Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/qPm-VPgo6xNKbBpLHz3FwZ0pWZE.roa
File: qPm-VPgo6xNKbBpLHz3FwZ0pWZE.roa (raw, json)
Hash identifier: rmasD6jAiWQpHVDSCdeKVc/ML75SMNlm3J04kBdtMIU=
Subject key identifier: A8:F9:BE:54:F8:28:EB:13:4A:6C:1A:4B:1F:3D:C5:C1:9D:29:59:91
Certificate issuer: /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial: 040AA336
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/qPm-VPgo6xNKbBpLHz3FwZ0pWZE.roa
Signing time: Mon 30 May 2022 12:49:13 +0000
ROA not before: Mon 30 May 2022 12:49:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 194.49.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67806006 (0x40aa336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Validity
Not Before: May 30 12:49:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8f9be54f828eb134a6c1a4b1f3dc5c19d295991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:cb:f4:c1:d8:37:8b:af:41:57:df:ed:81:
01:27:dd:26:c5:31:36:bf:21:46:85:4c:9f:e3:50:
cb:7c:60:fb:1f:e3:45:7e:9c:6f:15:f3:7b:13:c8:
a1:3d:c6:67:e5:7b:91:cc:aa:9f:4a:fa:4f:07:80:
19:03:b5:47:09:8b:70:a3:68:8a:03:1a:12:2b:82:
af:20:32:d0:98:2e:ec:a4:81:33:07:99:6c:0d:4a:
c1:89:16:d2:44:ef:bc:c8:79:ce:87:2d:48:1c:45:
c6:d7:19:13:77:08:2d:99:3b:c6:a7:32:fa:99:c5:
f8:83:8f:0e:be:b7:ea:b8:36:2d:6f:eb:97:26:cd:
e0:fe:f0:55:59:34:1b:f6:80:d8:cb:3e:45:f4:9c:
25:aa:66:86:f1:c1:ae:66:a9:56:3d:1b:f6:aa:c2:
04:9d:cd:9b:bb:23:72:bd:b6:06:e1:b0:74:99:1b:
dd:c9:71:04:0d:ee:fc:70:6b:e5:8d:e5:03:b1:1d:
b3:ba:ad:84:9a:59:0f:cd:da:bf:5d:f1:57:b8:f4:
8c:90:91:f1:b0:77:6d:46:f8:cb:49:82:79:b5:e4:
f2:4b:ab:fa:d6:38:02:4c:e9:58:d4:8e:80:9c:77:
52:6b:49:81:63:64:1b:4a:0f:de:10:38:29:b2:bf:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:BE:54:F8:28:EB:13:4A:6C:1A:4B:1F:3D:C5:C1:9D:29:59:91
X509v3 Authority Key Identifier:
keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/qPm-VPgo6xNKbBpLHz3FwZ0pWZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.86.0/23
Signature Algorithm: sha256WithRSAEncryption
85:84:d2:2b:19:a8:72:14:c3:20:3b:fb:59:57:f6:e2:83:47:
c1:b8:4e:d6:60:33:33:fe:bb:40:82:2f:87:72:a7:72:a8:21:
46:4c:cf:73:86:86:62:b3:57:2a:91:45:a2:e3:fc:fe:ca:98:
6b:5e:e9:d3:ca:cd:d2:ff:5f:b5:d7:44:38:9c:94:61:eb:ab:
e3:ae:0b:33:be:9b:f2:9f:6d:df:98:c8:52:63:fd:ae:0c:7e:
bf:50:11:ac:0d:e5:ae:3c:d1:a7:03:94:a8:6d:fa:c0:a0:39:
6f:bf:04:74:22:73:74:0a:65:fa:2a:0c:39:e3:d8:80:20:f9:
8a:1e:53:02:e3:33:aa:84:e2:e1:cb:5c:03:e8:75:cc:1c:b4:
10:d0:bc:e1:e6:b3:44:9d:ad:57:04:a2:a5:3f:3c:3b:b3:fb:
b2:a1:f0:5e:56:a6:d9:38:53:d3:29:81:11:2d:40:72:fa:f6:
53:cf:eb:a4:9b:38:59:93:be:f6:f9:55:98:74:a7:2a:bb:52:
f5:ed:06:3d:2f:66:14:d6:9f:e4:ea:7f:73:68:53:c9:f4:32:
21:6f:c6:2e:98:b0:d5:a6:1e:ef:0f:1d:eb:ef:90:2f:9e:4d:
0c:ce:2b:aa:9f:f6:36:01:bc:d9:80:11:09:07:a8:bd:75:7f:
82:24:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:08 2025 by rpki-client