Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa
File: qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa (raw, json)
Hash identifier: wQiE3t4T6OAM43VIDSTCvTQoMR/uz5WRMJgjbw+3Glg=
Subject key identifier: A9:0E:E2:39:1E:12:B2:7F:58:B8:E4:76:44:67:16:44:88:57:EE:4C
Certificate issuer: /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial: 01942823204C66F315EECD6CD0D20B7A2BBE
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa
Signing time: Thu 02 Jan 2025 17:49:38 +0000
ROA not before: Thu 02 Jan 2025 17:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 203.12.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:20:4c:66:f3:15:ee:cd:6c:d0:d2:0b:7a:2b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
Validity
Not Before: Jan 2 17:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a90ee2391e12b27f58b8e476446716448857ee4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:d2:a2:b9:45:53:94:70:ae:ad:42:78:aa:
aa:01:48:9b:4a:85:7f:ea:a8:f9:ce:bf:47:22:03:
92:76:09:12:36:4d:c7:32:f3:00:a9:ec:2e:c2:ed:
c0:fa:5f:6d:3a:20:40:1b:a8:aa:ac:8a:e8:28:2a:
19:bf:c1:66:3c:ce:31:d1:65:07:03:52:5b:6a:a3:
b6:ae:3d:64:92:ee:1f:6c:df:dc:0a:1a:6c:23:76:
19:0b:79:5b:73:9a:c1:9b:76:3a:c8:0c:29:6b:97:
0d:66:ab:ce:cb:ae:f5:e1:5d:1b:b0:86:69:d7:87:
67:72:34:1c:7a:05:70:ae:26:44:50:77:22:c9:b3:
43:27:69:22:7d:60:ac:61:5f:33:67:0e:8d:f6:59:
71:d0:39:a9:44:ca:19:80:20:3b:1f:2d:08:17:2d:
ef:b5:9c:87:5d:12:a2:96:52:38:74:e3:5f:e2:25:
df:0f:12:b3:d2:3d:fe:ee:38:3c:a0:3c:61:05:19:
0f:15:85:5a:2b:df:08:25:a6:8c:61:d7:1c:5d:64:
89:f3:f7:f4:d4:5d:26:d2:54:81:3d:f2:5f:41:0f:
9e:9f:75:28:e0:e2:a7:56:e8:1c:ee:2e:f8:dd:10:
5f:6c:76:fd:42:45:66:c4:1b:3e:76:13:67:5d:06:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:E2:39:1E:12:B2:7F:58:B8:E4:76:44:67:16:44:88:57:EE:4C
X509v3 Authority Key Identifier:
keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.12.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f9:76:99:94:8d:03:02:5f:2a:e4:6c:a4:8c:ce:96:6c:f7:
f0:aa:f3:bf:ea:67:83:b3:ef:68:52:fb:ba:be:80:3f:f6:13:
b3:f6:9c:fa:9f:e3:7d:e0:16:83:bd:d8:80:93:55:fa:0a:51:
d6:3e:42:7d:32:f0:df:ca:e2:2c:bc:1b:97:06:30:a9:a3:f7:
0b:dc:b6:f1:12:b3:25:08:c9:28:17:43:e5:65:0e:e6:60:8d:
da:72:84:b6:bf:1d:4f:a9:d8:d6:f1:5c:17:d9:87:5d:b2:34:
68:1f:df:81:25:a4:b9:14:44:c3:6a:2c:a1:d2:17:c1:c9:15:
e3:29:ff:aa:27:52:1f:a4:d0:a9:ed:f9:c3:03:22:ed:a7:2a:
43:c5:23:2f:43:fa:1b:b8:01:72:6b:ab:68:6b:9a:f6:08:56:
f0:49:de:78:68:51:85:af:8e:b8:a3:93:92:48:7e:3e:df:9d:
ff:f5:6b:a6:ca:03:e5:eb:73:42:6f:75:1a:8a:d5:b2:62:1f:
70:b0:f9:72:e8:5e:e4:76:1c:b0:ee:1e:ce:21:6d:91:08:74:
4e:4d:d2:47:58:ec:2f:3c:80:40:28:b2:1c:71:aa:8e:5a:63:
a3:51:7c:01:da:94:b7:b1:e0:7c:7d:1c:f7:82:e1:59:47:f8:
ff:bf:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:27:00 2025 by rpki-client