Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa
File: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (raw, json)
Hash identifier: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=
Subject key identifier: 42:E0:DE:ED:86:3F:B1:20:35:64:79:1A:63:56:06:03:B7:E4:E1:29
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 019426D94746F20922D7AC55315880F7194A
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa
Signing time: Thu 02 Jan 2025 11:49:21 +0000
ROA not before: Thu 02 Jan 2025 11:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29479
IP address blocks: 194.126.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:47:46:f2:09:22:d7:ac:55:31:58:80:f7:19:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Jan 2 11:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42e0deed863fb1203564791a63560603b7e4e129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:91:13:50:8c:4b:47:bf:83:eb:0c:96:41:
58:2b:90:56:e6:bc:1c:8a:d3:a1:3b:bc:d1:ba:01:
2c:14:f7:26:32:d3:b4:9e:fd:d9:eb:bd:1c:17:ee:
2d:d9:9a:66:ce:a9:07:29:78:5d:f2:a7:23:79:65:
61:4a:e0:f7:81:bb:c4:34:ad:c9:7e:9f:dc:4f:5b:
e3:58:d9:ef:33:a9:f8:2c:c5:b2:ce:71:34:cb:62:
69:50:f0:d8:60:14:53:83:67:84:25:a4:3f:8e:3d:
86:c6:22:95:98:6d:d7:3e:96:ed:9a:86:dc:31:c3:
7b:5b:1b:43:f6:14:8c:3f:47:31:57:82:d1:ea:71:
f5:c1:12:b2:b4:0a:d7:a1:76:63:18:73:cb:cf:5e:
6d:4b:09:a2:41:29:1e:41:39:f4:e9:b1:2c:20:07:
ff:96:4c:e8:17:04:77:c0:5f:39:4b:9e:8d:f3:6a:
18:48:38:c7:fa:2d:82:9d:23:b2:3c:aa:7c:90:cb:
dd:bd:45:9c:5b:ea:57:72:26:c3:a8:01:0e:95:98:
18:fa:e0:85:b5:e8:71:96:68:05:33:0d:3c:b3:64:
be:d6:05:82:b3:1e:94:00:14:bd:f2:3c:49:00:19:
d0:d3:90:2e:d8:1d:3a:ac:f7:48:8b:b3:0e:2e:4d:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:DE:ED:86:3F:B1:20:35:64:79:1A:63:56:06:03:B7:E4:E1:29
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.211.0/24
Signature Algorithm: sha256WithRSAEncryption
60:bc:a7:67:63:e5:52:9a:c4:58:32:44:26:1c:43:8b:d6:43:
bd:5e:51:69:e4:3b:4c:2e:6d:e6:cc:2c:92:77:00:ee:92:78:
80:89:18:7d:26:5e:7b:fd:ce:ce:55:c7:fa:72:50:17:af:fd:
00:5a:ba:03:f1:0b:aa:59:aa:a3:f9:da:80:b5:0e:41:6c:dc:
50:e9:5b:dc:18:47:2e:d5:07:41:a9:c6:53:a8:52:f0:0d:b6:
37:f7:ba:87:2b:95:0f:5d:9f:db:f3:f6:f1:b3:05:19:b1:5b:
27:a4:27:4f:78:8d:77:43:d6:ee:0c:c6:de:b0:95:9f:d2:8b:
9b:27:6b:27:f9:58:f7:33:c6:bc:77:7f:69:a3:ec:57:43:3f:
57:be:c9:95:ae:78:16:89:44:ee:33:db:72:4c:38:46:63:ae:
1e:30:4d:a4:7f:69:7c:48:bf:8c:29:67:50:a8:73:5b:b4:d8:
3d:42:f4:61:bf:ba:97:9a:63:ee:f3:ff:b1:61:02:08:f2:0f:
f4:46:db:14:cc:41:b7:14:cd:18:0a:76:b2:d2:70:67:7e:62:
39:ca:ed:19:3b:f2:64:a6:50:e4:b8:59:98:25:b1:9a:bb:0a:
6e:62:39:69:f3:15:dc:23:34:cc:6e:af:e6:26:10:d3:52:4f:
83:9d:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:39 2025 by rpki-client on console.sobornost.net