Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/qi7sTzufFC7EkRCYqq0lulzGTGQ.roa
File: qi7sTzufFC7EkRCYqq0lulzGTGQ.roa (raw, json)
Hash identifier: k+6aNmxAVditWwqCq6XU3IZjHa9eI73brduw/dGSIXU=
Subject key identifier: AA:2E:EC:4F:3B:9F:14:2E:C4:91:10:98:AA:AD:25:BA:5C:C6:4C:64
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D90BF3693DB5587828C554FD7CC24
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/qi7sTzufFC7EkRCYqq0lulzGTGQ.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14616
IP address blocks: 62.41.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:90:bf:36:93:db:55:87:82:8c:55:4f:d7:cc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2eec4f3b9f142ec4911098aaad25ba5cc64c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:af:00:1e:ef:cb:63:37:46:df:7f:87:41:
cb:8b:d0:64:99:72:9c:e2:72:b4:d2:66:c4:45:33:
df:e8:05:fe:d2:56:35:02:b1:b9:dd:eb:c5:54:6b:
d8:22:d0:a0:d1:28:18:cc:a8:48:17:e1:a1:c3:82:
3e:55:b4:f1:63:ca:9e:4e:4b:da:f2:e5:75:1e:8f:
63:aa:8d:3f:b4:2c:a5:88:38:dc:c3:3d:c6:d0:83:
5f:75:c7:15:cc:ec:af:b1:de:03:ee:5c:8e:dd:5a:
a6:ed:aa:5f:8b:97:b9:c6:1c:cd:4e:65:be:32:f9:
87:21:ac:7a:e6:ca:78:96:4c:94:08:3c:7b:6e:62:
2f:26:83:d7:c5:d8:84:a3:ac:dd:8b:3e:3d:67:f9:
74:1e:97:9a:e5:93:1c:81:e1:7c:27:39:1c:4f:ce:
e8:c3:91:ed:5f:ca:98:57:ea:23:00:c1:06:33:60:
dd:b6:2a:d3:f1:59:54:f3:ac:94:7f:8a:e3:f1:45:
b3:0b:ab:ee:de:60:23:7f:9f:63:cd:c9:b0:51:b3:
f4:34:62:07:dc:95:e2:b5:2a:d1:12:ca:31:0f:e6:
77:53:42:a9:04:eb:53:98:dc:e6:a7:a5:44:d2:2d:
4a:63:72:6f:ea:61:5c:91:da:1c:0e:c1:e4:6f:9a:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:EC:4F:3B:9F:14:2E:C4:91:10:98:AA:AD:25:BA:5C:C6:4C:64
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/qi7sTzufFC7EkRCYqq0lulzGTGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.66.0/23
Signature Algorithm: sha256WithRSAEncryption
73:ff:cf:14:51:fc:db:a0:c5:56:c7:ed:81:32:f8:25:8b:ae:
8e:2f:73:76:76:a5:a9:7f:bc:7e:d3:56:44:90:99:80:17:6b:
9c:51:4c:d9:e9:ab:2d:e3:6b:77:b5:56:3b:55:e9:1a:81:35:
13:e7:c6:b6:dc:f8:c7:57:27:c7:3f:8f:60:38:5b:b0:b9:f6:
88:f5:9c:1a:0a:4c:c7:84:63:1e:12:94:d2:d9:50:5a:60:90:
d2:f0:ba:33:8c:2a:25:da:55:0c:dc:e1:0c:ae:e1:3e:8b:87:
4f:78:fb:95:1c:9c:70:a7:21:94:c8:7f:14:d1:77:4b:f2:1d:
bb:a3:42:55:31:27:eb:1d:4d:c1:95:1e:f5:b6:8a:39:16:48:
36:78:7e:e9:68:07:b8:12:44:0e:34:f2:53:87:42:8c:11:2f:
bf:1d:d7:9f:9c:fb:d5:9c:ab:3d:92:2c:ff:53:1a:0c:0d:11:
12:24:87:71:e0:4e:ac:f9:7c:fc:03:75:e6:ca:3d:c1:59:26:
45:3b:76:78:f2:e4:48:03:91:75:a5:4b:74:1d:5f:bd:eb:bb:
16:17:d7:37:12:a8:72:8d:11:a8:42:ec:ee:c3:dc:01:4a:2b:
ca:63:78:26:ba:cd:65:0d:da:a8:f4:8a:c1:40:3a:e2:2b:3b:
2b:59:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:54 2025 by rpki-client