Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/qqj3kfSTkrCAMLM1kbsN-xRoYYs.roa
File: qqj3kfSTkrCAMLM1kbsN-xRoYYs.roa (raw, json)
Hash identifier: /AInkg33YNlqfa/zf9POtIxO4wkKSvCNiyf6sknb8nk=
Subject key identifier: AA:A8:F7:91:F4:93:92:B0:80:30:B3:35:91:BB:0D:FB:14:68:61:8B
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50F1D2AC
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/qqj3kfSTkrCAMLM1kbsN-xRoYYs.roa
Signing time: Sat 01 Jan 2022 16:02:04 +0000
ROA not before: Sat 01 Jan 2022 16:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212777
IP address blocks: 194.209.237.0/24 maxlen: 24
212.243.178.0/24 maxlen: 24
194.209.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1358025388 (0x50f1d2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaa8f791f49392b08030b33591bb0dfb1468618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:2f:6a:75:31:0f:a4:09:a7:eb:90:ca:4b:
4c:d1:70:83:02:c4:94:d6:99:b2:79:33:b1:31:e7:
33:07:d6:98:02:7e:cb:6a:65:51:31:06:9f:34:0d:
e1:bb:54:fc:ff:58:78:85:f9:d2:44:2f:fe:3b:63:
3c:96:21:75:96:f7:cb:1a:cb:c2:f6:aa:8e:ce:ad:
3a:5f:e6:9e:31:5a:3e:7c:9e:e8:e7:57:ec:3c:5d:
64:96:57:7f:39:50:5b:46:49:d9:8a:ca:6c:3f:26:
8e:f7:bd:44:2b:20:bd:1b:fa:4a:ab:b5:8a:46:f8:
30:fa:fe:b8:b9:12:60:f8:db:93:7c:2a:a8:1c:4d:
39:30:bd:78:48:ff:20:5d:0b:c8:c2:ca:85:d7:24:
4f:cd:67:ee:cb:50:c4:9c:38:69:0f:23:74:b3:b3:
77:08:fc:96:fc:ab:3a:d7:6b:c7:02:65:c8:2a:26:
41:17:05:f7:50:ac:d8:8a:c8:45:61:4d:3a:2d:6f:
15:a4:d6:27:54:48:bd:e9:d7:d1:aa:8d:33:b2:a5:
08:2e:87:bd:bc:a4:aa:bc:b6:64:7c:2c:42:27:1e:
b1:cf:8a:98:59:1c:e2:0f:50:98:76:fc:fc:57:1a:
f4:c6:e3:19:ba:d1:c3:c8:c4:87:af:e3:37:8c:cf:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A8:F7:91:F4:93:92:B0:80:30:B3:35:91:BB:0D:FB:14:68:61:8B
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/qqj3kfSTkrCAMLM1kbsN-xRoYYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.202.0/24
194.209.237.0/24
212.243.178.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:5e:7d:60:ca:bb:89:8b:cb:da:e8:1b:0c:84:cf:18:99:e8:
bd:50:cb:f9:24:b1:c1:12:a3:75:d2:75:97:21:13:b4:bb:cc:
f4:2f:59:fb:c0:88:9a:a4:56:f3:e8:73:4b:d3:07:d4:26:77:
fb:8a:69:22:a0:95:cf:aa:2e:e8:13:71:cd:06:82:51:b1:97:
8e:7f:3c:b4:df:35:b9:2b:df:0a:26:74:9f:a6:5d:dc:05:36:
f1:ef:1b:2f:b3:d2:78:0e:3c:5e:8e:e5:dc:e3:3c:e6:cb:c3:
5d:47:f5:9d:b4:7b:8f:98:7a:46:4d:6a:36:6d:0e:45:da:64:
18:f4:f4:5c:a7:29:e7:8a:e3:9a:60:eb:8f:92:2e:65:aa:e1:
d0:75:e6:31:d5:c8:90:5a:92:6b:4e:ed:48:c5:7c:6d:dc:ff:
2c:a1:58:a9:0d:47:dc:ae:c8:90:4e:1d:63:05:b3:bc:44:10:
4d:c2:87:92:4e:4e:9f:c5:70:b6:3a:a8:52:d2:bd:ba:c8:ac:
3a:17:96:c8:b1:fe:1a:86:da:50:89:52:4c:43:c0:48:1f:d4:
82:9c:5f:8a:89:43:a1:e7:e1:ae:73:65:d9:37:5a:c4:e3:d6:
f0:80:4c:9a:1a:d1:b8:b0:6c:7c:8d:8d:72:66:1d:36:9b:0a:
31:22:06:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:37:57 2025 by rpki-client