Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/QeFtXb_2Jy97mUDOpmxAN1O437Q.roa
File: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (raw, json)
Hash identifier: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=
Subject key identifier: 41:E1:6D:5D:BF:F6:27:2F:7B:99:40:CE:A6:6C:40:37:53:B8:DF:B4
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 019422FC192C960FF1C708DAA641E93CB463
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/QeFtXb_2Jy97mUDOpmxAN1O437Q.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47846
IP address blocks: 82.98.86.0/24 maxlen: 24
82.98.99.0/24 maxlen: 24
82.98.109.192/27 maxlen: 32
213.83.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:19:2c:96:0f:f1:c7:08:da:a6:41:e9:3c:b4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41e16d5dbff6272f7b9940cea66c403753b8dfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:c4:0a:5d:f3:81:02:d4:5d:21:19:9e:aa:
bf:1a:96:1b:a6:0b:69:c1:2c:0b:fa:c6:90:c9:14:
9a:5c:62:88:81:29:e8:44:92:8f:2d:aa:f9:8f:fa:
30:2e:28:c1:1a:01:c2:ca:a7:96:a2:e7:e7:c8:32:
f5:48:08:27:23:92:0e:b4:06:86:ec:18:9d:4b:43:
09:83:6d:f8:6e:7f:65:f2:95:7e:3d:6f:e3:04:2d:
05:67:bc:43:f5:b5:ab:86:8d:5e:2f:c9:e5:b2:8f:
bd:c0:d1:9d:63:86:4d:d2:aa:b5:47:da:e2:a6:af:
14:33:c4:80:79:a6:a7:87:20:97:e1:9e:3f:60:e2:
93:57:d8:61:1b:63:d1:46:84:1a:4f:4c:b1:4a:80:
0d:6c:df:a1:cc:b0:dd:cb:98:7e:eb:5d:d4:7f:d6:
b6:46:5e:a3:5b:bd:c4:5c:78:47:07:91:00:66:50:
7d:1c:df:b6:75:64:84:04:7e:72:85:56:79:e1:0c:
36:e6:63:bf:f1:91:31:a9:01:98:56:5d:e5:a1:bf:
54:02:70:aa:0b:3d:36:e8:0e:7b:b0:3b:cd:51:b1:
5c:11:f2:d1:1d:b3:1d:6f:84:d7:ca:3b:9a:44:85:
7d:6e:1d:4e:70:bb:39:17:ff:d1:6e:48:e6:98:bc:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:6D:5D:BF:F6:27:2F:7B:99:40:CE:A6:6C:40:37:53:B8:DF:B4
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/QeFtXb_2Jy97mUDOpmxAN1O437Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.86.0/24
82.98.99.0/24
82.98.109.192/27
213.83.58.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a1:78:76:29:21:79:2c:48:7a:88:96:94:04:98:01:33:29:
cb:8b:f8:13:50:4c:5c:0a:e9:e6:48:1a:81:13:c5:3d:10:dc:
02:5b:e2:48:32:52:ca:53:44:2a:9d:d3:dc:df:1b:c4:6b:b8:
bc:61:0f:f1:d6:5e:23:06:b0:a3:ab:e9:fa:78:c0:60:80:53:
f6:b4:d2:59:7d:10:7d:c0:46:da:ec:3e:89:65:b2:2d:05:14:
cc:c2:cf:96:6a:e1:8a:c3:d8:c2:82:05:b9:36:d6:85:c7:eb:
0d:46:34:bb:b8:71:db:de:d9:40:ab:40:48:30:b4:d8:ee:8d:
0a:c7:f5:ca:7e:30:76:82:4a:18:c2:90:ad:fd:cd:7b:4b:7b:
ae:64:4b:24:38:7f:64:63:c0:67:d3:e4:d5:10:25:a5:c5:1a:
8b:42:d6:15:9d:64:ce:fe:6c:93:75:15:80:d6:bd:c0:57:f2:
9f:4c:e1:4d:ba:e0:79:e6:40:e9:ff:e3:a9:40:27:15:87:26:
cf:1a:34:2e:7e:7e:d3:9d:eb:16:c9:35:0e:ea:7d:ac:7d:86:
ce:81:54:82:1c:fa:3c:b4:c6:01:e3:e3:fa:ea:13:bd:1b:77:
15:ef:ec:3f:a1:de:ee:22:bb:ab:27:a3:bd:f6:2d:6e:da:ba:
a5:e0:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:12 2025 by rpki-client