Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/qZc8LbpaDAe8YC_wNESeZVdptts.roa
File: qZc8LbpaDAe8YC_wNESeZVdptts.roa (raw, json)
Hash identifier: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=
Subject key identifier: A9:97:3C:2D:BA:5A:0C:07:BC:60:2F:F0:34:44:9E:65:57:69:B6:DB
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 0194236909BBBAF1C98ADA047319F9FEF9A1
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/qZc8LbpaDAe8YC_wNESeZVdptts.roa
Signing time: Wed 01 Jan 2025 19:47:53 +0000
ROA not before: Wed 01 Jan 2025 19:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201248
IP address blocks: 185.80.240.0/22 maxlen: 22
2a05:83c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:09:bb:ba:f1:c9:8a:da:04:73:19:f9:fe:f9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Jan 1 19:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9973c2dba5a0c07bc602ff034449e655769b6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:dc:b2:80:fa:9a:01:b0:e9:26:0c:24:16:
c8:47:cc:81:48:3f:7d:76:ae:57:e3:d0:b2:41:fd:
8f:6c:1f:58:b5:3d:21:4c:ac:05:e9:74:e6:68:9f:
cd:c6:38:14:9d:9e:c3:cd:0f:f1:f4:d9:bf:6e:3d:
ed:2a:38:91:d0:16:b3:5a:55:67:2c:97:69:02:5b:
b4:e7:18:61:f5:a7:ee:d6:29:3a:f2:79:5c:78:92:
fd:7a:09:67:21:c2:30:91:f6:0c:6f:a7:bc:9f:19:
bc:76:b9:3e:bb:65:26:e6:c5:0c:8e:4c:a0:71:84:
b3:7f:ab:6d:23:25:fb:85:fb:b5:a5:d4:cd:59:36:
24:ae:bf:b8:87:79:c1:59:a3:1f:d3:e3:59:0e:5b:
16:29:16:0f:06:68:59:ea:ec:a4:c5:a7:66:4a:8f:
80:24:32:9d:c3:31:ba:e7:ab:fd:e0:71:db:8b:69:
61:54:e0:9d:80:67:31:cf:88:d3:68:0f:ad:76:74:
38:36:73:d3:1a:8c:12:61:e6:68:7e:9d:d6:97:55:
12:ad:92:cd:cd:92:82:e7:08:32:5a:ef:e4:2d:e2:
4b:91:55:89:13:23:9a:d7:4d:f8:60:b7:1e:4e:2d:
82:ce:7e:1f:c7:43:5c:56:0a:f0:47:75:7a:36:1f:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:97:3C:2D:BA:5A:0C:07:BC:60:2F:F0:34:44:9E:65:57:69:B6:DB
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/qZc8LbpaDAe8YC_wNESeZVdptts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.240.0/22
IPv6:
2a05:83c0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:3c:b3:4e:20:0c:ea:6b:01:b7:f0:e4:f5:16:88:04:fe:42:
f7:19:36:d4:92:3f:a9:cc:62:f7:87:4d:ee:31:de:fe:a6:c9:
3e:b8:47:11:30:db:0e:93:d5:ac:f9:96:d2:78:0d:7b:6e:02:
26:8b:63:4c:ca:0b:21:ef:07:b0:b2:24:da:ee:8c:a0:cf:93:
8b:2c:6e:e7:f6:03:a6:5b:32:af:e3:1a:f2:ac:2b:e6:d7:74:
87:aa:d2:ea:0d:d2:34:75:fd:c7:c2:1b:91:fa:fa:28:3a:8e:
0e:83:08:3b:9c:80:fa:57:a4:f4:ee:45:03:e9:0b:ad:24:4a:
4f:8a:be:0b:6b:0a:36:9e:15:97:e6:a6:1c:48:de:11:73:ca:
ed:36:7f:ce:c6:cf:65:6d:8b:92:51:a5:bc:a0:c0:85:76:b1:
72:1e:d4:be:24:c9:9a:34:df:e6:ec:2f:38:5b:8b:5a:e6:ee:
bd:6e:1d:4f:29:ae:66:67:8b:51:58:55:e3:f2:f1:0f:ab:6b:
bd:dc:3f:11:cd:c3:5b:2b:ef:0a:cb:8e:ee:84:34:f4:6e:dd:
62:f7:a4:fe:ea:69:05:60:15:22:05:5b:21:52:48:61:6e:3c:
61:37:27:84:c7:1f:eb:b7:94:13:31:97:d9:c7:ea:36:0e:9c:
08:16:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:14 2025 by rpki-client