Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/qdHDAHiWQsmCFoNetHDwXmdq01A.roa
File: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (raw, json)
Hash identifier: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=
Subject key identifier: A9:D1:C3:00:78:96:42:C9:82:16:83:5E:B4:70:F0:5E:67:6A:D3:50
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 01942444B7B4EEE3926255C85DB83015112A
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/qdHDAHiWQsmCFoNetHDwXmdq01A.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.33.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b7:b4:ee:e3:92:62:55:c8:5d:b8:30:15:11:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9d1c300789642c98216835eb470f05e676ad350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:97:49:ee:b8:55:1d:c4:4e:a6:6c:77:5d:
e8:ec:23:c0:88:52:84:e8:1c:f7:6e:61:8a:96:3c:
98:2f:b1:60:29:2b:da:7d:89:2b:22:c5:ff:72:f5:
74:30:1f:3e:12:55:44:75:c2:0c:e9:2c:a8:ea:ef:
59:97:cb:80:a4:db:cb:26:d9:54:90:e7:77:03:af:
d4:ea:7f:bd:90:0d:36:1e:cf:8e:d9:cd:de:5d:9e:
d8:0f:7c:b5:98:1d:de:76:25:30:6c:c9:a8:c3:93:
84:95:ee:5d:7e:77:c6:2b:53:eb:43:4f:e3:46:9d:
08:51:2c:f4:9c:d2:8a:e4:4c:08:b3:be:ba:7d:89:
18:10:fc:e0:2a:77:ec:9a:50:a4:f1:04:cf:e0:2b:
85:9b:3c:6a:63:16:67:cc:07:0e:21:b1:7a:d4:fc:
e7:50:44:36:29:99:db:a3:c4:be:1b:2e:64:91:55:
dc:ad:3c:31:1d:91:42:3b:e9:68:c3:aa:6c:2e:4c:
89:2b:58:9e:b0:5f:3d:ef:9a:d3:94:83:e4:05:66:
5a:42:6b:f4:46:9b:ec:3a:40:4e:b1:13:d8:c6:5c:
3c:da:9c:15:56:98:39:ff:98:b2:89:e7:65:39:76:
b9:50:a3:cd:02:38:16:9f:ff:09:8b:7f:e4:ee:87:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D1:C3:00:78:96:42:C9:82:16:83:5E:B4:70:F0:5E:67:6A:D3:50
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/qdHDAHiWQsmCFoNetHDwXmdq01A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:38:61:91:47:9a:f4:dd:bc:38:7d:f2:03:cb:5d:08:41:1d:
19:b1:b6:49:15:0a:ae:40:d6:65:b8:b7:a8:9a:8e:03:96:b4:
63:de:67:d4:1c:d7:1d:e0:a1:78:58:a1:bb:75:66:50:fd:07:
1e:3f:7a:51:a8:86:da:fe:79:98:5b:51:23:d1:cd:62:41:16:
17:ab:45:44:77:89:03:82:42:af:0a:4c:1e:47:3b:77:33:31:
8b:7c:e9:88:25:13:9f:aa:da:76:37:58:d0:ad:af:25:20:be:
f6:37:f0:c8:57:7a:a3:bc:af:b1:a0:2b:bf:b0:e6:3a:39:93:
0f:e3:7a:24:89:16:3f:aa:2a:ed:0b:9f:a2:23:ee:99:56:18:
e6:17:e5:bf:ae:85:bb:61:f0:2a:d8:3a:04:f0:06:e6:00:4e:
b1:90:19:48:f5:75:49:05:15:57:98:d8:3b:6c:e3:f7:3d:a5:
70:f4:1c:a7:a6:16:44:c0:55:cd:9d:50:f4:79:30:0b:f4:31:
83:5d:2b:f2:d3:2a:12:1f:00:36:61:64:22:a4:4f:bd:76:7d:
0e:61:fb:d7:7e:f4:27:34:05:02:c0:c9:f5:15:97:5f:7f:3c:
f5:d3:a5:2e:37:b4:f4:b5:bf:5d:d1:88:30:e8:d7:60:31:70:
21:9b:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:03 2025 by rpki-client