Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa
File: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (raw, json)
Hash identifier: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=
Subject key identifier: 42:B6:53:72:31:6B:40:96:F7:6E:F3:D8:0B:39:66:A0:13:BF:F4:94
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 0194236A31CD3E66BCBD7C48A26CDA8645DD
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12399
IP address blocks: 213.153.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:31:cd:3e:66:bc:bd:7c:48:a2:6c:da:86:45:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b65372316b4096f76ef3d80b3966a013bff494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:e5:3b:55:63:31:85:65:5f:69:fa:7d:65:
7a:5b:99:4c:90:9e:80:ee:11:c6:8f:fc:43:b9:7c:
03:cc:30:be:30:e3:94:a7:bc:09:a2:b4:48:9e:a9:
c7:e8:09:b0:c6:ab:80:29:b2:0f:f5:50:6e:e6:4f:
87:6f:19:af:04:28:f4:41:ef:44:5b:34:9f:d2:73:
53:0d:29:cc:af:d3:47:59:ac:93:92:e5:1f:58:b3:
88:23:4f:25:2b:d7:9e:dc:14:1c:ad:65:bb:0f:4a:
8d:0a:ad:72:77:16:be:68:1f:7d:ce:45:c5:34:33:
ab:06:aa:2d:9e:e8:b0:18:b3:9e:3c:04:3f:2a:25:
a5:69:b8:0e:70:cb:ce:46:8a:7b:60:df:54:55:73:
f7:97:20:5c:2f:4f:b1:21:33:3e:e7:c2:d8:c7:5d:
7a:3a:ba:c3:8f:50:d8:37:c3:9f:e7:0a:9e:f5:01:
6a:5c:22:1c:58:18:6c:29:71:16:34:ba:2f:51:c7:
5b:fe:4a:3a:4b:fc:ff:12:3e:80:f6:bd:a0:68:f9:
ad:65:31:f6:c3:6c:19:05:27:38:09:34:a8:cb:02:
c4:29:3f:f3:85:06:69:a9:af:b3:22:7e:3c:90:3d:
46:ab:dd:5c:35:76:f2:83:9c:d5:dc:c1:c5:d1:21:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B6:53:72:31:6B:40:96:F7:6E:F3:D8:0B:39:66:A0:13:BF:F4:94
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.153.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:02:15:df:b8:dc:01:c0:fe:60:9a:b7:ce:fb:e8:91:e4:d6:
89:0f:cf:f9:31:5b:a6:55:a9:e3:64:4d:dd:ba:a3:e0:cf:94:
55:66:f5:0a:b7:70:5f:23:a1:96:f9:45:97:37:c1:31:9a:d7:
b5:e4:bf:11:e8:b8:c0:f3:f5:b7:59:2b:1d:4f:e6:d4:ce:19:
db:b6:7e:de:6e:c3:e7:d0:63:b7:a0:ca:a8:55:c2:d1:54:0d:
db:7e:61:f5:04:c6:d5:0d:45:b3:b4:e4:0a:ea:79:a6:c3:d2:
91:16:8d:8d:a6:d7:a9:dc:a4:fa:e7:60:c6:fd:ef:11:ac:5e:
f8:31:d6:23:0c:59:c4:1d:29:55:07:59:9f:40:3b:38:c7:18:
13:9c:a0:d4:42:2a:03:3e:66:2c:e5:6d:d6:f0:d8:c7:81:64:
dc:b8:7d:15:d9:28:a2:4a:bc:7a:b7:27:b2:9f:33:69:95:48:
56:52:e4:21:91:86:9f:c5:e5:03:d1:44:32:f6:5c:48:ab:af:
a4:4b:95:12:cb:be:bf:d2:57:42:3b:9f:35:0d:4b:ba:d5:18:
c0:2b:da:95:ea:a6:cc:17:42:83:f4:00:d7:0b:82:2e:e5:37:
af:dc:0b:02:ab:fa:af:2f:ef:eb:ee:e2:c7:05:c0:83:3d:32:
9a:41:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:55 2025 by rpki-client