Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa
File: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (raw, json)
Hash identifier: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=
Subject key identifier: 43:B0:21:9A:53:C5:D0:FE:21:7B:50:DD:9F:20:73:C4:ED:54:6C:D8
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 019423D7291BDA92958BC555EBDC50546CB7
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47116
IP address blocks: 31.223.232.0/21 maxlen: 21
37.143.76.0/22 maxlen: 22
93.189.112.0/21 maxlen: 21
185.91.184.0/22 maxlen: 22
2a00:10b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:29:1b:da:92:95:8b:c5:55:eb:dc:50:54:6c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43b0219a53c5d0fe217b50dd9f2073c4ed546cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e7:08:11:6a:d0:f3:39:05:4b:39:ac:13:68:
01:3f:56:c7:7d:df:15:5d:76:d1:57:15:73:98:24:
c9:f1:3d:2a:b6:68:00:55:f9:93:7f:4d:ce:a6:81:
98:04:7e:fb:a9:aa:6a:e7:a9:1a:78:5d:b4:81:d7:
e9:f0:0d:5b:8b:80:80:02:78:b9:19:84:63:34:3a:
77:f2:f7:ad:f5:fc:bd:c5:ea:ae:34:50:58:31:49:
fa:cf:c5:73:77:d5:5f:fb:62:5c:84:4b:72:d1:14:
b3:a5:7a:ea:e1:7d:c4:cc:71:86:a1:1b:76:83:58:
4a:3e:08:57:db:aa:39:a7:1f:e4:dd:18:7f:88:87:
2c:40:24:f7:05:01:de:99:44:de:da:a1:20:4f:98:
59:54:d3:d4:43:06:4e:58:52:2b:a3:a5:6f:32:1b:
43:29:f7:a9:72:87:2c:9b:c2:aa:8c:6a:ed:9c:a4:
79:6a:b7:9a:37:3a:e7:3a:de:40:f2:da:f4:5c:41:
4b:e0:3c:fd:b4:fa:30:f9:24:85:4c:ef:dd:5d:b7:
af:52:b9:be:98:af:3b:e5:a6:c9:6f:6a:48:2b:82:
0d:fa:3b:18:bc:9d:d7:36:d4:89:c8:9a:13:c1:23:
c9:b1:97:5e:bf:f3:f7:5f:b5:27:90:af:03:b4:ec:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:21:9A:53:C5:D0:FE:21:7B:50:DD:9F:20:73:C4:ED:54:6C:D8
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.232.0/21
37.143.76.0/22
93.189.112.0/21
185.91.184.0/22
IPv6:
2a00:10b8::/32
Signature Algorithm: sha256WithRSAEncryption
21:0e:3d:fc:95:20:d8:e8:22:ad:27:6e:e3:3c:d2:cc:d5:7a:
f1:1b:a8:e2:8a:56:d2:a6:98:d7:a9:91:33:f6:c3:14:6f:da:
34:f1:5f:64:7f:25:49:2f:6a:4a:e4:ce:49:77:7c:21:eb:6c:
58:d9:1a:50:81:b5:a4:a4:9a:69:60:c4:98:25:0f:9a:fa:09:
e7:ec:7d:79:0f:d9:77:d0:45:69:67:6c:34:28:db:51:18:3a:
2f:13:12:16:b1:a1:65:1b:3f:30:9b:74:ca:3a:ac:03:d1:62:
49:99:45:88:f5:65:6a:00:dd:d4:d4:a5:7f:8c:47:6d:f8:09:
3f:39:67:19:f2:6e:3e:67:fc:8e:a0:00:ad:fd:da:08:a4:71:
e1:b5:c2:74:2b:59:3b:dd:89:35:13:8a:50:77:b0:34:81:98:
39:c6:48:e2:72:12:01:4e:44:d7:d9:80:0e:34:cd:65:a9:72:
8e:a8:4f:32:ad:7a:a7:2b:b9:c9:ab:a6:80:bb:08:8b:9e:7d:
60:24:47:76:dc:fb:2b:53:41:50:55:c0:2c:ca:46:cf:b5:ef:
2b:07:8c:56:0e:5c:b6:9e:58:8a:3c:d7:7a:86:d4:a3:0e:54:
88:79:14:3e:17:45:e8:37:87:a8:a5:81:dc:2b:83:83:9a:03:
95:2b:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net