Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/sqv-w8GrpAMD4mkIvJVBeFvCfXE.roa
File: sqv-w8GrpAMD4mkIvJVBeFvCfXE.roa (raw, json)
Hash identifier: 6QbJ6e8Tq28zimsMOstOBKBpk6ZJXTyRU9cCrSMEcWM=
Subject key identifier: B2:AB:FE:C3:C1:AB:A4:03:03:E2:69:08:BC:95:41:78:5B:C2:7D:71
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0194221F9588FD98E978C1DD653395F1F052
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/sqv-w8GrpAMD4mkIvJVBeFvCfXE.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.159.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:95:88:fd:98:e9:78:c1:dd:65:33:95:f1:f0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2abfec3c1aba40303e26908bc9541785bc27d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:63:02:47:ee:3c:b8:5f:a5:ea:55:4b:78:
cc:4c:e9:32:62:35:d9:52:4c:6f:cc:d1:9c:61:42:
fc:36:f2:93:94:f0:99:4a:10:f1:49:06:f0:50:13:
8b:1a:ef:1d:e9:b5:8f:05:5c:cc:45:a3:21:fa:13:
33:9c:79:ff:0d:a3:c3:ab:10:b3:16:e9:b5:f8:f6:
c1:a4:73:77:33:77:b6:a7:8d:1c:6c:cc:5b:66:5b:
bc:06:6c:14:f8:9a:74:23:4c:fd:88:13:33:11:ce:
43:e3:a4:70:16:3c:9f:65:e4:1f:82:af:5a:4f:f5:
09:3e:f7:17:44:78:b4:03:39:02:c1:68:7e:95:40:
e9:24:e6:d1:12:19:1e:68:66:f8:e0:97:15:31:fe:
75:f5:ea:b6:44:99:cb:57:57:4a:ed:d4:16:4a:ee:
94:1e:22:95:8b:3c:71:35:6e:de:73:cd:8d:a4:43:
b2:27:58:82:e7:8e:27:30:77:2d:3a:f2:3b:f5:ef:
81:89:72:11:5e:b8:8e:8d:11:46:02:15:65:6d:63:
ab:85:10:be:21:d9:f8:48:32:13:cf:6a:b5:3c:d6:
3f:80:48:37:39:68:0a:24:32:71:a4:14:fb:0b:b2:
28:08:84:b3:39:8e:90:c0:b6:71:8b:37:7f:c7:01:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AB:FE:C3:C1:AB:A4:03:03:E2:69:08:BC:95:41:78:5B:C2:7D:71
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/sqv-w8GrpAMD4mkIvJVBeFvCfXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.13.0/24
Signature Algorithm: sha256WithRSAEncryption
25:20:28:cd:2d:66:ed:35:ef:43:62:a3:47:83:95:62:91:12:
95:0d:05:ac:1c:44:10:e7:88:08:66:92:ba:44:a1:0d:7b:63:
b5:09:97:21:84:d2:ce:9d:72:b0:bf:15:00:72:d1:9e:e9:57:
a9:f1:30:97:d7:ba:98:e5:b0:8a:66:66:6a:33:8a:4f:34:9c:
5a:99:93:fc:39:eb:99:f7:0d:51:a8:96:08:ee:ea:f1:19:26:
47:d7:10:19:de:b3:cd:d7:ff:bb:e5:e2:4c:74:41:bb:e0:f4:
60:bf:69:73:f3:55:f4:df:01:ae:fe:d9:c2:25:4c:4c:a4:0b:
91:84:ee:f1:7b:dd:18:f4:0a:20:08:5c:a6:56:c9:5d:d6:2e:
88:2f:ae:27:47:1e:05:22:45:f2:68:82:a3:2a:67:01:70:f4:
23:a6:c5:cd:21:e0:65:9f:a3:54:1d:34:7e:88:35:86:41:e7:
0b:0a:13:3f:e0:44:eb:ca:09:b0:18:ab:8e:e9:82:d0:f3:ab:
d7:4f:6a:49:f9:7e:79:2c:88:df:3d:72:ec:21:3e:d9:c6:90:
c0:db:3b:80:05:18:bc:1e:4c:59:3b:b1:22:10:4f:53:24:c7:
28:39:60:82:e9:2b:43:57:d4:4a:20:8e:ba:b2:6f:b5:b0:e5:
8d:41:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:43:12 2025 by rpki-client