Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/988c5a-5897-4d6a-a6cf-9681193d51bc/1/QIHAC6HidrE2GxpEuM_QhKrP-xE.roa
File: QIHAC6HidrE2GxpEuM_QhKrP-xE.roa (raw, json)
Hash identifier: kIR/ygW3R2AUgT/KBpDqBHVw1ZyiMGUevCa+RY914tQ=
Subject key identifier: 40:81:C0:0B:A1:E2:76:B1:36:1B:1A:44:B8:CF:D0:84:AA:CF:FB:11
Certificate issuer: /CN=680494359a6200c5adcdcec3649e138ab1ed8870
Certificate serial: 018CC7954F0827995AFC2354DB711C2AC576
Authority key identifier: 68:04:94:35:9A:62:00:C5:AD:CD:CE:C3:64:9E:13:8A:B1:ED:88:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aASUNZpiAMWtzc7DZJ4TirHtiHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/988c5a-5897-4d6a-a6cf-9681193d51bc/1/QIHAC6HidrE2GxpEuM_QhKrP-xE.roa
Signing time: Tue 02 Jan 2024 00:31:40 +0000
ROA not before: Tue 02 Jan 2024 00:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 195.69.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4f:08:27:99:5a:fc:23:54:db:71:1c:2a:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680494359a6200c5adcdcec3649e138ab1ed8870
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4081c00ba1e276b1361b1a44b8cfd084aacffb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:ad:07:98:30:f6:ce:94:10:0e:c8:87:cf:
a7:60:6a:45:79:0f:2f:27:bf:3d:20:53:07:c7:ed:
46:44:c9:51:d7:46:ef:97:0d:56:43:84:fd:89:e0:
d5:24:29:e8:a2:84:f5:de:0f:11:88:82:31:5b:94:
fc:47:14:bb:c7:fe:3c:22:d0:07:19:03:b0:6f:31:
b0:5e:cc:ee:38:09:c2:ab:3a:d1:ff:32:ff:b7:fc:
10:b5:6c:38:c9:cf:b1:d5:9e:78:0e:d9:a1:00:db:
8a:20:14:1b:89:05:6e:aa:ef:a0:7c:e0:62:b7:2e:
05:a5:83:f8:e6:f8:39:79:73:56:25:91:dc:64:69:
af:3e:3e:af:1c:ce:e2:f4:d5:35:2f:30:f1:67:b8:
de:a6:f1:85:c1:27:e2:7a:09:8e:71:a7:9f:08:d3:
5e:66:2b:cc:d7:40:19:90:d3:87:20:3b:17:df:a5:
e8:55:01:30:8a:e0:f6:92:e7:48:87:21:9d:1e:2a:
15:2f:e8:33:8e:66:e5:c7:af:5b:71:96:d3:b2:5c:
bc:41:2d:aa:ac:5b:e2:4f:8a:3d:32:18:eb:c3:51:
98:59:04:20:bd:8d:cb:86:2b:c8:bb:33:af:48:b6:
5b:21:2b:a7:b9:10:e2:5c:61:5f:87:c0:83:a0:8f:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:C0:0B:A1:E2:76:B1:36:1B:1A:44:B8:CF:D0:84:AA:CF:FB:11
X509v3 Authority Key Identifier:
keyid:68:04:94:35:9A:62:00:C5:AD:CD:CE:C3:64:9E:13:8A:B1:ED:88:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aASUNZpiAMWtzc7DZJ4TirHtiHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/988c5a-5897-4d6a-a6cf-9681193d51bc/1/QIHAC6HidrE2GxpEuM_QhKrP-xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/988c5a-5897-4d6a-a6cf-9681193d51bc/1/aASUNZpiAMWtzc7DZJ4TirHtiHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c2:87:7a:22:bc:a2:41:71:d3:2c:2b:8d:2d:7d:b9:33:17:
55:99:4f:94:b1:41:fc:86:7b:97:26:23:93:e5:4d:a2:07:80:
be:45:21:b8:65:ac:e4:cf:f8:ac:31:f7:2f:62:f7:0f:a3:26:
b7:28:2e:7d:2d:0d:a2:47:3a:3e:d7:f3:31:7d:a8:c1:a3:b1:
73:cf:43:da:c7:f5:74:63:e2:27:c8:8e:e1:5a:95:2c:44:bd:
ed:fd:79:b1:00:77:3e:9a:16:58:f2:55:b5:15:70:da:a3:20:
80:48:2a:89:36:39:82:5d:4c:cd:97:e9:36:cb:83:19:c4:84:
b8:fc:bb:d4:22:6f:f2:52:f9:33:b7:4b:ec:0c:86:e5:79:31:
7c:78:c0:7b:93:66:5f:17:58:33:94:63:e5:05:eb:62:e9:fa:
5e:81:86:c8:8c:e2:af:64:cf:8a:96:e7:f7:25:eb:72:7e:e4:
36:87:7d:4f:89:97:e7:8e:d4:92:92:41:6c:56:e0:5f:7e:9a:
9c:39:87:3a:0f:bf:ca:f1:64:e2:8d:a2:59:0a:3a:1e:42:52:
51:9b:6b:89:4c:5b:58:09:01:0e:5f:1a:e9:92:62:02:64:58:
06:51:4a:bb:a9:7b:f0:d9:96:14:65:29:d6:ca:fc:e3:94:aa:
20:c7:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:49 2025 by rpki-client