Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/bda612-d481-416c-ad90-ecb2486f81eb/1/QhndbnBSWeWp_0nUCyeB_W193FY.roa
File: QhndbnBSWeWp_0nUCyeB_W193FY.roa (raw, json)
Hash identifier: /FRVMQC8IukkTICHoVOimjTyP0FS0ckistmtCUGY0xM=
Subject key identifier: 42:19:DD:6E:70:52:59:E5:A9:FF:49:D4:0B:27:81:FD:6D:7D:DC:56
Certificate issuer: /CN=0555544460983616c44a670317a3d06c308f81b0
Certificate serial: 0185708CD3E4E4816CA3CE99D3507534F2E3
Authority key identifier: 05:55:54:44:60:98:36:16:C4:4A:67:03:17:A3:D0:6C:30:8F:81:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVVURGCYNhbESmcDF6PQbDCPgbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/bda612-d481-416c-ad90-ecb2486f81eb/1/QhndbnBSWeWp_0nUCyeB_W193FY.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 194.104.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d3:e4:e4:81:6c:a3:ce:99:d3:50:75:34:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0555544460983616c44a670317a3d06c308f81b0
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4219dd6e705259e5a9ff49d40b2781fd6d7ddc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:48:65:e8:bc:b3:30:68:b5:8f:1a:42:f4:
d7:5d:d1:55:eb:7c:ad:37:04:c2:9e:84:31:b2:7b:
b7:d9:aa:36:c8:d8:67:5f:95:db:3d:6e:ef:d5:7a:
7c:c5:d8:5b:51:47:f2:8e:31:87:ae:6c:74:6e:8b:
06:40:1c:1d:57:8b:1f:8e:e1:ab:e8:ad:2d:e3:f9:
2f:d6:5e:d7:40:d8:12:68:ed:92:12:df:3f:57:c9:
79:2e:ef:7c:ea:c2:73:5b:c7:ab:6d:59:4b:c7:98:
dc:85:eb:9e:2e:9a:b0:b1:92:31:11:38:86:99:ec:
2c:96:74:b2:54:cb:65:5c:ba:13:13:d1:84:3e:13:
38:e8:38:aa:2f:3d:da:07:3b:6a:76:de:af:d2:1f:
0c:b3:f4:85:43:1a:61:10:30:28:af:77:fb:e6:db:
77:81:17:52:d8:fd:b7:44:fb:a7:27:05:82:84:ae:
ed:b7:11:a0:e2:b8:0f:d0:98:b6:43:75:d6:43:88:
ad:1f:c4:e3:9e:58:fd:21:2e:4e:81:3d:9b:47:ec:
13:ef:79:ec:d9:1e:17:22:32:5c:9f:c5:a7:d8:c5:
ce:1a:c4:9b:72:89:da:81:da:e8:a1:13:22:31:b7:
4d:ae:d4:75:aa:a2:d0:06:e5:42:c6:d0:3e:3f:af:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:DD:6E:70:52:59:E5:A9:FF:49:D4:0B:27:81:FD:6D:7D:DC:56
X509v3 Authority Key Identifier:
keyid:05:55:54:44:60:98:36:16:C4:4A:67:03:17:A3:D0:6C:30:8F:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVVURGCYNhbESmcDF6PQbDCPgbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/bda612-d481-416c-ad90-ecb2486f81eb/1/QhndbnBSWeWp_0nUCyeB_W193FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/bda612-d481-416c-ad90-ecb2486f81eb/1/BVVURGCYNhbESmcDF6PQbDCPgbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:35:66:d9:3a:bf:4c:3e:aa:40:74:17:2b:a9:2c:a3:57:ac:
cf:1c:2d:60:e0:d3:19:90:cd:79:60:0f:5e:19:1e:92:f4:8f:
65:98:6d:0a:a6:a7:ab:7a:b9:f5:55:f2:50:36:a6:a0:da:28:
80:b4:ec:df:35:08:3e:8b:81:88:c2:f0:78:96:3d:49:e5:62:
29:99:f4:e2:bd:54:ab:4f:b6:47:0b:db:1d:9c:5c:fd:cf:cd:
3e:a3:3b:d5:48:eb:bb:c9:c9:bf:2e:54:0b:5c:09:1d:78:00:
c1:7b:77:6d:8c:c6:ce:2b:4d:4b:b2:e3:5c:a6:97:39:20:e7:
e2:85:bd:bf:d2:ae:4f:f9:40:01:bc:f3:6a:90:fa:51:c9:35:
16:23:4e:e5:d1:2e:f4:15:ed:79:a1:67:4b:fe:dc:8b:06:69:
bf:bf:72:91:d1:93:63:16:53:12:42:4d:2f:5c:0c:ed:80:26:
62:47:16:27:d2:e9:75:4a:1b:2c:b4:f0:59:39:e7:de:cd:95:
19:10:27:aa:17:9f:67:bc:9c:12:e7:ac:0a:5c:87:ea:24:4e:
9c:7f:e3:97:49:f9:7d:fa:e1:82:ce:cd:c8:6f:56:4f:54:42:
76:33:dc:5c:42:50:c9:46:2c:cd:3d:4e:86:25:c4:f9:fb:c3:
d4:7a:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:59 2025 by rpki-client