Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qzHe-_6PkH9h9IbS4f1I69zMwPc.roa
File: qzHe-_6PkH9h9IbS4f1I69zMwPc.roa (raw, json)
Hash identifier: +cJNQoL2PhbEUBuXSpebAHA3yJ2vf9VHaZKXe48SIMc=
Subject key identifier: AB:31:DE:FB:FE:8F:90:7F:61:F4:86:D2:E1:FD:48:EB:DC:CC:C0:F7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BC6F4B0FAC8D081444A2BF0C20FA9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qzHe-_6PkH9h9IbS4f1I69zMwPc.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 109.122.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c6:f4:b0:fa:c8:d0:81:44:4a:2b:f0:c2:0f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab31defbfe8f907f61f486d2e1fd48ebdcccc0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:dd:53:0d:7e:6f:66:d9:b8:2a:66:e4:76:
52:96:98:4a:50:d7:21:46:b2:18:28:4a:f6:c5:10:
99:ac:0f:4f:eb:fc:c5:51:39:29:e9:07:b6:04:46:
f2:c7:0b:72:a5:e7:ca:d5:f1:c6:46:d9:a2:20:68:
d5:a4:5a:92:b4:0c:c9:10:ef:9a:e3:ff:90:d4:71:
5b:e0:e9:50:df:73:b9:6d:98:65:00:b7:20:54:3b:
a8:e9:c6:b6:a8:f9:01:e1:ae:22:f7:4a:37:e3:66:
08:77:79:80:3f:04:55:61:25:b7:5a:fb:56:eb:95:
e3:92:6a:10:0a:f6:d9:a2:9f:d5:c1:43:e2:44:7e:
01:82:48:1f:93:91:66:3d:56:cd:f7:1b:a4:30:f4:
25:5d:79:ae:2a:4e:27:9b:39:0f:16:cb:71:dc:2d:
a3:9b:02:db:56:c3:5a:fb:7e:27:4c:01:c9:73:0f:
50:6c:74:77:48:f5:cb:da:73:49:52:9b:da:1e:e2:
ce:dd:e1:47:78:6c:dd:26:f1:8d:6c:db:e7:67:15:
98:a0:38:ce:15:a5:64:8f:ea:32:8c:ee:4c:f4:79:
ae:c3:d2:63:46:1c:25:cc:e4:ae:75:b2:1b:9c:8c:
e5:ef:84:47:9c:57:34:ab:73:a1:70:d9:62:da:a7:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:31:DE:FB:FE:8F:90:7F:61:F4:86:D2:E1:FD:48:EB:DC:CC:C0:F7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qzHe-_6PkH9h9IbS4f1I69zMwPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7c:53:5e:87:55:2d:73:01:83:88:0b:ac:20:76:bb:21:17:
8d:92:d6:48:9e:d1:56:0e:c9:63:08:57:02:03:ae:83:41:84:
5c:99:37:c1:a2:f9:be:55:5b:b4:ae:fe:4d:6a:58:f8:aa:a2:
99:59:d0:80:52:63:1a:1f:d0:55:d7:fb:08:7b:d1:c8:7a:b6:
f5:d8:19:53:0a:1e:f3:30:37:68:3d:6a:df:db:82:9e:9b:48:
42:f2:1e:48:ce:de:e1:5d:dd:ec:0a:b5:82:d7:a0:15:ca:9d:
81:b3:3b:ba:f8:ff:f5:71:9d:13:2d:be:09:c2:e0:f7:38:0e:
20:23:32:5c:47:e3:30:29:92:4e:05:7d:a6:5f:89:c5:cc:98:
e3:1d:c8:32:ff:76:58:1e:73:0d:f4:c9:93:ee:f4:a6:4e:90:
74:62:07:6b:94:b1:f4:36:46:f9:42:94:4f:89:2a:b1:8d:dd:
27:33:91:54:83:e4:31:ef:03:0d:37:fb:cd:1b:36:52:3c:0e:
f4:7a:0a:33:e2:46:b3:ec:41:08:cb:ad:1c:fa:10:33:cd:06:
dc:45:5e:3f:d7:01:74:db:06:be:2d:0e:38:d4:81:b1:b2:1b:
bf:9a:7d:96:b4:20:9a:15:5b:f8:e2:c4:5d:fa:26:bb:e7:56:
30:37:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:29 2025 by rpki-client