Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QSG9r1Lsi_SARbG1TkaoyO_Xqhw.roa
File: QSG9r1Lsi_SARbG1TkaoyO_Xqhw.roa (raw, json)
Hash identifier: CJ/Smn1U4TEV+8/orTHqrkQ1WZ+rrxc8J3rnHVNCQf4=
Subject key identifier: 41:21:BD:AF:52:EC:8B:F4:80:45:B1:B5:4E:46:A8:C8:EF:D7:AA:1C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CC500CDDF2C2B1CBED98E8D033F139214
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QSG9r1Lsi_SARbG1TkaoyO_Xqhw.roa
Signing time: Mon 01 Jan 2024 12:30:13 +0000
ROA not before: Mon 01 Jan 2024 12:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 79.172.226.0/24 maxlen: 24
79.172.230.0/23 maxlen: 23
79.172.254.0/24 maxlen: 24
87.229.117.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:cd:df:2c:2b:1c:be:d9:8e:8d:03:3f:13:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 1 12:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4121bdaf52ec8bf48045b1b54e46a8c8efd7aa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:5f:76:31:5d:de:37:af:f5:fa:bb:d8:89:
47:0d:65:ab:82:65:76:05:8a:7c:82:23:ea:59:5c:
1d:a9:5a:1d:7c:89:66:a5:c6:1f:e1:9d:6d:65:dc:
22:e0:55:e2:ae:5a:cf:c7:a8:db:05:eb:b3:ca:41:
18:63:ec:f6:fc:23:d2:16:f0:e6:2f:34:db:d0:f0:
bc:27:0c:5b:e2:09:94:d1:e9:db:ae:31:1c:20:27:
f8:08:7f:df:1f:d8:90:d9:dd:6f:e1:14:1e:9c:7d:
8e:57:a9:de:03:e8:74:88:d3:b4:62:b3:de:bf:ed:
b3:71:dd:cc:0e:ae:e8:22:28:1c:cd:ec:c2:46:dd:
a7:d6:be:46:ba:80:98:18:3f:76:91:fc:a8:6f:23:
3f:a0:4e:f8:51:75:fc:f4:2f:59:8a:96:f4:da:6c:
d1:d4:cc:99:f8:76:b0:95:1c:8a:27:48:ac:14:a3:
b8:e0:c8:f9:55:be:a0:a0:f8:7c:36:b1:f1:db:7a:
29:f8:b4:ea:3e:d3:17:3d:ef:f3:10:c9:85:0c:80:
8c:49:5c:02:53:45:74:06:3f:f3:5c:ac:fa:36:1f:
b4:0d:f0:b2:e0:1a:f5:cb:48:07:09:13:a2:1c:26:
0f:7c:bf:fd:12:8e:f8:c6:cf:14:f5:22:90:a7:04:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:BD:AF:52:EC:8B:F4:80:45:B1:B5:4E:46:A8:C8:EF:D7:AA:1C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QSG9r1Lsi_SARbG1TkaoyO_Xqhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.226.0/24
79.172.230.0/23
79.172.254.0/24
87.229.56.0/24
87.229.117.0/24
Signature Algorithm: sha256WithRSAEncryption
94:59:60:76:14:6b:f3:b0:01:c1:94:1b:c0:ab:ed:5a:55:7a:
71:0b:a7:c4:e5:9b:28:a3:8e:c5:9b:28:c9:22:59:22:82:9f:
a7:dc:e6:30:5c:b2:16:f3:33:80:3d:2d:82:7a:c3:e8:58:d1:
05:d1:7c:9f:14:bc:8c:47:d3:17:f8:33:31:a1:39:a8:12:79:
66:a3:3e:95:28:6c:3f:16:43:1f:45:4b:c7:28:f8:7f:a7:a8:
d5:75:45:69:31:a9:37:25:bf:cf:42:46:6f:18:73:6f:42:a4:
c8:64:42:f0:48:e0:b9:ec:f7:da:f2:ec:0b:40:f2:fa:7e:87:
78:99:e3:f1:33:4b:cb:8a:3d:68:85:26:c4:9a:58:d5:48:84:
8d:7d:19:42:5d:c3:c9:df:94:39:97:1c:f9:a6:c3:ba:47:b1:
4a:3c:a1:09:80:c5:40:0f:e8:f4:f7:fa:74:56:9f:24:f9:34:
7d:8a:54:ff:01:7f:71:46:b1:88:73:e2:28:f3:66:f1:dc:1c:
64:5a:aa:ec:63:7e:44:07:a7:56:5d:df:46:d4:79:70:6a:0d:
68:a5:db:e7:3f:7a:46:be:76:f1:d5:c6:2b:ff:2b:5e:a6:13:
65:e4:e0:ec:d7:26:1b:dc:79:ae:a4:e5:40:c4:34:59:4f:bc:
91:2a:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:30 2025 by rpki-client