Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Qi_okeIKGm2leqDBzMvdu74bomM.roa
File: Qi_okeIKGm2leqDBzMvdu74bomM.roa (raw, json)
Hash identifier: r2xQsTUMbLht++Z0RNSx2goRzGC7SSWFVnnASmt94Dk=
Subject key identifier: 42:2F:E8:91:E2:0A:1A:6D:A5:7A:A0:C1:CC:CB:DD:BB:BE:1B:A2:63
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0195BEFB880BAA04A7AD1F89A50B7E3FDA97
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Qi_okeIKGm2leqDBzMvdu74bomM.roa
Signing time: Sat 22 Mar 2025 17:51:50 +0000
ROA not before: Sat 22 Mar 2025 17:51:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 77.47.213.0/24 maxlen: 24
195.178.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:be:fb:88:0b:aa:04:a7:ad:1f:89:a5:0b:7e:3f:da:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 22 17:51:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=422fe891e20a1a6da57aa0c1cccbddbbbe1ba263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:8e:58:fa:04:fa:0c:7a:e0:f1:16:2b:2d:
1d:3b:4c:48:7f:dd:d4:be:04:eb:c0:b4:3a:9b:b9:
19:fe:80:06:26:0f:0c:6f:ca:d8:d6:00:4a:82:ca:
5a:bc:9a:fe:52:13:e1:20:0e:74:04:99:d8:db:ed:
53:80:53:c3:91:ae:7c:7b:e2:cd:e9:cb:9f:39:ad:
89:be:93:33:ec:63:7d:af:84:9a:1d:f3:ba:82:ab:
62:60:d9:6e:9e:16:ab:12:2d:8f:ad:a5:a1:0f:84:
25:74:13:42:13:5f:06:d7:f5:d0:72:e8:29:e7:33:
b9:27:f6:ea:59:17:4c:e3:a5:eb:bc:83:49:d4:6a:
04:9f:5a:c2:32:51:ab:95:e6:55:30:23:8c:7c:18:
99:ac:21:36:4b:a8:55:5f:dd:a8:7f:35:dd:03:ad:
b8:87:4f:fc:6a:26:fb:f7:12:6f:68:fc:eb:49:7d:
c1:eb:74:9d:73:d6:8e:ab:8a:26:22:b1:d3:ca:3c:
ad:83:64:cd:63:48:38:8c:f0:36:cb:2c:05:fc:24:
cf:15:d0:cc:a9:be:ea:e8:6d:8b:f2:fb:55:ea:04:
0b:b1:c8:30:71:c4:d1:89:b0:cf:d8:ba:8f:c8:4f:
78:f4:13:e7:e3:7c:75:16:26:47:62:84:68:e9:8a:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:E8:91:E2:0A:1A:6D:A5:7A:A0:C1:CC:CB:DD:BB:BE:1B:A2:63
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Qi_okeIKGm2leqDBzMvdu74bomM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.213.0/24
195.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
53:8d:a7:02:b3:48:65:cd:e3:41:1d:10:94:b4:1e:7d:96:f9:
c1:e6:e2:d3:ef:83:e2:aa:f3:85:34:0b:8c:43:50:8f:b8:d4:
4e:70:46:29:0b:c6:95:09:8f:39:dc:27:e9:ad:90:bc:66:0c:
e3:2b:ab:83:a8:43:9d:bf:4f:2c:23:03:44:94:1b:0e:43:d5:
a6:c3:d5:11:e4:6d:84:e0:8b:6c:a2:30:2b:d4:ea:b3:df:5c:
f0:21:80:de:1c:ce:7b:09:a1:ee:f1:e1:0b:59:ed:fa:99:ab:
5f:4c:09:f1:f4:5e:c7:fb:a6:3c:73:a1:57:59:7a:a3:2a:ce:
43:90:e2:33:b3:5b:a6:b5:2b:66:25:7a:34:ae:da:ea:6b:f1:
8b:1a:2f:0a:fe:56:74:d7:15:72:a1:04:17:9b:62:eb:e6:f0:
0d:b6:88:20:44:d7:d3:39:4a:67:1f:d4:c7:22:86:96:a1:b0:
77:f1:dc:65:86:00:92:f8:7a:b0:9b:c4:5c:6f:78:03:fa:7e:
92:e3:f6:43:54:7c:d7:cf:41:a7:1b:c9:2f:0c:d3:c7:65:1c:
65:63:c9:af:cb:f7:35:e7:82:0e:c0:de:d2:7e:ef:bc:d9:01:
02:6a:c7:18:08:3c:fa:a2:23:08:d5:a5:7f:29:d2:fc:17:f6:
29:00:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:22:41 2025 by rpki-client