Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/QlbBFQaDw0mV-ID5TaPSLsa9jy4.roa
File: QlbBFQaDw0mV-ID5TaPSLsa9jy4.roa (raw, json)
Hash identifier: jhnRBzc4hP9zVZ+Y0LXbpQn4LTRpNSLFQMPy+4NiMyI=
Subject key identifier: 42:56:C1:15:06:83:C3:49:95:F8:80:F9:4D:A3:D2:2E:C6:BD:8F:2E
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0194C883781DAA51806BDE216CF829A87AAE
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/QlbBFQaDw0mV-ID5TaPSLsa9jy4.roa
Signing time: Sun 02 Feb 2025 21:14:06 +0000
ROA not before: Sun 02 Feb 2025 21:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 45.89.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c8:83:78:1d:aa:51:80:6b:de:21:6c:f8:29:a8:7a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Feb 2 21:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4256c1150683c34995f880f94da3d22ec6bd8f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:f1:ba:04:5f:43:23:6b:c6:1a:b1:b3:4a:
c9:c0:bf:9d:d5:51:9d:52:51:ad:9d:84:08:d0:26:
2f:c4:ad:c0:05:37:b0:95:29:e1:9d:22:d6:57:40:
89:5a:f0:3d:7d:33:32:29:5b:95:23:3f:65:3f:df:
d2:4e:96:2d:93:9f:57:79:fb:1d:78:f0:e6:78:3c:
85:dd:2b:fb:44:26:66:98:17:77:5e:f6:8a:e3:b6:
7c:dd:4f:ab:e5:be:99:41:2d:c9:df:2d:d8:29:17:
10:45:fb:01:26:42:28:bc:2f:ea:de:5d:1c:e1:b0:
13:f6:a0:7a:ea:d9:8c:25:4c:30:9b:05:2c:3c:c0:
e2:31:2d:b0:00:ba:04:a7:5c:f9:cd:0a:bc:dc:90:
f0:43:97:a4:22:6c:7f:6d:c1:6d:14:2c:b8:9d:88:
5b:8d:89:03:76:13:9b:dc:ba:fe:f8:6c:8a:5b:9e:
87:10:9e:38:d4:8c:61:a7:a4:d6:7f:38:1c:08:90:
b9:a0:d0:e5:da:40:d9:ed:d0:78:65:b2:cd:1b:36:
c3:c0:21:62:64:3c:34:57:f3:33:84:09:b2:56:26:
3e:46:cb:8e:f1:ad:53:97:f6:d6:e5:48:20:a7:7f:
e7:ac:ce:bd:67:fa:83:7b:47:56:0b:10:ad:3a:db:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:56:C1:15:06:83:C3:49:95:F8:80:F9:4D:A3:D2:2E:C6:BD:8F:2E
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/QlbBFQaDw0mV-ID5TaPSLsa9jy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:39:f8:24:6b:be:73:be:b1:ed:eb:30:fa:22:8a:20:09:e1:
3d:58:fb:12:ab:c6:d0:74:55:fc:fc:9b:ad:a1:68:af:0f:1b:
4a:95:94:11:c2:b9:3e:93:b1:f9:da:41:8d:a0:64:09:43:30:
5f:7c:38:73:76:61:52:1f:a9:d7:9f:5c:a1:00:fe:96:f7:53:
6b:14:e0:5b:30:81:97:d0:59:43:17:88:67:74:dc:4a:7c:54:
b1:57:4a:84:e5:54:93:f2:6f:69:60:c6:d2:47:3f:84:22:c5:
a7:7d:59:ba:50:11:bd:64:fc:42:06:2d:1a:72:8a:69:f1:bf:
53:65:38:2c:85:5b:eb:35:e2:9e:2f:21:67:54:d6:39:23:77:
72:6b:5c:24:10:4c:47:01:be:b2:c4:d6:4a:c5:b3:62:61:f0:
6d:b2:d7:af:3a:fc:c3:93:b4:79:33:e8:9f:35:21:b1:78:64:
b4:b6:72:89:26:80:9d:b4:2d:3e:99:a8:06:11:56:54:28:b8:
0e:88:22:d7:79:37:06:2b:cd:60:3c:c2:5d:11:c4:9c:7c:24:
9d:a1:51:92:3b:a4:f1:6e:e9:13:97:59:6a:15:cd:2b:35:83:
e9:1f:56:60:26:16:53:ed:90:10:12:20:b7:e6:77:2d:38:de:
88:10:ba:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:54:57 2025 by rpki-client