Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/qljIitXk1t3YFV0fw6MoKlVZXlE.roa
File: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (raw, json)
Hash identifier: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=
Subject key identifier: AA:58:C8:8A:D5:E4:D6:DD:D8:15:5D:1F:C3:A3:28:2A:55:59:5E:51
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 019428232F29697B56AE4C84C366B287A71E
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/qljIitXk1t3YFV0fw6MoKlVZXlE.roa
Signing time: Thu 02 Jan 2025 17:49:41 +0000
ROA not before: Thu 02 Jan 2025 17:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25188
IP address blocks: 37.202.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:2f:29:69:7b:56:ae:4c:84:c3:66:b2:87:a7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa58c88ad5e4d6ddd8155d1fc3a3282a55595e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:f7:4b:9b:f5:3a:f2:f2:98:96:33:59:64:
22:c4:b5:e5:cb:56:dc:fe:e0:9d:46:7c:cc:ad:31:
2a:bb:36:bb:a5:db:93:56:65:11:80:6d:6b:ad:2b:
47:20:9d:73:ba:e8:4c:d6:33:4a:4f:59:2f:99:59:
1d:5e:08:67:1b:ca:ce:49:dd:01:9b:13:8f:97:21:
9b:10:48:2b:fa:7e:13:f6:f0:60:b8:47:42:69:14:
27:0f:89:c4:93:1a:50:1d:56:b1:21:78:1f:ab:fe:
0c:78:dd:c6:b7:53:65:71:b8:b4:ce:4a:1e:8d:c1:
f2:7f:9b:99:af:18:ec:92:aa:10:65:8f:1b:bd:c2:
66:40:6e:c3:47:e4:97:1b:84:9f:ca:e6:0d:a5:e2:
0b:52:bf:9a:75:f3:a3:1a:87:a5:30:35:b5:bb:1b:
d5:6d:d5:a7:af:f5:80:ee:8b:8a:1e:01:b6:e1:a5:
9a:6f:e4:fb:f4:e5:0a:69:2d:ef:d6:1d:67:3f:3e:
64:5d:27:26:f6:f7:40:d3:4c:29:0a:a8:78:cf:f7:
46:e3:f2:95:79:80:62:53:73:7a:fe:1b:49:2b:7c:
af:9e:3b:29:7e:bc:3d:5b:d1:ce:48:e7:57:cc:c5:
99:0f:5a:1e:90:4f:e9:b3:f7:0f:77:f0:aa:40:3c:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:58:C8:8A:D5:E4:D6:DD:D8:15:5D:1F:C3:A3:28:2A:55:59:5E:51
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/qljIitXk1t3YFV0fw6MoKlVZXlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.8.0/22
Signature Algorithm: sha256WithRSAEncryption
25:0f:83:7c:a0:42:75:5d:fe:c6:1d:96:c2:bf:e9:56:fc:a7:
78:1d:63:4d:42:4e:4d:00:35:13:0c:12:78:88:b3:cf:69:a9:
c8:81:29:2a:52:2d:06:ea:9f:f3:47:d2:a1:7e:c9:71:a7:e9:
09:f0:4c:a2:50:ac:0f:7d:8b:df:eb:72:d1:43:a0:97:a8:3c:
63:aa:df:9f:96:e2:83:b7:ef:6e:df:0b:3c:ae:05:bc:03:3e:
35:d9:4b:38:68:fb:e6:09:20:1a:3b:af:d7:20:62:56:c8:b6:
b7:b5:65:ea:d2:9c:d0:b6:c3:0c:ca:3d:e6:b5:d5:ea:06:4c:
34:8c:f7:99:5e:07:8a:57:48:8d:68:4b:6a:8e:13:ca:c7:eb:
65:73:9f:e9:fe:13:3e:e1:8f:9e:ee:21:b8:94:cb:80:9f:00:
99:7b:8e:df:dc:ed:b1:65:c7:07:cc:90:24:e3:e2:dc:4c:07:
21:6b:7e:54:74:63:ab:51:eb:43:de:c5:7a:59:17:3d:b4:1c:
87:63:1c:17:71:e8:cf:5e:62:77:d8:42:55:d7:bb:7a:61:d0:
fd:2d:fd:a5:2b:b2:5e:a4:e7:d9:60:3d:43:61:11:0e:84:d9:
4d:05:0d:a6:40:e1:84:ae:38:64:32:16:b2:67:b1:eb:ea:56:
fc:2f:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:08 2025 by rpki-client