Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa
File: QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa (raw, json)
Hash identifier: +v8M6N8Y0/MmQiQAMyBHFYzXCbEXjl19X7YGjBZ8sJQ=
Subject key identifier: 42:82:9B:60:DE:CE:99:10:5D:36:EC:7C:65:54:50:4D:97:89:D2:9A
Certificate issuer: /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial: 019425FD66833ADA89C03F61BB4FE8D518DA
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa
Signing time: Thu 02 Jan 2025 07:49:11 +0000
ROA not before: Thu 02 Jan 2025 07:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 84.33.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:66:83:3a:da:89:c0:3f:61:bb:4f:e8:d5:18:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Validity
Not Before: Jan 2 07:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42829b60dece99105d36ec7c6554504d9789d29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:50:83:37:c4:ad:f0:3e:94:2c:3b:63:18:
89:bf:25:b4:94:24:4d:15:bc:72:37:92:d8:f0:1a:
3a:f5:b9:c3:9d:90:c7:df:3d:4a:e0:94:d9:7e:7d:
aa:03:4b:cc:6c:32:f5:ee:56:3f:4f:b1:b4:2a:a2:
c5:a8:18:59:4f:ef:e3:9c:c5:de:e6:cf:f1:c3:5e:
89:c5:fd:fd:7f:d8:3d:18:55:0e:98:37:3d:bb:fb:
75:9e:8e:27:24:a3:6e:03:21:83:e4:32:e8:d9:86:
18:bb:8b:e5:0a:aa:a2:c2:21:c2:9e:b9:57:7a:58:
ae:21:2a:43:c8:5d:bc:ff:b2:bb:19:a3:5d:03:20:
7e:ef:08:a5:f2:e8:50:fc:bd:00:b4:fd:1a:88:61:
42:01:cd:ca:88:b4:51:39:b1:e4:69:05:4f:c1:9e:
79:c2:27:87:f6:91:b8:5e:a6:36:23:3b:7f:ef:68:
2a:0a:75:19:b3:41:b6:e1:79:7d:4b:e0:57:c1:cc:
a4:60:5a:6d:b1:e8:70:88:cb:a0:fc:27:31:56:7b:
6a:90:8a:8e:c7:18:43:2e:58:74:d3:40:85:a5:cf:
2a:c1:ed:1c:fb:7b:d4:cf:c3:c5:46:fd:d5:27:a1:
12:94:a0:ca:17:5f:e3:05:0b:f5:15:78:70:47:b1:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:9B:60:DE:CE:99:10:5D:36:EC:7C:65:54:50:4D:97:89:D2:9A
X509v3 Authority Key Identifier:
keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.33.16.0/23
Signature Algorithm: sha256WithRSAEncryption
28:03:22:ab:57:79:2d:17:27:3f:b8:82:5c:31:a1:8c:77:d8:
bf:b5:09:9a:5a:e4:99:1b:86:5a:09:4f:93:65:bf:ed:51:95:
c7:c7:12:f7:02:9b:de:c4:af:5a:7f:df:9a:6c:09:ef:1b:20:
ed:18:81:41:77:91:ac:6a:20:3c:f9:71:0e:48:c4:54:f8:ef:
3c:95:87:c5:12:0e:10:5f:95:d7:42:d5:7a:ce:cd:53:26:79:
32:b3:1b:20:80:e7:d1:8f:c8:81:f5:99:85:b8:5b:1f:ce:ee:
de:82:99:2f:5a:96:0c:d1:b8:2b:1b:ef:8f:a3:6f:d8:d2:a4:
55:62:c8:83:c7:db:6a:ec:e5:f7:59:81:71:8f:09:9e:15:e4:
a4:c9:24:01:66:d6:52:bf:f8:65:f3:55:f5:f6:75:f9:47:55:
3d:a9:85:c3:3a:97:0d:d4:42:88:3b:07:09:49:5d:9e:c7:f1:
12:29:c8:a7:56:c5:e4:cf:7b:a9:5d:5f:4d:c7:e3:22:6a:95:
55:53:83:a0:5a:f3:3f:6d:41:cd:37:cd:6b:a9:cd:44:42:e2:
f4:26:2e:f5:2d:e2:a3:15:aa:5a:32:de:30:b5:cc:49:22:9a:
f1:7f:a9:7a:a5:de:51:aa:75:77:b3:ab:db:bc:99:6f:65:d8:
89:12:53:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/WaDOtqJwD9hu0/o1RjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZWJjOWJmZWYyYjRkMjNmMTk1MTNiZmQ0ZDYwYmI3OThm
NWE1OWQwHhcNMjUwMTAyMDc0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjgyOWI2MGRlY2U5OTEwNWQzNmVjN2M2NTU0NTA0ZDk3ODlkMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w1QgzfErfA+lCw7YxiJvyW0lCRN
FbxyN5LY8Bo69bnDnZDH3z1K4JTZfn2qA0vMbDL17lY/T7G0KqLFqBhZT+/jnMXe
5s/xw16Jxf39f9g9GFUOmDc9u/t1no4nJKNuAyGD5DLo2YYYu4vlCqqiwiHCnrlX
eliuISpDyF28/7K7GaNdAyB+7wil8uhQ/L0AtP0aiGFCAc3KiLRRObHkaQVPwZ55
wieH9pG4XqY2Izt/72gqCnUZs0G24Xl9S+BXwcykYFptsehwiMug/CcxVntqkIqO
xxhDLlh000CFpc8qwe0c+3vUz8PFRv3VJ6ESlKDKF1/jBQv1FXhwR7H6kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEKCm2DezpkQXTbsfGVUUE2XidKaMB8GA1UdIwQY
MBaAFKrryb/vK00j8ZUTv9TWC7eY9aWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXV2SnYtOHJUU1B4bFJPXzFOWUx0NWoxcFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mYjEyODktNGQxNC00MGYwLTk2Nzkt
MTFhZmI0OTkyZWVmLzEvUW9LYllON09tUkJkTnV4OFpWUlFUWmVKMHBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9mYjEyODktNGQxNC00MGYwLTk2NzktMTFhZmI0OTkyZWVm
LzEvcXV2SnYtOHJUU1B4bFJPXzFOWUx0NWoxcFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVCEQMA0G
CSqGSIb3DQEBCwUAA4IBAQAoAyKrV3ktFyc/uIJcMaGMd9i/tQmaWuSZG4ZaCU+T
Zb/tUZXHxxL3ApvexK9af9+abAnvGyDtGIFBd5GsaiA8+XEOSMRU+O88lYfFEg4Q
X5XXQtV6zs1TJnkysxsggOfRj8iB9ZmFuFsfzu7egpkvWpYM0bgrG++Po2/Y0qRV
YsiDx9tq7OX3WYFxjwmeFeSkySQBZtZSv/hl81X19nX5R1U9qYXDOpcN1EKIOwcJ
SV2ex/ESKcinVsXkz3upXV9Nx+MiapVVU4OgWvM/bUHNN81rqc1EQuL0Ji71LeKj
FapaMt4wtcxJIprxf6l6pd5RqnV3s6vbvJlvZdiJElOu
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:47:30 2025 by rpki-client