Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/QJVbOLfuQimwnt2csTkB91gXkec.roa
File: QJVbOLfuQimwnt2csTkB91gXkec.roa (raw, json)
Hash identifier: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=
Subject key identifier: 40:95:5B:38:B7:EE:42:29:B0:9E:DD:9C:B1:39:01:F7:58:17:91:E7
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 0194266BF1C84D0548D6E423FEE8D175D204
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/QJVbOLfuQimwnt2csTkB91gXkec.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24825
IP address blocks: 195.22.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f1:c8:4d:05:48:d6:e4:23:fe:e8:d1:75:d2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40955b38b7ee4229b09edd9cb13901f7581791e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:d2:90:8a:61:27:6a:c4:c2:15:e5:e3:d9:
df:04:54:86:11:0e:07:d1:a9:91:35:51:ee:89:8d:
f6:7c:15:9c:d9:db:1f:00:c4:b4:97:63:59:b9:0c:
e8:db:cb:32:ca:c0:9f:76:f7:fe:95:89:a1:80:b8:
82:f9:40:a7:01:64:41:b4:2b:b7:38:a8:7a:0e:45:
3a:5b:18:51:0f:2f:29:b4:8d:a5:17:d3:c8:ae:d6:
55:60:f4:41:d7:8d:2a:1c:37:23:2a:2a:88:a6:b4:
f4:3c:74:3a:d4:a0:e5:19:cd:cf:33:18:82:78:5e:
cb:83:54:1d:b9:8d:b9:7c:ed:f7:79:71:4c:24:09:
e6:94:e6:93:ec:a9:33:9a:0b:84:96:03:d4:75:bc:
4f:42:5b:87:fa:22:b2:4c:f4:33:73:ca:c8:bf:ce:
48:7e:d4:ee:00:b3:05:39:f5:47:5d:aa:4e:2e:d2:
ef:5f:0d:7e:ad:cb:eb:cf:5e:12:41:fa:bb:f3:60:
98:96:67:ae:ff:48:2c:4f:f5:81:a8:eb:97:c8:ec:
2f:c7:03:f2:14:05:c8:49:cb:48:3c:cc:76:93:6e:
21:ee:b4:df:0a:e9:81:c1:df:cf:69:32:c3:e2:28:
a5:9c:7f:95:8a:ca:eb:f5:fb:3f:22:79:56:6b:ea:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:5B:38:B7:EE:42:29:B0:9E:DD:9C:B1:39:01:F7:58:17:91:E7
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/QJVbOLfuQimwnt2csTkB91gXkec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.173.0/24
Signature Algorithm: sha256WithRSAEncryption
12:57:15:9b:40:d9:40:92:7a:fb:3c:e7:c4:58:22:0a:81:e4:
61:95:9e:d7:ca:61:38:c8:5d:af:f1:14:59:f5:c2:30:e3:83:
0d:87:9c:fd:95:92:4f:eb:fd:2c:df:f7:35:71:30:ee:39:83:
88:90:c0:19:0b:ca:ef:ef:fd:48:a8:07:02:30:52:aa:fa:37:
7a:a1:4c:74:bb:b3:b5:d8:80:75:59:fa:f7:38:6b:28:6b:a0:
0c:07:7e:1b:e9:87:e5:c0:99:a4:1d:7a:b1:e7:7d:c7:ef:cd:
cc:4f:8f:22:f8:7c:43:1e:17:7c:df:21:05:a2:e2:c9:0c:79:
f4:69:17:18:76:d4:36:57:36:b3:4d:6f:44:e7:6f:75:7b:93:
29:72:7a:f5:e7:97:77:7c:c0:14:5f:66:2d:fb:e0:cb:2a:69:
4e:29:c8:61:24:1f:d0:d9:f6:bd:8d:b6:cf:6b:dd:53:97:d3:
72:da:b0:44:b6:56:48:7b:7a:2c:0c:ff:43:a6:97:7a:51:91:
e9:36:bb:ef:49:95:a3:29:d6:48:19:ff:79:5b:21:15:6c:39:
a2:aa:85:2a:41:43:37:e3:13:6c:14:d1:bb:27:13:a0:4a:27:
42:59:f0:07:91:2d:26:d5:2b:5b:34:50:3d:e0:c1:16:84:74:
fa:29:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:21:39 2025 by rpki-client