Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QQhWYG4pyzFpebf1pieVSZZ7P9g.roa
File: QQhWYG4pyzFpebf1pieVSZZ7P9g.roa (raw, json)
Hash identifier: 64gEiP3jmwunSJqQ5m3rEcLN7SNyH1MImGMMvB/YsRs=
Subject key identifier: 41:08:56:60:6E:29:CB:31:69:79:B7:F5:A6:27:95:49:96:7B:3F:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824AFC02AA705BC8925B83A07AA5796
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QQhWYG4pyzFpebf1pieVSZZ7P9g.roa
Signing time: Thu 02 Jan 2025 17:51:20 +0000
ROA not before: Thu 02 Jan 2025 17:51:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205138
IP address blocks: 147.78.103.0/24 maxlen: 24
193.37.45.0/24 maxlen: 24
2a00:1728:38::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:af:c0:2a:a7:05:bc:89:25:b8:3a:07:aa:57:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=410856606e29cb316979b7f5a6279549967b3fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:e2:b1:32:46:78:61:e7:18:4c:e7:a0:8f:
79:30:60:9d:f6:24:f2:f2:c1:0b:24:52:21:61:9a:
02:2d:79:0a:84:bd:4d:59:70:a0:57:0b:bb:0c:09:
16:06:8e:e2:3d:01:d5:76:64:11:5e:d8:e4:23:2e:
71:c3:6e:32:15:2c:89:03:6b:ee:06:23:09:4b:3a:
bc:1e:59:e2:21:8b:39:e8:96:96:1c:b0:aa:76:3b:
1f:51:2b:8b:45:6d:2a:01:ae:64:59:16:6b:f8:b5:
bf:72:df:17:b7:99:7f:ce:00:d5:95:73:1d:62:4b:
20:82:a5:ce:3c:16:e7:b0:31:7c:0e:ed:86:0c:03:
17:61:b4:e9:97:9a:16:b0:b4:bd:e7:ee:aa:d4:48:
4c:33:61:8d:c8:5e:ac:b9:19:fe:5e:fc:1b:c3:f0:
d8:68:c0:46:10:30:13:05:dd:06:61:36:fe:1d:0c:
8c:95:01:5c:93:73:24:ce:ff:46:3c:43:20:08:85:
97:92:41:70:5c:72:81:6a:ba:03:ec:0d:83:2d:cc:
06:f7:98:0a:3a:be:38:b9:7a:6f:88:86:46:65:b6:
f0:31:be:12:ba:8a:ce:17:c3:36:39:90:b8:2b:1e:
08:cd:b6:cc:c8:f1:46:23:89:28:83:74:a5:a0:ee:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:08:56:60:6E:29:CB:31:69:79:B7:F5:A6:27:95:49:96:7B:3F:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QQhWYG4pyzFpebf1pieVSZZ7P9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.103.0/24
193.37.45.0/24
IPv6:
2a00:1728:38::/48
Signature Algorithm: sha256WithRSAEncryption
2b:bb:02:f6:94:cd:1b:e2:83:5f:c3:9e:20:1e:52:dd:22:33:
7c:57:24:96:43:60:ea:35:c8:1e:ee:e9:a6:5c:04:b8:3b:77:
ea:c8:fa:e2:1e:98:b7:65:cf:1f:9a:f1:cf:aa:aa:af:fa:e4:
03:c9:b6:b1:4d:82:8a:fc:cb:82:81:34:88:55:6d:2e:78:74:
fe:f4:9c:a7:40:0a:80:fa:be:bf:a8:ea:46:1b:69:bd:4c:7d:
6e:d0:90:44:17:88:e8:b7:73:6b:41:86:20:b1:50:02:00:4d:
3f:dd:9a:03:05:43:6e:c0:8b:9d:da:ba:ee:0c:57:55:0a:1b:
3e:f4:20:26:d8:c7:30:3d:21:1b:8b:d4:23:ff:98:10:38:58:
ea:20:9a:70:66:92:3c:40:2e:5e:9f:1d:05:f5:6c:3a:f9:78:
f2:c9:68:c5:76:ca:38:e0:ba:61:39:5d:fe:ef:02:ae:c0:25:
a9:21:2b:0e:0a:2a:47:8f:ba:eb:51:7b:f8:6a:69:4b:55:0e:
9d:26:87:09:0e:d0:ac:2e:fd:77:7a:e2:bc:ff:e4:6d:fe:3e:
17:58:61:02:22:f5:4c:13:61:3d:eb:dd:21:fa:57:27:84:53:
ae:31:55:9b:c5:85:51:51:c6:7e:f7:f2:8c:70:13:1f:bb:be:
48:a8:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:34 2025 by rpki-client