Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QyeiGXPJjuHzCamRs4e8qYoTX9k.roa
File: QyeiGXPJjuHzCamRs4e8qYoTX9k.roa (raw, json)
Hash identifier: FtCeqUWJVnIefGB5LmnMBks1xeiueiG/TnwGHjYNKBI=
Subject key identifier: 43:27:A2:19:73:C9:8E:E1:F3:09:A9:91:B3:87:BC:A9:8A:13:5F:D9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01957F9671A77DE8FF4707C033EBEDBAF64A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QyeiGXPJjuHzCamRs4e8qYoTX9k.roa
Signing time: Mon 10 Mar 2025 10:25:20 +0000
ROA not before: Mon 10 Mar 2025 10:25:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44948
IP address blocks: 77.81.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:96:71:a7:7d:e8:ff:47:07:c0:33:eb:ed:ba:f6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 10 10:25:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4327a21973c98ee1f309a991b387bca98a135fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:f5:8f:db:f2:c4:e2:3a:69:ce:74:3b:80:
45:08:96:df:3b:07:2e:5e:85:3e:67:d2:03:8a:1a:
96:c7:3c:5d:b6:fd:62:1b:6f:6e:33:01:db:54:04:
95:cf:11:c4:e2:70:ca:d2:4a:bd:bb:fc:b9:93:fd:
41:9e:56:99:3d:ba:7c:8e:5a:67:15:e7:aa:31:1e:
2a:c9:a7:b7:2f:51:21:8d:9f:5a:3d:bc:ae:67:1d:
e9:d8:c8:99:19:72:e4:c1:f3:e2:3e:0d:53:15:25:
41:d4:77:d5:9c:82:a8:e6:df:4f:ec:c5:d3:5a:0c:
2b:8b:d0:b6:ad:19:a4:e7:b9:b2:c8:5a:95:eb:de:
23:bf:a3:49:85:90:dc:c2:c7:60:38:67:d5:da:ee:
cd:42:19:c9:b8:80:05:c0:bf:cb:12:28:4a:c6:d9:
5c:90:08:cf:a0:72:87:fc:2f:e0:6d:15:32:e8:85:
68:6a:f8:05:71:b1:eb:ad:ba:e5:d3:89:51:6b:c0:
03:63:5b:29:02:8b:ba:64:76:11:b2:f7:5b:b6:63:
11:38:06:e6:1c:79:71:1d:d4:6f:d3:7a:ec:fb:9d:
a8:54:df:59:25:48:ed:95:eb:99:c2:c9:79:d6:53:
43:2b:3b:5d:63:25:4d:cc:45:8f:7a:a6:28:02:70:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:27:A2:19:73:C9:8E:E1:F3:09:A9:91:B3:87:BC:A9:8A:13:5F:D9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QyeiGXPJjuHzCamRs4e8qYoTX9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:07:f6:36:8a:11:2b:fe:5b:ac:9e:f7:7c:a8:fe:45:b0:f9:
9b:dd:78:6c:df:07:62:cb:1f:be:02:d1:1c:6d:78:df:67:04:
25:93:41:2e:13:24:c6:11:90:5f:e9:79:00:04:bf:f8:66:69:
91:5c:59:72:4b:b4:3e:50:88:38:bf:6d:40:01:99:86:5d:bc:
cb:04:c4:2e:d7:27:93:c7:ae:38:ad:0d:b3:34:2d:5a:a0:ed:
33:63:58:28:79:8e:13:a3:cb:e3:69:1c:7c:f5:d3:08:34:01:
0d:f3:bc:f7:4e:e1:82:fc:c3:99:7d:a1:86:ca:af:67:69:37:
0d:0e:be:33:d1:9f:50:28:86:9e:68:7e:5c:1e:fb:49:cb:82:
ef:1e:29:0e:f4:b4:99:bc:bf:85:bd:ee:d7:fc:99:2d:91:18:
90:60:37:ad:13:ab:49:08:a5:d9:a0:49:85:45:62:b9:64:9f:
6d:93:b4:97:e5:28:03:12:91:14:b1:65:9e:58:27:94:0d:ba:
ea:b1:42:b5:1d:cf:1d:84:6b:54:dc:d1:19:12:2e:e8:37:f7:
88:97:f7:92:35:f3:57:46:65:28:99:06:ac:00:a2:f5:00:f0:
83:e9:81:dc:98:6b:b0:a2:10:97:5a:00:10:83:63:4c:38:76:
ec:91:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:13 2025 by rpki-client