Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qibueMIf0YX7-vwcs7S-wIMkdfg.roa
File: qibueMIf0YX7-vwcs7S-wIMkdfg.roa (raw, json)
Hash identifier: /1H0Qg/we281+9NuFuePQNwgT4dnDcKq2sBzPBfEoKc=
Subject key identifier: AA:26:EE:78:C2:1F:D1:85:FB:FA:FC:1C:B3:B4:BE:C0:83:24:75:F8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B38470B2A56AD3A51243D79326B2DF
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qibueMIf0YX7-vwcs7S-wIMkdfg.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142578
IP address blocks: 213.176.8.0/21 maxlen: 24
213.176.16.0/22 maxlen: 24
213.176.32.0/19 maxlen: 24
213.176.76.0/22 maxlen: 24
213.176.80.0/21 maxlen: 24
213.176.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:84:70:b2:a5:6a:d3:a5:12:43:d7:93:26:b2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa26ee78c21fd185fbfafc1cb3b4bec0832475f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:79:1f:bb:50:3d:d5:a0:fc:18:8c:b5:ed:
82:fd:d7:3d:02:d3:65:04:21:21:1c:29:86:ab:61:
da:d1:b3:88:1c:13:35:b5:43:9b:a1:de:14:4d:c3:
11:ce:f4:31:39:da:e7:21:2a:1e:70:8a:76:3f:a8:
85:52:19:33:1c:29:88:94:09:bd:59:5e:fb:47:9b:
17:5d:43:f7:1f:38:e0:88:1c:ea:ac:b7:e6:29:3e:
b0:1b:f7:ff:23:25:28:d3:db:30:d3:a5:74:68:aa:
b4:61:e9:44:08:52:5e:d4:3e:fd:1a:c3:66:16:83:
12:98:ad:8c:75:be:82:a2:02:ee:fb:15:51:76:a2:
f4:6e:00:b2:fc:c0:f8:24:4b:54:b1:0e:9d:ad:f3:
24:7f:6e:c5:04:bd:e2:98:d7:ed:b9:5d:60:42:73:
7e:87:b7:c3:19:9f:f2:67:79:74:cc:98:5a:a6:bf:
5d:7a:33:31:ea:24:ab:47:a5:0d:3f:c7:b0:ae:a7:
45:17:3c:81:a4:84:48:d8:20:a9:77:88:55:e1:49:
8d:87:bc:39:9f:4c:8a:5a:1a:c3:43:63:af:6f:f6:
7d:4b:ba:1d:6f:8e:bd:b7:2f:91:d5:42:86:e4:87:
7e:08:5c:97:3b:53:28:d8:12:6a:59:df:cf:57:13:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:EE:78:C2:1F:D1:85:FB:FA:FC:1C:B3:B4:BE:C0:83:24:75:F8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qibueMIf0YX7-vwcs7S-wIMkdfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.8.0-213.176.19.255
213.176.32.0/19
213.176.76.0-213.176.87.255
213.176.96.0/20
Signature Algorithm: sha256WithRSAEncryption
70:18:63:97:f6:cb:0b:b4:88:27:f7:6d:16:35:1d:89:ce:69:
af:9c:3e:3f:fb:c0:0c:31:13:99:75:0b:22:4e:d0:6e:2d:30:
2e:cf:05:65:af:f2:15:30:58:a6:9e:14:9c:7e:4d:44:b2:bb:
45:43:d2:96:68:85:b3:d7:ff:08:ce:e8:06:18:c0:9e:2d:f1:
85:8d:90:f7:ea:50:ce:f4:78:61:41:cd:77:ac:a7:36:52:70:
54:e7:50:93:40:7f:95:43:5b:41:e8:df:b1:0a:61:04:5d:b7:
d7:f0:a8:65:61:ab:79:17:53:1d:54:e3:04:58:53:b5:60:25:
59:6e:41:74:a8:d9:10:dc:7a:1d:15:96:59:91:0b:e2:ac:ca:
76:c2:29:60:f4:f7:11:a7:21:a2:67:f1:8e:13:d3:0c:8a:56:
49:ee:94:1d:5d:4e:13:32:fb:7e:c6:0e:19:23:5e:05:67:35:
70:3d:b9:a5:21:fe:21:7d:80:64:b5:2f:1d:72:21:45:ab:ea:
5f:ef:68:80:05:7f:67:ad:69:94:b4:0a:d6:af:ad:44:08:0a:
26:49:9a:21:6a:a8:8f:c4:e4:50:ac:c7:3d:52:79:73:77:7e:
5e:49:c0:15:aa:87:77:4b:a6:45:54:85:8a:39:a4:8c:ce:85:
52:bc:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:52:01 2025 by rpki-client