Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/Qb7_ruXAz-zLpACFNEXRphp7VoE.roa
File: Qb7_ruXAz-zLpACFNEXRphp7VoE.roa (raw, json)
Hash identifier: FRVhAqw8UYbGYtQHbCMR9itwBOe7dLxYwCNTsJk83nE=
Subject key identifier: 41:BE:FF:AE:E5:C0:CF:EC:CB:A4:00:85:34:45:D1:A6:1A:7B:56:81
Certificate issuer: /CN=483c9d9d09e3ff7d728c03792d74ad19968ce27d
Certificate serial: 01856D5D1A0118A1229F117811306E1BF240
Authority key identifier: 48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDydnQnj_31yjAN5LXStGZaM4n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/Qb7_ruXAz-zLpACFNEXRphp7VoE.roa
Signing time: Sun 01 Jan 2023 12:44:56 +0000
ROA not before: Sun 01 Jan 2023 12:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 93.177.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:1a:01:18:a1:22:9f:11:78:11:30:6e:1b:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483c9d9d09e3ff7d728c03792d74ad19968ce27d
Validity
Not Before: Jan 1 12:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41beffaee5c0cfeccba400853445d1a61a7b5681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:32:5b:9d:10:8d:68:64:b8:c9:61:3d:72:
8c:46:4e:b0:57:82:93:bb:54:6f:71:c6:79:9d:c8:
6f:ba:03:44:d3:80:b8:d6:19:30:45:7f:41:72:ae:
27:16:7e:4b:84:3e:2e:6b:93:d0:22:ff:4b:94:42:
41:fa:34:25:48:fa:98:0d:69:f8:aa:68:0b:3f:7b:
3b:29:3b:c7:98:61:ac:54:11:04:30:9a:3d:21:d4:
34:3f:5d:3d:fb:7e:8c:fe:88:36:3e:d3:7b:a0:e3:
33:fb:8c:c6:d7:a8:09:2a:63:b9:09:a4:97:60:2d:
dc:8c:ad:3a:88:69:88:24:37:2e:0b:b7:df:a4:a7:
73:fd:8a:7f:20:d2:c0:de:c0:07:19:c6:35:39:00:
de:9f:3b:cd:0b:5a:f0:0d:2f:05:63:e1:73:2f:bf:
3c:06:fc:e5:37:6c:c2:40:62:5c:e1:ba:f7:bc:98:
ad:77:1d:f9:80:e4:fb:b0:ec:e0:f4:4b:26:2f:ea:
43:90:db:9f:cc:73:75:fb:16:ec:7d:7c:97:e6:8d:
a1:bf:7a:38:81:de:c6:d2:20:3f:46:e0:9f:f7:f3:
92:75:31:c6:da:9f:65:1e:c5:1c:f2:a8:ae:78:d1:
0a:e8:bd:90:a5:ff:25:64:5a:61:e6:b1:bb:6f:f2:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BE:FF:AE:E5:C0:CF:EC:CB:A4:00:85:34:45:D1:A6:1A:7B:56:81
X509v3 Authority Key Identifier:
keyid:48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDydnQnj_31yjAN5LXStGZaM4n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/Qb7_ruXAz-zLpACFNEXRphp7VoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/SDydnQnj_31yjAN5LXStGZaM4n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5b:32:46:88:29:8f:67:32:79:72:4f:ef:ec:99:b1:1c:b7:
fa:2c:be:33:7b:a8:ea:ab:be:45:6e:36:52:00:03:a9:3b:79:
a8:e3:a9:2e:c4:d5:bf:72:25:0a:f8:93:9f:89:90:e5:e1:e0:
72:a3:a3:d2:8b:13:4b:5c:71:c4:2c:72:ce:93:49:67:32:a7:
f5:f1:3f:82:2f:8b:5f:d1:bb:dc:57:fa:53:68:97:3b:ca:aa:
97:63:6b:68:ab:fd:01:cf:1d:d5:68:c3:de:19:11:eb:22:27:
e9:2b:02:01:4a:83:2e:f6:1b:e7:38:8f:4a:c3:f7:b4:8d:a7:
16:10:7c:50:21:9e:e5:fe:3c:01:01:0c:90:72:4a:ed:2b:b6:
36:7d:36:85:73:43:dd:c4:a6:ec:1d:a8:94:40:02:e8:be:be:
2a:06:16:cd:d2:7d:f3:c9:1d:3a:22:44:85:41:10:e6:07:29:
c0:9e:e0:c4:85:1e:21:b2:4d:f3:17:61:c3:b7:ce:68:b4:f3:
4f:38:8b:1f:23:62:aa:50:ee:18:86:04:6a:9f:82:43:c7:08:
4c:20:82:b6:19:7d:50:fa:ac:17:ee:fb:47:f8:03:fb:0e:93:
09:4d:e6:5c:10:74:33:3d:41:b5:82:70:74:69:ef:81:28:28:
08:79:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:10:53 2025 by rpki-client