Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/qQqCuUJCewbsZNg09v9PamhTS90.roa
File: qQqCuUJCewbsZNg09v9PamhTS90.roa (raw, json)
Hash identifier: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=
Subject key identifier: A9:0A:82:B9:42:42:7B:06:EC:64:D8:34:F6:FF:4F:6A:68:53:4B:DD
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 019425222EF27388461AA65E3A35E51C54F3
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/qQqCuUJCewbsZNg09v9PamhTS90.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21013
IP address blocks: 194.242.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2e:f2:73:88:46:1a:a6:5e:3a:35:e5:1c:54:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a90a82b942427b06ec64d834f6ff4f6a68534bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:04:92:80:d5:b7:a6:93:c9:eb:48:bc:a3:
e4:f4:36:65:43:6b:32:b1:1c:9a:c3:76:a0:b0:86:
b1:38:0a:01:74:ed:04:1c:14:db:56:20:cb:4e:63:
3e:0e:5c:69:34:af:d8:5d:0e:e0:58:de:c9:63:cb:
af:17:cf:b6:c9:c4:fa:b6:1f:75:25:8c:8b:02:48:
38:aa:5a:9a:8c:8b:01:e3:3e:69:b7:7e:5a:e1:ba:
ee:32:17:f3:0d:f2:43:ca:74:77:69:10:06:c1:16:
77:bb:a3:8a:96:f0:7e:e0:e7:0e:d0:21:bb:ee:13:
9e:68:6b:87:1a:f3:5e:59:48:ce:b0:07:23:e6:8c:
ad:f2:f3:d8:47:d5:dd:92:4a:2d:ad:0d:07:05:dd:
7b:d0:a2:28:43:dc:58:1a:4c:91:81:42:b3:b8:47:
b4:f3:81:70:89:26:2e:49:22:9c:68:2e:9c:b1:35:
e8:49:c3:c4:d2:94:76:83:e7:4f:06:b0:7e:00:1e:
48:58:5f:56:d0:e9:23:b0:1d:10:1c:24:b6:39:34:
15:8a:ed:29:91:cc:db:c9:d5:8d:05:c7:cc:17:0a:
fb:77:f3:9c:4f:79:a4:84:ec:3d:b2:21:b4:24:d2:
83:74:15:e5:e1:bc:bc:b8:f8:51:17:18:9e:90:0c:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:82:B9:42:42:7B:06:EC:64:D8:34:F6:FF:4F:6A:68:53:4B:DD
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/qQqCuUJCewbsZNg09v9PamhTS90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.35.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a0:a9:5d:a1:b7:80:48:d2:a0:20:fc:f0:33:f6:04:23:1a:
6b:ba:a6:05:98:10:27:0f:04:7e:c0:9a:ae:9e:49:9e:2c:0a:
3f:c5:b1:f6:4f:84:25:0e:70:fb:c1:11:0b:e9:2b:a8:ec:97:
ed:a5:e4:0f:ea:ae:3a:0d:6d:b5:b8:b8:08:56:06:82:04:90:
e2:db:8e:3b:b6:85:7a:b1:04:48:b5:47:9d:18:e2:01:1e:af:
41:28:d8:21:ad:7d:7f:62:61:bc:7b:18:3c:d6:db:be:46:59:
d4:d6:95:9d:c3:c7:c7:f6:6e:9a:a8:24:6e:18:41:71:fb:b3:
93:09:fd:1f:76:d7:ed:ef:8a:b4:47:f9:67:4f:16:cc:bb:ca:
e2:e5:31:c1:1f:76:07:13:0b:fe:5f:9f:be:32:c6:2f:8d:01:
8d:d9:b7:5a:af:32:66:54:93:0e:00:fc:76:b0:d1:26:37:4c:
6c:9f:08:90:8a:0e:b1:1e:76:24:02:6d:4a:09:00:f0:8d:6d:
4a:e9:d8:34:16:e6:0b:a7:ff:2f:91:98:22:14:b0:d8:a0:1d:
f8:1f:00:72:34:ce:13:91:d8:f5:c8:72:5e:1e:da:57:3d:df:
19:bd:14:77:6c:c1:91:a2:92:ab:fc:63:3b:0a:eb:96:97:ad:
0d:5d:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:02 2025 by rpki-client