Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/qjXXTFXVdVVWr7-MSHZr7AQqbSo.roa
File: qjXXTFXVdVVWr7-MSHZr7AQqbSo.roa (raw, json)
Hash identifier: Sp8Mn3EU/O89RIW7deIN1lZCT2/D8tgJU4hIx0BHNRE=
Subject key identifier: AA:35:D7:4C:55:D5:75:55:56:AF:BF:8C:48:76:6B:EC:04:2A:6D:2A
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 019522E931AE1539D1FEB24DAE3C9512149D
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/qjXXTFXVdVVWr7-MSHZr7AQqbSo.roa
Signing time: Thu 20 Feb 2025 10:31:02 +0000
ROA not before: Thu 20 Feb 2025 10:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.134.253.0/24 maxlen: 24
193.135.101.0/24 maxlen: 24
2a14:8980::/48 maxlen: 48
2a14:8981::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:e9:31:ae:15:39:d1:fe:b2:4d:ae:3c:95:12:14:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Feb 20 10:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa35d74c55d5755556afbf8c48766bec042a6d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:b4:99:b0:9a:92:93:8c:df:40:8f:3a:16:
8e:02:fa:10:8a:8d:0f:1b:97:55:1c:49:50:60:69:
46:8f:be:c4:6b:61:bc:f3:d6:5a:a0:4c:bb:31:a8:
2f:b1:f9:ab:3a:a4:7a:68:63:e7:11:0e:6a:95:5a:
c7:f0:21:c3:88:66:50:1e:86:59:b4:30:b9:05:4a:
7c:df:4a:df:87:b5:0e:ce:42:ea:d2:58:3b:27:8f:
ad:28:d1:26:c9:d0:44:ef:5a:60:0f:12:d4:73:ba:
ba:20:84:13:b9:e3:f7:d6:0e:96:9d:03:4c:c4:ea:
5e:91:44:3e:79:3e:01:51:38:36:f3:40:63:c9:c8:
8d:ed:dc:6a:0b:df:bf:56:99:0b:9d:0e:c9:7d:9f:
08:92:78:0f:df:0c:0e:14:5a:cd:4c:e4:f0:2b:78:
99:34:f3:7a:64:12:ce:b4:8e:a9:2b:1c:5c:f4:25:
76:86:67:8a:9d:4c:11:83:e2:bc:60:03:5b:f1:04:
70:af:4b:61:a2:ec:b2:48:9d:74:83:85:dd:d4:f2:
d2:7f:66:ea:f9:9b:39:fc:b4:4b:54:dd:65:0f:52:
b8:49:ea:22:b9:76:da:7f:1e:8b:09:3b:79:35:c0:
f3:2e:f9:c0:b7:0e:44:60:f3:f9:86:12:c3:1e:f9:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:35:D7:4C:55:D5:75:55:56:AF:BF:8C:48:76:6B:EC:04:2A:6D:2A
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/qjXXTFXVdVVWr7-MSHZr7AQqbSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.253.0/24
193.135.101.0/24
IPv6:
2a14:8980::/48
2a14:8981::/48
Signature Algorithm: sha256WithRSAEncryption
12:db:27:67:84:4a:98:14:80:1c:54:fc:5f:e8:48:83:60:a9:
d0:5b:2f:bb:1b:84:af:90:17:bb:c5:9c:1d:71:93:af:08:b7:
64:77:dc:85:ad:00:b9:14:d9:32:60:c0:60:93:a2:0c:6c:d7:
19:cd:72:0a:db:ae:1b:f7:0c:b7:3d:6f:f8:2d:4a:1e:98:4f:
16:62:f8:48:27:72:13:26:09:da:3b:39:a0:c7:c6:8b:3d:a2:
cb:80:fe:f4:93:11:ac:d9:17:37:a6:90:69:ac:d8:e5:6d:eb:
b8:5c:03:a6:e7:86:f0:42:71:1c:8b:bd:6f:72:be:a0:63:df:
5d:b9:b3:a4:bf:42:02:e5:9b:72:a7:5f:9f:f7:da:9c:de:b8:
a2:88:75:ea:ec:5a:6a:ab:12:06:2b:63:c2:44:ed:42:63:a2:
50:84:20:d8:1c:1b:c6:48:e5:92:11:7d:d4:07:a5:db:bc:c9:
1b:c1:82:be:4a:a3:29:38:84:72:5a:77:a1:5f:f4:66:ea:f8:
17:2c:1b:0a:cb:bc:c6:8c:06:9e:d3:b8:b5:5d:17:50:89:a3:
7a:06:b8:10:51:42:49:2a:27:74:65:64:d6:ca:db:7b:48:5f:
36:64:30:a1:85:a2:af:18:36:f5:0f:1a:2b:b2:76:04:04:29:
6c:de:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:17 2025 by rpki-client