95:f9:f0:7d:69:0f:
f5:9b:66:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net