Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Qxv2Q_0YWFKxLQ4xLrWrspuRQM0.roa
File: Qxv2Q_0YWFKxLQ4xLrWrspuRQM0.roa (raw, json)
Hash identifier: q6ZVsbuMM133YTTtlhqWp71eKo33i09KO3z7TEJ9A5Y=
Subject key identifier: 43:1B:F6:43:FD:18:58:52:B1:2D:0E:31:2E:B5:AB:B2:9B:91:40:CD
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018BDE97555756063FB3B0D51084DC2088B4
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Qxv2Q_0YWFKxLQ4xLrWrspuRQM0.roa
Signing time: Fri 17 Nov 2023 18:42:21 +0000
ROA not before: Fri 17 Nov 2023 18:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 95.178.8.0/21 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.56.0/21 maxlen: 24
66.9.96.0/20 maxlen: 24
93.119.184.0/21 maxlen: 24
198.145.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:de:97:55:57:56:06:3f:b3:b0:d5:10:84:dc:20:88:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 17 18:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=431bf643fd185852b12d0e312eb5abb29b9140cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:f9:30:74:06:fc:99:ce:a1:92:cc:d8:b4:
1b:65:86:32:a6:97:e8:36:68:80:d9:20:f2:74:56:
be:ee:09:73:21:8b:16:e6:cf:e0:54:16:95:19:f3:
27:97:90:41:2d:12:95:aa:71:a9:4f:8a:16:77:17:
c5:49:65:cf:67:f2:47:b6:80:a3:1a:26:f2:51:d9:
3e:ff:3a:f8:60:96:b9:ef:79:24:90:da:99:ca:df:
4e:d3:d6:6d:b8:a2:d5:28:b7:68:bb:de:1e:90:54:
72:00:a4:a4:c2:aa:c4:df:40:4e:e5:73:92:ee:97:
d7:d1:cf:8e:ac:88:01:59:a5:2f:a0:c4:ea:7a:2e:
2a:be:bc:8e:af:a7:66:a4:5b:7b:ec:e8:68:8b:d7:
42:60:67:63:00:af:bf:e1:c2:22:95:bf:c2:23:b6:
a6:cd:e3:59:93:69:e7:43:25:c7:24:98:5a:06:7e:
e8:6d:13:68:e0:39:e9:3d:08:4e:f5:2b:12:c9:3a:
36:f9:93:da:7a:64:2d:aa:19:ca:2b:72:fb:57:dc:
44:9b:05:79:8c:1a:e9:11:01:11:85:18:95:de:88:
b3:3c:2f:aa:ef:a3:04:92:05:7c:d1:87:70:d8:72:
ea:8d:76:ec:cd:28:39:e2:a9:45:6f:5f:ee:56:0c:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1B:F6:43:FD:18:58:52:B1:2D:0E:31:2E:B5:AB:B2:9B:91:40:CD
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Qxv2Q_0YWFKxLQ4xLrWrspuRQM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.9.96.0/20
93.119.184.0/21
95.178.8.0/21
116.50.16.0/21
121.127.56.0/21
198.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:04:68:77:b2:07:be:1c:57:ce:7f:55:05:42:1f:d5:74:75:
f1:ed:74:d1:19:91:16:81:71:5c:c3:44:06:72:bb:89:68:8c:
50:af:12:f0:0f:63:4c:7f:b3:f6:2e:15:b7:fe:2a:91:32:c9:
e0:3d:3c:c3:36:3d:1d:45:9b:6e:82:2e:b5:e8:7d:43:57:9c:
7d:67:af:9b:e4:89:2d:da:1f:58:bf:c4:d3:66:75:3f:de:4b:
f3:22:35:86:0b:de:c1:0f:d0:8d:33:c1:95:1e:a4:c5:b2:91:
e1:94:b5:34:d0:03:50:87:b5:65:84:ec:65:f8:7c:ee:f4:1e:
18:15:3e:11:19:9f:bf:3f:7e:5e:b0:43:35:af:5a:21:90:9b:
7c:f2:53:70:43:8e:20:2c:f6:32:1b:c9:eb:9e:4d:ab:9a:73:
a5:db:98:c7:28:f0:c2:3c:b7:86:39:08:e1:b3:63:92:00:cd:
63:4d:cb:dc:3d:d2:9d:b6:d5:33:60:9e:18:1b:cc:66:99:8f:
34:e5:c7:55:9b:cd:3d:d9:75:a0:0b:9b:4f:84:ab:c5:d5:1f:
7a:fd:b0:58:bf:fa:cf:3d:68:51:ff:95:fc:7a:82:39:e2:20:
ca:07:f5:3e:43:9b:f6:f1:67:33:4b:ef:e7:7a:77:4a:d2:b2:
df:19:12:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:32 2025 by rpki-client