Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/QzMMPYPCzScHhhC9yJNNX66afH4.roa
File: QzMMPYPCzScHhhC9yJNNX66afH4.roa (raw, json)
Hash identifier: Ghq5HNNB5m3Indy5Fv12ibsuDSTRpjHCi3TDhB8fz1k=
Subject key identifier: 43:33:0C:3D:83:C2:CD:27:07:86:10:BD:C8:93:4D:5F:AE:9A:7C:7E
Certificate issuer: /CN=d557f65aa23dbacea5b1cf833a63482ef3e43057
Certificate serial: 018CC94DDEBD9878DB6F7EC01050D0FED617
Authority key identifier: D5:57:F6:5A:A2:3D:BA:CE:A5:B1:CF:83:3A:63:48:2E:F3:E4:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Vf2WqI9us6lsc-DOmNILvPkMFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/QzMMPYPCzScHhhC9yJNNX66afH4.roa
Signing time: Tue 02 Jan 2024 08:32:52 +0000
ROA not before: Tue 02 Jan 2024 08:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.248.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:de:bd:98:78:db:6f:7e:c0:10:50:d0:fe:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d557f65aa23dbacea5b1cf833a63482ef3e43057
Validity
Not Before: Jan 2 08:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43330c3d83c2cd27078610bdc8934d5fae9a7c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:bc:0c:91:8e:fb:e2:98:5d:20:33:e1:8a:
e7:3d:00:cb:f8:74:72:46:50:fa:92:61:f0:49:00:
88:bb:cf:c9:6d:a8:b1:74:02:2f:a1:28:fc:b5:2f:
d9:e5:9d:35:eb:1c:e1:4a:41:ce:26:87:7f:1a:7c:
17:0c:9d:f3:c5:10:02:5b:8b:0f:03:90:9c:ff:d2:
d1:b6:d9:f1:f5:e7:a3:24:30:b8:45:6b:07:eb:c7:
21:74:86:cb:84:d7:a8:38:fa:c1:83:d7:f2:1d:f5:
85:de:39:3f:46:7b:05:20:73:95:0d:37:b5:b0:81:
ce:f7:4b:1c:ec:cb:49:b9:04:72:b1:49:3b:cf:d7:
70:75:5c:99:f5:f4:e0:19:50:25:c8:a1:12:d3:f4:
a8:31:37:db:77:5a:67:eb:91:b4:30:99:be:de:8c:
f9:51:35:b1:50:77:86:78:b6:c0:1a:50:3a:62:e6:
87:dc:50:28:02:e6:31:ac:e3:9e:b6:89:4c:ca:35:
12:7e:e9:c7:03:cc:90:ce:b9:60:95:c2:dd:d0:30:
be:91:2a:dd:21:3d:05:11:d9:d3:28:6f:17:15:11:
a0:d2:1e:48:0e:c7:a3:82:50:05:2f:3c:0f:b3:87:
30:4c:cd:94:a6:a7:ee:46:e2:cd:ea:03:cb:34:59:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:33:0C:3D:83:C2:CD:27:07:86:10:BD:C8:93:4D:5F:AE:9A:7C:7E
X509v3 Authority Key Identifier:
keyid:D5:57:F6:5A:A2:3D:BA:CE:A5:B1:CF:83:3A:63:48:2E:F3:E4:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Vf2WqI9us6lsc-DOmNILvPkMFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/QzMMPYPCzScHhhC9yJNNX66afH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/1Vf2WqI9us6lsc-DOmNILvPkMFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.224.0/24
Signature Algorithm: sha256WithRSAEncryption
10:34:fe:f2:fc:48:8a:f2:7d:da:43:f9:7d:f8:a3:39:90:6d:
b1:5e:28:96:06:31:55:bb:e8:ec:95:ea:54:e8:b7:c6:4a:77:
12:90:3d:64:72:c4:94:20:51:7a:24:71:06:62:28:ae:0e:10:
a8:cd:22:69:6b:5c:21:ac:1e:10:38:f6:8e:f3:de:6b:79:fc:
8a:7c:4c:ce:a6:ee:8d:27:57:9b:3e:a6:1e:78:99:f6:9a:fe:
26:ec:7c:8e:d0:f2:4e:e2:12:87:c1:18:e4:ab:5b:8d:33:81:
1a:f3:5c:19:a0:97:ff:31:70:82:ee:d2:c8:e6:f8:bd:fb:7a:
9f:1e:46:5d:2c:db:5c:06:52:80:2a:20:39:09:29:5a:69:8c:
92:68:14:9c:db:6d:0a:87:15:36:c1:40:ae:22:ca:c1:f0:40:
96:82:20:0c:8f:48:7d:27:61:7f:fd:6d:1c:16:3c:79:28:4a:
cd:44:f1:9a:9b:7d:94:f9:74:49:11:ca:84:1b:94:61:f7:4b:
d3:1d:af:98:78:ac:dc:30:80:5f:9a:a1:c0:dd:c6:ac:ba:06:
26:16:53:ff:21:1c:b4:be:2e:bb:eb:2d:6b:38:de:f6:8e:34:
a2:ba:03:dc:a7:fe:e2:20:d8:26:48:36:f5:66:5f:d8:5b:ce:
83:65:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:07 2025 by rpki-client