Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/qhsLFfRsoTvrv1LFKvzxFV--7eI.roa
File: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (raw, json)
Hash identifier: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=
Subject key identifier: AA:1B:0B:15:F4:6C:A1:3B:EB:BF:52:C5:2A:FC:F1:15:5F:BE:ED:E2
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 019428269F163B4EF492EAC6EBB2E7640209
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/qhsLFfRsoTvrv1LFKvzxFV--7eI.roa
Signing time: Thu 02 Jan 2025 17:53:27 +0000
ROA not before: Thu 02 Jan 2025 17:53:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198789
IP address blocks: 45.8.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:9f:16:3b:4e:f4:92:ea:c6:eb:b2:e7:64:02:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 2 17:53:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa1b0b15f46ca13bebbf52c52afcf1155fbeede2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:7d:66:9e:63:e1:83:78:2f:90:69:e9:1b:
b3:9a:4b:99:46:09:d5:6a:ec:fd:50:aa:5b:1e:90:
63:89:63:3e:e7:20:36:f0:7f:54:d3:6b:48:19:b9:
60:09:b0:0c:48:3e:fc:27:28:9d:b4:ad:28:94:e6:
2a:b1:a4:25:49:3f:77:16:8b:1c:63:8f:63:07:b8:
ab:59:4e:c7:6b:4d:01:f7:3d:86:6a:2b:87:da:ab:
bc:00:4d:8c:c4:ea:5a:8f:f0:b2:53:e6:42:2f:1b:
a2:af:7e:6d:88:60:11:1b:8b:4f:c6:80:57:c4:ec:
fa:b0:65:89:60:2b:ac:5e:c1:2c:35:a8:fd:96:d7:
5a:f2:b0:7d:93:f5:93:f1:2f:78:8b:87:c2:91:f6:
b0:11:e0:f0:1f:cc:26:66:11:dc:4e:a2:30:76:58:
5b:cc:46:d3:34:a2:a8:28:28:2d:20:22:20:ab:e8:
f3:92:a3:8b:0a:b6:4f:d6:19:75:fe:17:b8:36:03:
c1:28:da:9b:e1:06:66:2d:e1:e6:a1:e9:56:1f:37:
a6:6c:14:e7:de:36:b8:e5:bd:22:c5:fe:30:a3:22:
5d:4a:4d:de:6d:e0:e0:13:7a:e8:ce:16:0e:49:80:
27:0b:19:e8:72:8e:88:8b:b5:30:e8:f1:2d:44:63:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:0B:15:F4:6C:A1:3B:EB:BF:52:C5:2A:FC:F1:15:5F:BE:ED:E2
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/qhsLFfRsoTvrv1LFKvzxFV--7eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.177.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e8:99:6e:83:d1:0d:77:cc:3f:44:01:0e:92:d0:9c:db:97:
db:52:bd:0e:68:92:99:94:4c:1a:2d:90:20:bd:fd:7f:fa:1c:
9d:35:01:9a:ee:85:54:9a:f0:9a:2e:ef:19:24:76:13:5f:b2:
a5:94:11:d9:1b:d4:a6:5c:5a:22:e6:6d:f6:0d:ad:01:59:bd:
c5:71:e0:96:41:dc:82:7e:8c:da:2b:61:98:80:4e:f6:84:79:
94:d6:ce:a8:3d:08:ff:2c:f0:68:72:da:07:91:0f:95:e9:99:
dc:08:a5:cb:f8:b9:e3:62:b2:36:77:b3:31:aa:ec:65:c9:6c:
fd:55:40:29:ec:a4:a8:07:98:df:97:8d:21:e0:6d:86:6e:f3:
77:ec:d4:d6:46:31:b5:b7:ba:9d:be:99:a8:a5:67:a9:45:5c:
42:09:28:f2:1a:e9:dd:12:59:0c:59:93:9a:a0:da:a7:7f:7f:
5b:4f:52:27:27:56:fc:17:92:ca:bd:ac:02:67:28:c5:04:c7:
2a:2a:52:44:7a:bf:a5:4f:e4:de:91:e0:e7:a0:67:30:c1:5c:
9e:67:1d:ec:21:1d:0d:39:8f:cd:32:dc:16:0d:06:c1:ca:b0:
27:76:74:22:72:c4:2d:d6:86:6d:32:df:81:10:d5:1c:bf:b5:
c7:0c:16:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJp8WO070kurG67LnZAIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy
ODVkZTcwHhcNMjUwMTAyMTc1MzI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTFiMGIxNWY0NmNhMTNiZWJiZjUyYzUyYWZjZjExNTVmYmVlZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/99Zp5j4YN4L5Bp6RuzmkuZRgnV
auz9UKpbHpBjiWM+5yA28H9U02tIGblgCbAMSD78JyidtK0olOYqsaQlST93Fosc
Y49jB7irWU7Ha00B9z2GaiuH2qu8AE2MxOpaj/CyU+ZCLxuir35tiGARG4tPxoBX
xOz6sGWJYCusXsEsNaj9ltda8rB9k/WT8S94i4fCkfawEeDwH8wmZhHcTqIwdlhb
zEbTNKKoKCgtICIgq+jzkqOLCrZP1hl1/he4NgPBKNqb4QZmLeHmoelWHzembBTn
3ja45b0ixf4woyJdSk3ebeDgE3rozhYOSYAnCxnoco6Ii7Uw6PEtRGNw3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKobCxX0bKE7679SxSr88RVfvu3iMB8GA1UdIwQY
MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt
NDc3MjMxMTkxYTM1LzEvcWhzTEZmUnNvVHZydjFMRkt2enhGVi0tN2VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1
LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQixMA0G
CSqGSIb3DQEBCwUAA4IBAQBa6Jlug9ENd8w/RAEOktCc25fbUr0OaJKZlEwaLZAg
vf1/+hydNQGa7oVUmvCaLu8ZJHYTX7KllBHZG9SmXFoi5m32Da0BWb3FceCWQdyC
fozaK2GYgE72hHmU1s6oPQj/LPBoctoHkQ+V6ZncCKXL+LnjYrI2d7MxquxlyWz9
VUAp7KSoB5jfl40h4G2GbvN37NTWRjG1t7qdvpmopWepRVxCCSjyGundElkMWZOa
oNqnf39bT1InJ1b8F5LKvawCZyjFBMcqKlJEer+lT+TekeDnoGcwwVyeZx3sIR0N
OY/NMtwWDQbByrAndnQicsQt1oZtMt+BENUcv7XHDBY5
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:20:52 2025 by rpki-client