Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/q_A8SW_SmjBDzHI_LjhYX-_4wHE.roa
File: q_A8SW_SmjBDzHI_LjhYX-_4wHE.roa (raw, json)
Hash identifier: SEL+UiOhXiSWfO5V8bPYfvzRrJrPu7DrmYvZMWDlcf4=
Subject key identifier: AB:F0:3C:49:6F:D2:9A:30:43:CC:72:3F:2E:38:58:5F:EF:F8:C0:71
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B2425BDD186C3F6B96DE53047A0BA6
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/q_A8SW_SmjBDzHI_LjhYX-_4wHE.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212107
IP address blocks: 78.142.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:42:5b:dd:18:6c:3f:6b:96:de:53:04:7a:0b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abf03c496fd29a3043cc723f2e38585feff8c071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:dc:da:b0:40:e4:41:18:ea:b9:fa:31:29:
e7:c2:f3:12:ef:6c:e2:cf:50:af:74:02:22:bd:25:
cd:9a:0d:f3:f7:c3:6d:a3:58:59:5a:a6:3d:e4:2c:
f0:67:48:6f:70:b5:00:e0:0d:8b:de:44:92:c5:39:
2d:51:30:86:e9:e2:6d:32:87:95:2d:b2:78:b6:47:
c1:a3:08:d5:a2:e1:b5:8a:5d:76:73:7c:db:4e:3d:
a3:a0:08:15:9c:a4:43:8e:7e:13:c0:7a:13:5f:66:
5d:49:78:09:26:55:e9:93:3f:33:34:11:b0:f4:70:
65:fe:42:6b:38:66:92:6b:83:a3:8e:df:e5:fa:fe:
04:ce:34:fb:33:4c:07:86:bc:7f:77:67:03:fc:a4:
97:b9:dd:76:04:5a:62:72:c2:83:d7:6c:e9:b2:e8:
69:fb:7f:22:4d:ea:01:29:42:f6:62:56:10:a9:3e:
3b:bf:e9:5f:69:53:85:38:cc:80:40:0e:15:ec:ac:
d4:9b:88:6f:eb:07:24:f1:31:dc:b7:2a:01:b9:91:
69:d0:6e:a7:6e:1f:a4:fe:ec:a7:f5:d3:c1:64:75:
21:bd:63:bc:cb:99:2f:b1:9e:b4:8d:2c:67:0c:04:
fc:25:cc:1e:c1:6f:8f:ab:72:9a:8c:82:2a:de:9f:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:3C:49:6F:D2:9A:30:43:CC:72:3F:2E:38:58:5F:EF:F8:C0:71
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/q_A8SW_SmjBDzHI_LjhYX-_4wHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:73:8c:f1:03:0f:f3:b3:f1:e0:7d:5a:b7:d9:c2:38:b1:5a:
ff:e9:89:65:6d:46:75:ac:a6:99:f5:a2:10:f3:b4:d8:d2:22:
95:e3:e9:f1:1b:83:23:c4:44:5e:af:88:9a:70:a7:2d:f4:30:
fc:c6:d3:b0:0e:7e:81:e8:8f:c9:08:e4:f2:50:8d:a1:d1:f3:
16:ae:94:18:bd:41:34:19:68:1a:b4:53:ce:c8:f8:e9:f9:b4:
64:66:1a:f1:17:ac:da:85:c0:3c:64:ab:72:f9:a2:e8:bd:c0:
96:ca:88:66:28:7d:db:3e:ad:dc:4d:ec:ae:3b:e5:1f:e4:69:
51:03:be:16:a7:6c:c2:31:0e:82:64:2b:00:b5:fb:7b:78:4e:
cc:4e:a1:c1:ca:f1:fa:8a:d1:71:86:7e:8d:d8:07:43:77:b0:
fd:18:4e:4d:37:79:dd:76:72:7d:58:f1:6a:90:ab:59:ce:af:
c7:b7:2f:75:8a:d7:d1:bf:5c:1c:f8:a9:dd:fc:82:7f:78:f5:
e6:cb:d2:3f:59:5d:27:11:05:d6:1e:55:4e:8b:a3:35:c6:66:
57:3b:2f:f0:0b:d5:73:17:fb:af:32:2d:88:69:f2:df:bc:34:
fc:11:e8:f9:8e:8a:8c:2e:d6:ef:d9:8d:fe:2b:c5:40:dc:1f:
5f:1e:98:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhskJb3RhsP2uW3lMEegumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjUwMTAxMTE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmYwM2M0OTZmZDI5YTMwNDNjYzcyM2YyZTM4NTg1ZmVmZjhjMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqbc2rBA5EEY6rn6MSnnwvMS72zi
z1CvdAIivSXNmg3z98Nto1hZWqY95CzwZ0hvcLUA4A2L3kSSxTktUTCG6eJtMoeV
LbJ4tkfBowjVouG1il12c3zbTj2joAgVnKRDjn4TwHoTX2ZdSXgJJlXpkz8zNBGw
9HBl/kJrOGaSa4Ojjt/l+v4EzjT7M0wHhrx/d2cD/KSXud12BFpicsKD12zpsuhp
+38iTeoBKUL2YlYQqT47v+lfaVOFOMyAQA4V7KzUm4hv6wck8THctyoBuZFp0G6n
bh+k/uyn9dPBZHUhvWO8y5kvsZ60jSxnDAT8JcwewW+Pq3KajIIq3p9JiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKvwPElv0powQ8xyPy44WF/v+MBxMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvcV9BOFNXX1NtakJEekhJX0xqaFlYLV80d0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo75MA0G
CSqGSIb3DQEBCwUAA4IBAQCMc4zxAw/zs/HgfVq32cI4sVr/6YllbUZ1rKaZ9aIQ
87TY0iKV4+nxG4MjxERer4iacKct9DD8xtOwDn6B6I/JCOTyUI2h0fMWrpQYvUE0
GWgatFPOyPjp+bRkZhrxF6zahcA8ZKty+aLovcCWyohmKH3bPq3cTeyuO+Uf5GlR
A74Wp2zCMQ6CZCsAtft7eE7MTqHByvH6itFxhn6N2AdDd7D9GE5NN3nddnJ9WPFq
kKtZzq/Hty91itfRv1wc+Knd/IJ/ePXmy9I/WV0nEQXWHlVOi6M1xmZXOy/wC9Vz
F/uvMi2IafLfvDT8Eej5joqMLtbv2Y3+K8VA3B9fHpiD
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:44 2025 by rpki-client