Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/qjem72uO7DgkEP8SDk6XnjOnFt8.roa
File: qjem72uO7DgkEP8SDk6XnjOnFt8.roa (raw, json)
Hash identifier: oYe+IghrANew49oUvqDKOy68qs0Z1UKOAqVvGxaiu7o=
Subject key identifier: AA:37:A6:EF:6B:8E:EC:38:24:10:FF:12:0E:4E:97:9E:33:A7:16:DF
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 0194221FAEA3D9AC1FF6162FA53B3FB00CC4
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/qjem72uO7DgkEP8SDk6XnjOnFt8.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50973
IP address blocks: 79.171.48.0/21 maxlen: 21
79.171.48.0/24 maxlen: 24
79.171.49.0/24 maxlen: 24
79.171.50.0/24 maxlen: 24
79.171.52.0/24 maxlen: 24
79.171.55.0/24 maxlen: 24
188.172.96.0/24 maxlen: 24
188.172.97.0/24 maxlen: 24
188.172.98.0/24 maxlen: 24
188.172.99.0/24 maxlen: 24
188.172.100.0/24 maxlen: 24
188.172.101.0/24 maxlen: 24
188.172.102.0/24 maxlen: 24
188.172.103.0/24 maxlen: 24
188.172.104.0/22 maxlen: 22
188.172.108.0/24 maxlen: 24
188.172.109.0/24 maxlen: 24
188.172.110.0/24 maxlen: 24
188.172.111.0/24 maxlen: 24
2a0a:a0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ae:a3:d9:ac:1f:f6:16:2f:a5:3b:3f:b0:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa37a6ef6b8eec382410ff120e4e979e33a716df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:6d:ae:50:3e:ae:3d:1e:ed:aa:43:6b:fa:
6e:0e:ec:06:26:f8:4c:25:00:d9:62:15:6a:31:42:
66:1e:6a:cf:42:c9:1e:de:a6:6a:a2:1c:11:66:53:
eb:60:59:21:20:35:c3:47:f3:c5:82:2d:40:d7:20:
62:62:8a:71:dd:4f:99:09:e9:44:92:64:5c:f1:bb:
40:40:e4:c3:05:31:3f:29:9c:cc:90:4d:50:f3:5e:
1e:be:af:aa:0b:b4:d5:76:0b:79:d4:27:ee:a6:66:
6d:0f:0b:6e:a8:ed:21:40:07:58:c0:dd:5b:4e:5d:
6f:a3:11:b0:58:3c:1d:11:37:28:7f:17:1b:35:70:
f2:02:9d:e3:bc:9d:cf:2b:29:0a:ff:2c:2c:a2:e5:
9c:73:9c:e6:73:a3:46:3a:fd:87:a5:7c:40:bc:b4:
13:45:20:fd:4f:0d:43:c5:f9:b8:0e:45:f6:e9:49:
ff:2b:9a:7a:fe:99:bf:72:0c:9e:dd:f4:b1:73:ca:
c2:d2:4b:84:47:e9:ab:01:1e:ea:8b:33:d5:4a:44:
3b:1e:34:57:0a:90:00:64:cc:ba:14:aa:0f:98:81:
41:53:bf:8e:17:05:ab:f9:c5:3f:56:f6:5f:c8:bd:
08:55:83:44:28:cf:18:c9:bc:6d:db:ee:f1:1a:3d:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:37:A6:EF:6B:8E:EC:38:24:10:FF:12:0E:4E:97:9E:33:A7:16:DF
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/qjem72uO7DgkEP8SDk6XnjOnFt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.48.0/21
188.172.96.0/20
IPv6:
2a0a:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
59:ad:65:6e:f4:61:a0:96:96:6b:b5:1c:a7:e7:41:c4:24:a9:
30:38:ea:96:aa:4f:f5:7a:8e:ea:ae:ca:6b:54:d7:c9:d9:a0:
0f:79:78:71:c0:8d:a9:16:55:cc:ef:ca:50:ac:fa:ed:18:ab:
1a:34:9c:ca:b2:88:ea:93:60:8f:19:72:b2:88:bb:0b:fa:2c:
3c:d4:6b:30:10:32:d0:b2:fb:c4:28:5c:9d:f2:8b:c7:ef:b0:
df:9e:26:ca:24:f1:40:0f:33:b1:4c:57:36:72:5c:7f:67:75:
3f:f8:65:8a:75:16:3a:84:77:a3:19:ff:68:8d:22:44:83:a9:
7e:b9:ab:ec:80:8d:cc:cf:89:c3:4e:3a:f0:10:c9:55:c7:e9:
f2:10:72:d5:b1:a9:47:f7:c3:95:e5:65:e3:a9:5d:79:c7:db:
d5:0f:5f:85:d1:1b:b6:08:6a:44:6f:d5:d6:02:72:61:ac:ab:
b0:44:c4:74:6f:b3:69:ce:03:c8:7d:88:f3:8b:d5:b5:b6:08:
c0:95:2b:7b:31:da:d9:f8:33:1a:3a:d0:ca:62:8f:d6:3d:eb:
ea:38:d4:1c:af:34:c3:a8:59:61:8f:0e:d7:a8:43:91:c4:1e:
3e:aa:4c:2c:4e:c5:b7:77:c5:6b:cd:ba:be:02:c2:9e:f1:82:
c9:78:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net