Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa
File: qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa (raw, json)
Hash identifier: jnR4myiAxP2Qb03Ouublrmfx01PiIWyUlSrg/eITJIY=
Subject key identifier: AA:65:D2:06:8E:99:40:77:F9:48:17:0F:28:96:AA:EB:49:F5:0E:94
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 019421444B7302920C2E7EFA56A08177EE7F
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57304
IP address blocks: 81.27.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4b:73:02:92:0c:2e:7e:fa:56:a0:81:77:ee:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa65d2068e994077f948170f2896aaeb49f50e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:fd:85:c9:ae:4d:fc:b4:0c:85:f8:6c:87:
32:41:96:48:03:75:21:66:0c:55:07:c5:07:4e:57:
93:4e:a0:49:19:d4:a3:ae:8b:4b:61:2d:ac:ff:cf:
39:e3:3e:b5:9d:2a:16:5e:53:b1:64:76:d5:2d:a7:
02:04:1f:6d:6f:74:a0:80:bf:10:67:42:5f:2c:7a:
57:29:e6:f7:c5:e0:f4:15:da:64:0c:3b:39:24:2a:
8c:53:b7:d9:e1:e7:17:81:d5:26:c5:f3:e6:75:c3:
f3:68:40:5c:df:86:9c:6d:a6:5f:b4:1c:d9:0f:25:
06:fb:ec:b6:a8:44:1a:fc:8f:9d:09:78:b3:87:13:
11:18:52:70:62:58:7d:6b:fc:0c:67:a7:39:63:21:
c1:73:1b:5f:9a:80:d0:0b:57:5b:65:95:3e:09:de:
be:17:c4:69:61:b8:55:34:d2:34:98:62:48:f2:30:
0d:d6:d4:61:57:7b:fb:c5:a2:17:dc:2c:9a:31:7c:
d8:43:39:0c:cf:c2:0b:af:10:47:a5:26:e4:41:6c:
bf:1b:97:a9:2d:20:02:40:b0:a1:39:fa:da:ea:e0:
88:3e:bd:27:b4:ec:e3:e3:2f:21:ac:1f:0f:95:90:
95:da:9d:6e:bb:82:98:10:65:da:b3:cb:34:73:dd:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:65:D2:06:8E:99:40:77:F9:48:17:0F:28:96:AA:EB:49:F5:0E:94
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.248.0/24
Signature Algorithm: sha256WithRSAEncryption
07:8f:8c:7e:e9:a0:62:4d:1a:4d:67:11:fa:7c:88:23:14:e3:
3d:b1:25:0c:12:a5:05:53:da:e7:1f:06:ee:18:f3:26:e9:f9:
34:57:ff:5b:15:d4:3c:f7:82:9e:a9:08:23:cb:de:91:dc:8b:
0a:f7:fc:18:e5:8b:6c:62:89:e5:c4:5c:e3:65:2b:d3:b4:06:
7e:e3:89:95:37:6e:94:e8:0e:94:3d:d2:77:c3:82:5c:2b:04:
c9:e5:85:a5:ac:35:79:2a:84:20:a5:10:8b:a7:d2:ec:ad:7d:
53:a2:15:28:9c:af:84:38:0f:75:ae:59:47:c7:bf:b1:eb:e8:
e1:91:19:d4:d2:61:86:b7:d6:3c:66:cb:b7:41:9d:aa:86:85:
b6:4f:b8:7c:c6:99:07:d9:84:59:1f:c4:23:99:32:78:6e:fe:
24:02:27:a4:4d:a2:ab:81:10:73:36:6e:48:65:c4:d5:f8:30:
a9:0c:9f:3f:3c:d6:65:4a:4b:b3:c5:fe:72:40:4f:a3:0c:85:
5e:bf:d9:8a:ff:9e:33:17:03:a3:52:13:da:63:46:fd:bd:82:
b4:56:e8:e4:5a:fe:fd:58:40:f6:81:14:49:15:fe:e2:cc:66:
ab:ab:4f:f0:d8:13:97:49:e2:3d:24:7e:ca:29:71:74:7a:36:
42:59:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:44:36 2025 by rpki-client