Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/QTfS1SFb7VGTiGiN2dDueV3na8U.roa
File: QTfS1SFb7VGTiGiN2dDueV3na8U.roa (raw, json)
Hash identifier: PLx/8DSVxOYWpxQe9zNuM4NTWNV61RdgV2qLjo81Rz8=
Subject key identifier: 41:37:D2:D5:21:5B:ED:51:93:88:68:8D:D9:D0:EE:79:5D:E7:6B:C5
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 019420D5E6D030452B6393AF630DFF76CB15
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/QTfS1SFb7VGTiGiN2dDueV3na8U.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.8.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e6:d0:30:45:2b:63:93:af:63:0d:ff:76:cb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4137d2d5215bed519388688dd9d0ee795de76bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:7e:ca:2b:38:10:09:e5:49:76:09:1a:22:
3b:9a:09:d3:cb:9b:37:7f:3d:85:0a:d3:94:68:d8:
80:87:d6:89:ee:7e:a4:92:f8:9b:a6:bb:e9:95:f8:
c1:6a:cd:93:49:dd:2c:20:1d:5b:e7:f6:5d:d3:7e:
03:79:f3:17:10:e0:5f:dc:26:4e:b4:92:85:45:e4:
16:3b:6e:93:31:30:0e:cf:d7:c8:9d:6d:2c:73:41:
6b:81:f4:c1:54:2f:db:b8:7a:71:fb:4c:35:ac:a8:
2b:95:c2:bf:6e:73:ee:4d:db:5e:3b:be:67:04:b5:
da:0f:0a:5e:7b:63:0c:b5:12:e3:4e:f0:20:e5:91:
5e:72:0a:e4:88:7a:56:21:53:3a:5a:49:63:97:d4:
09:6a:cf:08:eb:7c:34:e1:55:df:50:8d:a1:9a:e5:
1b:cb:c2:ea:fc:8e:0d:d8:94:00:94:61:ad:be:b9:
67:c4:59:ce:2b:f0:1c:3b:66:cb:88:ab:1b:20:f9:
7f:ad:ea:c2:6b:ff:4d:bb:08:4f:bc:9f:b4:32:13:
fa:55:a3:27:c7:5c:5c:8b:b5:8f:21:c4:11:64:a7:
09:8d:e2:d5:c9:bb:ed:f1:f3:e4:63:dd:7a:cb:76:
61:e4:b7:1a:d8:ee:54:77:f9:f5:19:4f:93:48:3a:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:D2:D5:21:5B:ED:51:93:88:68:8D:D9:D0:EE:79:5D:E7:6B:C5
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/QTfS1SFb7VGTiGiN2dDueV3na8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9b:d0:3a:d1:34:e8:66:c9:65:8b:55:bb:70:85:83:55:78:
64:b2:aa:e4:0c:02:a9:08:d6:8b:cd:0e:ff:3b:07:e4:c7:f7:
91:b2:4a:e7:0a:bb:c8:e6:47:78:1c:b5:d4:b9:6a:d7:d6:0c:
70:41:21:f9:17:a5:12:2b:8b:a9:b3:24:d1:d5:bc:f4:6a:a2:
2a:72:27:22:d3:91:37:cf:ce:9b:16:d6:ea:29:a9:ea:ae:0f:
c5:be:8a:e5:07:25:ae:62:53:de:81:c5:9a:73:d9:66:69:80:
8d:8e:ce:78:b0:d5:97:d3:bd:4e:3d:1c:50:aa:a8:52:df:bd:
81:c3:43:4c:ef:b1:3e:f3:7f:79:ad:e8:e2:5c:75:fb:10:c7:
6f:b0:e8:a3:ca:72:cc:09:71:9f:08:49:d4:f0:8f:6a:67:61:
1e:44:26:a0:0c:f5:67:b3:68:bc:b9:95:16:6d:8f:6c:13:c2:
02:3d:df:be:32:54:f1:aa:94:ba:13:c1:34:d2:57:1c:18:db:
df:69:7f:af:0c:a2:c9:47:5d:4a:e3:6c:bb:fb:16:9b:69:af:
70:e7:da:b5:00:35:cf:71:b8:e7:fc:e8:00:3f:90:93:60:4d:
ea:de:6a:24:5e:3d:bf:3f:d2:3f:ba:1b:7f:18:a6:9f:18:cd:
62:d0:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:40 2025 by rpki-client