Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/qeUjFmDBXRanRORKytHhxi_chXY.roa
File: qeUjFmDBXRanRORKytHhxi_chXY.roa (raw, json)
Hash identifier: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=
Subject key identifier: A9:E5:23:16:60:C1:5D:16:A7:44:E4:4A:CA:D1:E1:C6:2F:DC:85:76
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 01941FFA57FC57329993A4977CB8D1DB5086
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/qeUjFmDBXRanRORKytHhxi_chXY.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208576
IP address blocks: 45.86.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:57:fc:57:32:99:93:a4:97:7c:b8:d1:db:50:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9e5231660c15d16a744e44acad1e1c62fdc8576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:3b:eb:cf:28:a1:3d:ea:74:fe:94:43:4c:b0:
de:09:c8:4f:de:a3:70:f7:07:bc:ed:6c:bd:19:bf:
93:7b:b0:24:38:06:ee:6d:dc:74:8b:91:19:0c:c5:
9f:04:83:fd:d5:95:77:74:51:ab:aa:09:23:ed:07:
30:35:87:4a:cb:c5:fe:09:00:15:47:04:21:95:08:
c4:7b:7b:ad:6a:14:33:f3:fd:2c:ca:18:fc:3e:ad:
1f:ef:78:d8:0d:6f:60:6f:03:ac:62:6b:5c:27:6e:
f8:2e:96:dc:2b:62:92:15:ca:67:90:74:1d:b2:95:
a6:61:e1:97:7f:34:21:b9:12:33:61:43:58:25:79:
77:8b:e3:87:76:23:f8:57:ac:6a:52:75:4c:73:da:
f7:df:5e:a8:de:5a:78:84:d9:bf:df:38:85:91:1f:
d5:3a:27:52:01:80:1d:f9:ca:96:14:83:b5:d1:8c:
1a:41:9c:74:d2:73:12:7c:4e:18:6d:5d:db:dc:90:
7b:76:f6:1a:d1:a9:3f:60:d4:ae:1b:e1:05:c7:09:
43:d1:46:ea:e7:17:ff:39:0d:ef:3c:fd:7d:f0:39:
3f:d8:2a:d3:51:d0:cd:58:29:e8:74:be:92:20:39:
67:df:fb:a8:33:34:41:13:47:a3:7f:74:5b:d2:31:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E5:23:16:60:C1:5D:16:A7:44:E4:4A:CA:D1:E1:C6:2F:DC:85:76
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/qeUjFmDBXRanRORKytHhxi_chXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e5:bc:15:b9:af:90:44:f8:e6:90:a5:63:c0:36:26:77:b2:
54:7a:cc:67:2b:6e:97:db:6e:35:67:2c:76:48:cc:81:22:b3:
ef:ba:69:62:c0:94:4e:89:44:28:85:66:42:88:29:2a:ac:d4:
3c:ac:7a:37:0f:81:75:8f:1a:39:12:1c:24:32:2f:a3:cb:58:
a6:05:52:f0:a5:3b:e2:dd:a6:b4:19:c9:83:a0:dc:c8:47:fd:
89:98:d2:85:f6:d0:ad:8a:83:f4:1b:11:68:a0:44:2e:70:eb:
55:9e:c4:ff:eb:fb:6e:b5:7b:a7:dd:ef:c5:df:e6:40:ea:09:
a2:a9:c7:0f:1f:d4:5f:f6:37:53:eb:dd:86:f7:e6:d7:98:54:
6f:71:29:65:8c:dd:96:63:77:05:2c:f3:32:62:d6:4a:58:9c:
77:ee:63:f0:42:51:e9:ee:3e:4e:2c:3e:39:b3:42:cd:17:4a:
91:57:4c:7c:a0:af:66:01:76:5f:4c:ec:6e:b3:f2:96:1b:7d:
b0:f3:45:0f:32:e9:44:2d:8a:3e:22:6d:c2:28:d8:6e:ea:73:
52:e9:bb:7a:1a:a4:ac:13:7c:e3:1b:66:7f:eb:0b:11:d6:86:
8e:1c:69:d9:10:23:50:2f:f0:19:bf:42:7f:a2:55:0a:27:be:
52:9c:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:11 2025 by rpki-client