Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa
File: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (raw, json)
Hash identifier: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=
Subject key identifier: AA:2D:19:A9:15:BA:6D:60:86:08:13:AE:77:24:5C:FD:95:37:DC:F3
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 019420D5BA78C8D4545C8F69603D6D19673B
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa
Signing time: Wed 01 Jan 2025 07:47:45 +0000
ROA not before: Wed 01 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203971
IP address blocks: 213.154.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ba:78:c8:d4:54:5c:8f:69:60:3d:6d:19:67:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2d19a915ba6d60860813ae77245cfd9537dcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:00:49:5e:f4:04:22:26:87:57:dd:19:9b:
fc:1e:e0:a7:28:74:69:10:1c:3e:40:3b:91:b2:03:
59:b7:fa:dd:d6:8a:d1:72:2b:50:ef:5e:27:76:86:
a4:16:68:4f:d6:42:c0:66:c3:f8:4b:e3:98:3a:c0:
5d:6c:34:0c:77:f0:1a:66:a9:c2:5d:f8:80:d3:66:
f6:e0:69:ae:7d:fe:38:6d:3b:9c:43:c4:e6:71:7b:
af:16:12:45:1e:ad:ef:9a:a5:c3:2b:44:1d:c7:2f:
b6:26:2e:4e:85:b6:0e:93:f1:36:6f:11:59:d5:6f:
1a:48:cf:d2:bb:c9:18:f9:bb:56:d3:fd:35:ff:0c:
5c:9b:d2:5a:d4:0d:aa:9c:99:8e:f1:e4:34:86:37:
df:d9:3c:a0:a3:a9:ff:01:5b:a9:d8:4d:99:ef:99:
c9:af:4c:f0:e0:f8:c9:b5:2a:0d:f8:b9:eb:91:39:
41:7c:84:e4:36:b9:bd:b7:d3:ff:8b:94:6f:de:fe:
ce:ba:8d:67:85:e7:fd:a8:69:50:aa:77:17:8f:5c:
bd:7c:f8:51:59:67:52:d7:c1:8d:d9:0e:ae:69:b3:
ed:4a:f1:9d:21:a0:60:c4:0a:49:48:80:3f:d9:40:
39:05:2d:e7:f4:70:df:25:ed:03:0c:af:d7:4b:61:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2D:19:A9:15:BA:6D:60:86:08:13:AE:77:24:5C:FD:95:37:DC:F3
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.154.24.0/22
Signature Algorithm: sha256WithRSAEncryption
01:1b:d8:34:08:53:a5:0f:b7:a7:5a:e1:db:3b:ef:ed:87:4c:
c8:10:e6:e6:e6:73:57:b1:65:52:94:bc:28:b6:43:3f:eb:0f:
18:bb:9c:2d:a1:a0:2d:87:bc:d5:8e:66:df:5d:11:0d:7c:6a:
ce:39:ee:59:9d:3f:97:50:11:32:fe:37:9f:36:ab:f0:fc:78:
a6:c5:80:34:a6:3b:5d:4c:dc:5e:53:ee:d2:f1:2c:a9:0f:f8:
d3:df:99:b5:ef:e7:0c:80:f9:a6:c7:de:e3:a0:f4:40:9c:1d:
cf:92:38:55:9c:20:db:01:f4:6d:c0:58:9d:e3:f4:28:dd:7d:
50:56:6e:18:1e:76:02:8f:12:e0:50:fa:46:04:0e:da:e4:6b:
89:18:02:aa:6c:fd:7a:1d:2b:55:66:c2:04:ca:dc:87:47:23:
1f:b5:cf:ac:d8:f3:f3:01:b2:b9:21:26:cf:41:85:20:22:a3:
e6:ef:a0:94:c8:13:c8:01:d5:0a:e1:cf:a6:1f:39:0d:ff:2f:
e7:e5:9d:be:1b:ec:0e:bc:16:f3:89:fc:0e:49:16:b3:55:fc:
e4:a8:89:f9:f7:62:69:3d:94:e0:7a:62:99:a0:94:cc:ba:f4:
75:52:f7:94:02:ca:7d:b9:80:aa:0d:a0:26:b9:ef:f7:93:98:
85:31:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:34 2025 by rpki-client