Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/qbaRnHpcfItOd1i6AM6OJtPcgps.roa
File: qbaRnHpcfItOd1i6AM6OJtPcgps.roa (raw, json)
Hash identifier: Gsq+pylbf689IAXMKrAZMcgBHE/7Rn1FBRIzqd5eheU=
Subject key identifier: A9:B6:91:9C:7A:5C:7C:8B:4E:77:58:BA:00:CE:8E:26:D3:DC:82:9B
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB8A38E1FE674C80BFC0944C70B2F
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/qbaRnHpcfItOd1i6AM6OJtPcgps.roa
Signing time: Thu 02 Jan 2025 07:48:26 +0000
ROA not before: Thu 02 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205419
IP address blocks: 195.167.153.0/24 maxlen: 24
206.252.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b8:a3:8e:1f:e6:74:c8:0b:fc:09:44:c7:0b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9b6919c7a5c7c8b4e7758ba00ce8e26d3dc829b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:17:22:dc:2b:0d:78:7b:cc:17:b7:21:7a:22:
fd:61:b9:3e:e2:27:46:8e:d7:05:86:47:4a:5a:09:
69:1e:b7:88:8c:68:96:fa:98:52:3f:30:a2:79:1b:
d9:36:63:e4:48:61:65:14:59:3e:31:34:4e:fc:62:
fc:b2:b1:c2:ab:5e:d3:eb:22:fe:7e:b3:a2:d9:6b:
79:16:57:2c:6c:6e:13:bc:71:6e:10:39:28:bc:1f:
db:95:83:b0:61:81:3a:08:81:65:78:4e:81:4a:bb:
e9:da:68:52:1d:c7:48:63:4d:14:ab:72:ca:48:c1:
3a:02:f3:f7:4d:2b:ce:67:c2:24:b0:c5:d9:62:e8:
71:bd:3a:c9:eb:5e:16:c5:f0:cd:df:df:27:f8:31:
5b:d9:1d:20:77:b4:cb:2e:ca:c3:b0:d0:93:42:b4:
d0:f8:39:9e:54:92:98:a9:da:4f:ab:2e:9d:de:d9:
34:3a:ba:cb:e3:5a:91:11:77:35:d6:d0:f9:52:0f:
9c:28:e1:c6:18:ea:3c:1b:80:55:77:7e:d8:46:ef:
52:b1:e2:ae:08:ff:d6:3c:03:8a:8d:72:c8:7c:02:
e2:b5:13:40:7d:31:48:60:8d:a3:67:4e:f0:93:0d:
65:85:a4:57:42:69:69:8d:07:8c:00:87:db:77:e1:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:91:9C:7A:5C:7C:8B:4E:77:58:BA:00:CE:8E:26:D3:DC:82:9B
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/qbaRnHpcfItOd1i6AM6OJtPcgps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.167.153.0/24
206.252.242.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ab:2a:a1:af:f1:48:62:4f:9d:a9:c0:ba:13:c1:90:a3:12:
97:03:ba:28:9b:d5:19:d1:fd:73:50:e7:b8:af:75:ae:51:be:
1a:52:8f:f8:3c:df:74:af:b9:74:83:ed:98:9c:a8:16:af:77:
b9:a5:0a:89:11:7a:53:bf:f6:4c:90:3c:f6:b7:8d:f7:0e:9a:
f4:9f:ca:4c:9f:23:1e:81:37:a4:d1:6d:87:4c:ee:f4:3a:ab:
6b:6a:29:51:ba:58:48:32:1e:df:c1:69:9b:2f:ff:27:d9:0e:
0e:17:50:91:6e:ad:11:fd:83:0f:16:fd:17:4a:ff:dd:93:c2:
28:e3:f4:41:c4:b0:06:92:1e:b0:42:f0:e2:07:d5:c5:7d:0c:
14:ff:c8:de:f8:6f:3f:a8:b1:27:c9:6e:57:9e:12:8e:f5:b7:
02:8f:5e:84:3f:78:0c:a9:b1:9b:1d:3d:83:b4:bd:a4:29:c8:
47:79:32:1b:9d:28:c2:17:30:40:94:ca:7e:95:45:4a:28:8b:
b8:f5:a5:9e:f3:33:f4:26:17:84:8d:8e:88:6c:00:38:bd:a7:
df:cf:89:26:02:c3:2f:77:ea:0e:fe:a1:82:d2:e4:e6:83:c5:
90:b5:d5:5f:12:be:9f:75:5c:45:46:a6:29:50:ba:cb:67:f6:
50:d7:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:33 2025 by rpki-client