Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/QxMpcDyLvvUaIRk273lZjyhUDHo.roa
File: QxMpcDyLvvUaIRk273lZjyhUDHo.roa (raw, json)
Hash identifier: hXrMIYIVX+kTC2FMtNybwME280Sx5YECPUhkF008wBQ=
Subject key identifier: 43:13:29:70:3C:8B:BE:F5:1A:21:19:36:EF:79:59:8F:28:54:0C:7A
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCA590548A8E069ACD94CDF4A815D3
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/QxMpcDyLvvUaIRk273lZjyhUDHo.roa
Signing time: Thu 02 Jan 2025 07:48:21 +0000
ROA not before: Thu 02 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21344
IP address blocks: 77.79.193.0/24 maxlen: 24
217.149.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a5:90:54:8a:8e:06:9a:cd:94:cd:f4:a8:15:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=431329703c8bbef51a211936ef79598f28540c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:e2:31:2d:e5:cc:4b:08:18:2c:9d:19:96:
fe:d7:01:29:fd:1b:a3:63:32:d1:15:0b:46:3a:6b:
48:a5:cb:9b:36:43:32:21:63:f3:49:ba:f1:db:2b:
ce:6c:71:87:83:d1:12:a4:39:b3:cf:f4:cd:b7:5f:
d8:9a:30:eb:09:c6:39:9d:f7:d2:4d:76:18:8d:bb:
6a:44:43:3e:6b:0e:f4:f5:58:c4:31:88:55:aa:e2:
e8:fa:7c:2b:cf:1d:46:69:a6:27:95:2a:59:ce:0b:
79:61:25:28:31:f3:6a:22:fd:9e:41:02:95:33:67:
3f:b1:50:53:b4:f2:02:01:5b:a2:3e:9b:a7:a7:96:
2a:6f:9f:64:65:16:02:06:5b:24:39:5d:c4:f1:1d:
2c:5f:24:1d:42:83:b7:c7:73:a9:83:90:a8:d9:d3:
23:b7:0e:23:ba:71:d9:f3:14:56:88:e3:3e:fe:6e:
5a:a9:b9:6f:bd:66:34:f1:bd:61:d4:a4:7e:5d:f9:
03:13:80:cc:78:bb:7b:ee:a0:47:7e:5d:7f:37:c9:
7d:4c:b3:8e:5b:73:5a:95:fe:c9:06:5b:cf:b4:1d:
9c:6c:14:bb:67:a3:91:80:0b:92:28:c4:0f:a8:fd:
24:a4:7f:b2:08:7a:ad:a9:45:ea:1e:df:fa:8b:27:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:29:70:3C:8B:BE:F5:1A:21:19:36:EF:79:59:8F:28:54:0C:7A
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/QxMpcDyLvvUaIRk273lZjyhUDHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.193.0/24
217.149.247.0/24
Signature Algorithm: sha256WithRSAEncryption
98:74:3c:71:d2:58:cc:6e:46:7a:a6:8b:5c:ef:31:6e:3d:cc:
48:46:5d:ac:cf:e7:ef:09:16:c2:05:aa:99:c8:66:e3:7a:19:
59:ca:f9:6c:d9:51:9f:6a:57:95:97:d8:19:4a:42:73:4b:9c:
88:cd:36:0c:37:4b:fd:f7:dd:62:6b:1f:5a:8e:b2:91:b0:51:
15:71:cb:60:81:a0:c7:93:01:65:b1:55:ae:51:1f:f2:84:f5:
7c:05:22:ba:ae:fa:a2:4a:00:13:7e:dc:3f:6b:56:02:e4:52:
d6:e0:9b:3c:b0:90:bc:10:e5:13:75:66:de:15:02:c7:d0:6f:
88:9d:a5:d8:54:4a:ad:dd:d3:6a:26:74:6b:f3:53:e2:e3:4e:
96:4b:6d:13:23:31:81:fa:24:a2:ae:32:c9:8a:f5:5c:83:bd:
c6:93:21:ec:99:e7:00:8f:cc:0b:1a:89:7a:75:bb:32:5a:01:
ef:6b:70:01:32:1e:fa:5c:04:38:7a:9e:04:6e:ae:8b:71:13:
fd:44:a1:cd:1e:49:14:5f:e3:0a:fd:a5:c9:5e:34:68:41:30:
93:4c:be:ea:90:44:33:5b:22:6e:47:90:2f:9e:3e:bd:48:da:
a2:dc:14:f7:71:91:8c:f3:29:3e:37:f4:a9:b0:10:69:19:40:
cf:62:ae:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/KWQVIqOBprNlM30qBXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjUwMTAyMDc0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzEzMjk3MDNjOGJiZWY1MWEyMTE5MzZlZjc5NTk4ZjI4NTQwYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYLiMS3lzEsIGCydGZb+1wEp/Ruj
YzLRFQtGOmtIpcubNkMyIWPzSbrx2yvObHGHg9ESpDmzz/TNt1/YmjDrCcY5nffS
TXYYjbtqREM+aw709VjEMYhVquLo+nwrzx1GaaYnlSpZzgt5YSUoMfNqIv2eQQKV
M2c/sVBTtPICAVuiPpunp5Yqb59kZRYCBlskOV3E8R0sXyQdQoO3x3Opg5Co2dMj
tw4junHZ8xRWiOM+/m5aqblvvWY08b1h1KR+XfkDE4DMeLt77qBHfl1/N8l9TLOO
W3Nalf7JBlvPtB2cbBS7Z6ORgAuSKMQPqP0kpH+yCHqtqUXqHt/6iyfJdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEMTKXA8i771GiEZNu95WY8oVAx6MB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvUXhNcGNEeUx2dlVhSVJrMjczbFpqeWhVREhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATU/BAwQA
2ZX3MA0GCSqGSIb3DQEBCwUAA4IBAQCYdDxx0ljMbkZ6potc7zFuPcxIRl2sz+fv
CRbCBaqZyGbjehlZyvls2VGfaleVl9gZSkJzS5yIzTYMN0v9991iax9ajrKRsFEV
cctggaDHkwFlsVWuUR/yhPV8BSK6rvqiSgATftw/a1YC5FLW4Js8sJC8EOUTdWbe
FQLH0G+InaXYVEqt3dNqJnRr81Pi406WS20TIzGB+iSirjLJivVcg73GkyHsmecA
j8wLGol6dbsyWgHva3ABMh76XAQ4ep4Ebq6LcRP9RKHNHkkUX+MK/aXJXjRoQTCT
TL7qkEQzWyJuR5Avnj69SNqi3BT3cZGM8yk+N/SpsBBpGUDPYq7a
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:55 2025 by rpki-client