Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa
File: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (raw, json)
Hash identifier: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=
Subject key identifier: B6:A1:FF:42:5A:51:1C:2D:C8:F8:C1:A8:37:12:E4:00:74:3E:9C:5F
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 0194221F7D5E8D4DD478D5921F95A2A3F81F
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57871
IP address blocks: 176.110.128.0/20 maxlen: 20
176.110.128.0/24 maxlen: 24
176.110.129.0/24 maxlen: 24
176.110.130.0/24 maxlen: 24
176.110.131.0/24 maxlen: 24
176.110.132.0/24 maxlen: 24
176.110.133.0/24 maxlen: 24
176.110.134.0/23 maxlen: 23
176.110.136.0/23 maxlen: 23
176.110.138.0/23 maxlen: 23
176.110.140.0/23 maxlen: 23
176.110.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7d:5e:8d:4d:d4:78:d5:92:1f:95:a2:a3:f8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6a1ff425a511c2dc8f8c1a83712e400743e9c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:dc:c1:37:75:b9:6f:24:77:a0:2d:03:8a:
7f:31:91:91:3b:8a:b2:27:37:32:42:fc:34:3e:17:
74:cb:4b:f0:51:6f:16:6f:48:a6:dd:6e:4a:33:e5:
bd:ea:a8:df:64:df:f7:6e:10:0e:b3:0d:44:9a:c9:
d3:b7:84:d6:58:b3:c7:66:b7:dd:c0:68:23:f8:58:
2c:e5:19:84:99:55:14:24:ef:fe:93:b8:13:dd:ec:
45:8c:36:94:b1:1a:34:d0:58:69:5b:1e:7b:5c:d0:
31:8d:e4:0e:67:f9:02:c3:73:77:61:6e:b9:44:02:
8c:a7:d6:7f:97:88:48:25:c6:b7:87:12:42:f1:7e:
4e:07:89:ad:e1:9d:d8:b8:fb:31:fd:7b:c9:c9:30:
56:9c:0c:11:a5:74:54:40:f2:d4:eb:12:b0:6e:8e:
58:04:15:55:f1:b4:55:80:c7:26:48:82:bd:a4:a0:
0d:4c:2b:64:2c:22:1d:c7:e3:a8:cc:7a:74:50:f5:
36:e3:d7:17:5b:b8:fe:c3:3f:08:bd:b9:06:ae:e0:
a1:68:8f:ed:b2:fc:01:01:46:17:8f:c3:a4:db:8f:
8f:3c:1f:e9:c0:a7:65:7f:0e:a1:4d:f0:97:f8:94:
fa:8c:43:b3:6d:fc:e0:e9:06:2a:34:0d:e2:e0:54:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A1:FF:42:5A:51:1C:2D:C8:F8:C1:A8:37:12:E4:00:74:3E:9C:5F
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.128.0/20
Signature Algorithm: sha256WithRSAEncryption
49:36:4c:08:52:f9:09:af:41:ab:b5:40:0c:f8:70:c9:cf:48:
d7:5c:e4:c9:dc:7e:05:0a:89:1e:9a:6c:9f:36:bf:3f:86:48:
d0:77:b1:3e:e6:c0:05:38:18:e1:3c:7c:36:81:e0:48:6f:0b:
f8:f0:16:b3:ec:a1:fd:4b:3f:f8:38:e0:1c:e5:99:d9:c8:a6:
8b:c2:c9:ad:24:92:fb:ce:3c:bf:5d:29:b5:fe:c5:24:1c:7d:
32:61:b8:21:59:76:be:d7:f7:6b:6f:53:ec:6e:5c:55:f8:2a:
0c:93:9d:f4:65:fe:c2:f8:66:47:46:ec:06:4d:66:29:00:c1:
91:44:48:05:ed:b8:4d:a5:d1:83:dc:eb:7a:00:b8:e6:3f:96:
6a:03:c6:a7:e8:0b:81:c8:65:80:eb:f7:7d:3a:7e:9a:cb:18:
60:e1:52:1e:86:b9:48:ca:ab:b2:dc:bb:0b:7c:49:c3:93:d0:
cc:53:4d:1b:dc:d3:28:ee:d6:84:3c:e2:98:b0:32:21:de:44:
59:9d:87:a2:69:a5:e3:34:80:bf:08:a2:ef:26:3e:3f:2d:ef:
eb:bb:e4:2b:bb:bb:95:eb:36:d3:4a:16:48:b3:34:1b:ad:a0:
ac:10:0e:d2:13:55:d3:b1:cc:6f:d7:9f:ca:5f:d9:a7:f2:3b:
8b:b1:71:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net