Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/qTVlhtMwwYSmdU4s4aw8LX1HUQk.roa
File: qTVlhtMwwYSmdU4s4aw8LX1HUQk.roa (raw, json)
Hash identifier: 1OoG2vJGoOMZAkIiJXpkJz8avwOwz/vrOZSTQO2Gud8=
Subject key identifier: A9:35:65:86:D3:30:C1:84:A6:75:4E:2C:E1:AC:3C:2D:7D:47:51:09
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 019425FD8238D4E03DD461EFD9C2F43F9623
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/qTVlhtMwwYSmdU4s4aw8LX1HUQk.roa
Signing time: Thu 02 Jan 2025 07:49:18 +0000
ROA not before: Thu 02 Jan 2025 07:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201769
IP address blocks: 78.93.50.0/24 maxlen: 24
185.114.68.0/24 maxlen: 24
212.93.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:82:38:d4:e0:3d:d4:61:ef:d9:c2:f4:3f:96:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Jan 2 07:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9356586d330c184a6754e2ce1ac3c2d7d475109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:a0:93:78:77:0e:66:0a:32:eb:48:6a:c3:
f9:b1:6d:5a:ed:77:b0:49:25:42:71:7f:19:53:35:
6c:8e:af:31:19:02:17:ce:88:08:f8:56:43:c2:72:
d3:4f:9d:8c:91:c3:8f:d7:53:b9:73:50:37:1c:32:
7f:68:ff:d3:d6:7d:38:f9:db:6f:ad:cf:7d:cb:2c:
26:e5:ae:1e:a7:3f:3c:8a:89:98:50:63:ad:12:1b:
a2:3a:12:bd:11:b8:b6:39:c3:c9:0a:f0:7e:e7:be:
97:a8:8d:52:c9:5c:df:25:ac:7c:ba:53:1d:17:b7:
41:41:9d:dc:31:ef:2c:c9:89:b4:ef:a2:57:f7:ae:
a6:ca:d0:0d:20:91:ff:67:09:f7:5b:58:1a:6c:9f:
cf:4d:7d:a9:21:18:3c:fb:7d:86:3b:8d:bb:6e:6f:
29:17:cb:60:30:9a:f8:b2:f5:1d:99:9f:00:d6:ff:
0d:50:df:11:c0:a3:69:bd:c6:34:9d:48:90:b2:27:
da:99:e2:51:70:b8:7b:44:a4:ea:d6:e0:74:52:6d:
d8:6f:51:e6:81:86:49:f8:5e:7d:34:05:85:39:28:
a0:18:0a:f9:f0:d0:4f:12:e6:2b:cb:cb:27:04:74:
e8:b1:e5:f6:44:16:47:ff:ac:c0:31:42:8f:cb:5d:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:35:65:86:D3:30:C1:84:A6:75:4E:2C:E1:AC:3C:2D:7D:47:51:09
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/qTVlhtMwwYSmdU4s4aw8LX1HUQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.93.50.0/24
185.114.68.0/24
212.93.196.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b6:ab:2d:7f:e9:9a:72:16:7a:0d:fd:c0:16:d8:bf:92:da:
72:72:8f:61:30:83:68:ae:48:37:4b:a7:be:08:f1:76:b0:6e:
7d:d7:8d:3b:be:53:a8:4c:f2:9b:4f:d7:5a:41:d3:b9:0d:fd:
2d:b3:4b:29:81:b3:9a:45:18:c7:1d:43:07:89:f4:69:47:6b:
f4:4a:de:79:ef:bd:ff:d4:09:f0:51:96:8d:11:b0:18:97:ba:
a0:be:a7:f9:f0:dd:23:89:b8:cb:63:3d:be:1d:95:6f:1d:30:
91:82:83:a5:7f:ee:45:e3:43:4e:c7:d5:c8:c8:d8:bd:73:f3:
10:9a:fa:f8:1c:a1:31:2f:4b:6b:94:61:07:a3:26:e0:cf:0c:
25:13:3d:ca:fc:bc:83:b2:15:d2:0a:ce:68:11:70:b6:63:9d:
e4:0d:ce:01:0a:f2:bf:6e:ce:6c:00:22:87:21:41:9c:14:b9:
37:29:59:84:8e:9a:da:5a:85:c1:65:ad:17:dc:0a:75:04:82:
72:c0:58:1c:f7:b5:d4:1e:ef:f3:90:0c:19:9f:f4:13:93:96:
d3:9c:5b:e2:29:e2:af:fd:08:b0:9a:97:60:32:a4:44:d9:56:
0b:19:a9:c5:25:e5:7b:fe:62:84:e9:6b:e0:e9:82:04:cd:b0:
db:84:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:50 2025 by rpki-client