Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qBOdp5kz7suqzK7uR7GnD_8c0R0.roa
File: qBOdp5kz7suqzK7uR7GnD_8c0R0.roa (raw, json)
Hash identifier: JTB1UAwTqt9yVA+//jNN8DIPHjHJPPmTNfCTKt8KggM=
Subject key identifier: A8:13:9D:A7:99:33:EE:CB:AA:CC:AE:EE:47:B1:A7:0F:FF:1C:D1:1D
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE077F5B9DBA939F73FFBF2087619
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qBOdp5kz7suqzK7uR7GnD_8c0R0.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197887
IP address blocks: 85.31.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e0:77:f5:b9:db:a9:39:f7:3f:fb:f2:08:76:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8139da79933eecbaaccaeee47b1a70fff1cd11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:e3:c0:ef:4d:8a:27:54:37:99:5d:9c:79:
7a:ed:35:5d:e6:81:1d:5d:ba:82:73:ec:1f:14:0f:
d0:7f:6e:d0:d9:3a:2c:37:5e:ec:bc:0b:b1:38:a0:
46:97:d1:44:c2:58:56:2e:b6:62:4b:fa:41:7a:db:
59:ba:9d:d4:34:b7:0c:e1:ab:c9:b4:54:23:41:a6:
fd:a5:ec:02:d0:41:12:46:b7:c6:f3:bc:1d:26:0c:
96:0b:23:ab:6c:e0:7c:1a:25:38:1d:64:fa:ed:e8:
d7:5e:19:33:b4:8d:65:2d:72:d1:60:1d:75:a7:88:
4d:eb:8d:de:2d:ae:34:b4:73:18:df:6d:e7:6e:d6:
93:07:dc:f2:37:5a:e9:ee:99:a6:58:5b:32:f6:65:
4f:c5:c2:19:a9:93:67:ab:15:6d:b3:fa:95:18:d5:
e1:e9:87:9e:84:ec:a1:10:57:8a:e1:36:f5:be:26:
62:1a:73:43:44:9e:1a:08:85:5e:91:07:cf:e1:16:
14:2a:20:56:90:82:7e:8e:02:19:b1:69:d7:73:f3:
f8:a5:9a:73:53:73:87:44:6d:13:fe:e0:56:88:a1:
5b:95:75:f7:92:45:7f:e3:cb:45:d8:cd:1b:d8:98:
4f:91:3f:7b:2d:10:c1:00:9b:8e:0e:7b:2c:ff:b2:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:13:9D:A7:99:33:EE:CB:AA:CC:AE:EE:47:B1:A7:0F:FF:1C:D1:1D
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qBOdp5kz7suqzK7uR7GnD_8c0R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.250.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:19:08:11:94:fc:fa:1c:8c:38:c4:8c:d4:d6:fc:e8:78:63:
21:71:f4:81:80:68:45:9d:9a:cd:8f:2c:f7:b0:1b:90:4d:7f:
c6:d7:01:89:b4:5c:7d:dc:08:87:47:d1:e8:0b:40:aa:4d:8d:
e0:a6:cd:2a:f3:dc:0a:14:88:98:55:30:d1:37:4d:3a:2c:2f:
17:b6:59:69:b7:bc:7a:bf:3a:27:c6:4d:a9:34:a8:d4:96:e7:
88:e4:3d:4a:a2:77:0d:02:72:df:91:27:8c:a6:e9:5e:47:3b:
4b:44:b9:13:ea:ca:0a:b7:79:17:69:fd:ec:54:b8:e2:ee:ff:
16:4e:23:eb:27:98:99:8e:2b:f0:07:af:a9:e0:ee:85:23:fa:
85:d6:e3:f4:d9:93:02:95:7a:e0:42:77:0e:5d:6b:8e:b5:fb:
48:c1:07:3f:c7:a4:e9:27:85:7b:c1:00:b4:f7:d7:1f:e2:ba:
53:a1:33:41:57:3b:1c:d2:43:22:e2:35:23:84:14:af:42:79:
4f:b0:51:5e:46:44:8b:0d:8f:88:66:51:68:f0:fc:73:0c:e7:
68:3a:c3:01:b9:2d:92:22:c0:67:7a:80:3c:12:b9:6d:88:fe:
d7:f7:58:7b:f1:c9:5b:80:50:be:e4:c9:dc:19:22:11:a3:09:
63:2b:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:56 2025 by rpki-client