Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/qM0zHnDHmCB87MJblo3SPkQV0l8.roa
File: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (raw, json)
Hash identifier: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=
Subject key identifier: A8:CD:33:1E:70:C7:98:20:7C:EC:C2:5B:96:8D:D2:3E:44:15:D2:5F
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019422FC42B7F5828B7B292062FA78FFE01E
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/qM0zHnDHmCB87MJblo3SPkQV0l8.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42093
IP address blocks: 178.251.24.0/21 maxlen: 21
185.10.156.0/22 maxlen: 24
195.22.100.0/22 maxlen: 22
2a00:1938::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:42:b7:f5:82:8b:7b:29:20:62:fa:78:ff:e0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8cd331e70c798207cecc25b968dd23e4415d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:9d:05:db:84:98:de:19:0f:eb:86:e4:ad:
bd:88:d1:9d:59:b2:dd:b0:d5:6e:86:2a:4d:df:af:
5c:ff:c6:78:fe:4f:6d:da:3c:d5:17:7e:03:20:37:
52:a9:17:87:15:55:c2:af:8d:0d:62:0a:a8:fb:28:
c7:16:36:4c:99:76:be:d5:94:b8:5c:f7:ca:7b:ef:
bf:97:11:27:e1:50:4e:01:07:74:f5:86:10:ca:6f:
4a:4e:9e:6d:0f:7d:59:c5:a2:4f:07:15:25:c3:e5:
78:54:06:ad:58:bb:d9:21:4f:6d:ce:5d:66:77:04:
86:f6:3f:94:99:2e:c8:0e:97:2a:0b:67:b0:21:c2:
35:c0:52:65:4d:1e:57:8f:88:e6:99:65:8f:bb:42:
d7:4f:9a:4a:d6:27:d2:26:8e:ca:a9:6e:ce:52:b9:
e7:d9:c5:5a:11:f9:d6:53:e6:ba:fd:bb:15:ed:cb:
84:04:a5:c7:43:95:ab:47:7b:9f:46:7c:2b:33:27:
1d:58:25:75:2c:c2:ae:4a:23:90:cc:be:b2:6f:eb:
47:1d:1f:4c:df:94:57:aa:45:aa:e4:c7:ae:69:26:
55:18:91:4f:dc:3f:48:0a:b9:da:5a:22:c9:b7:69:
43:e2:62:ed:4f:50:f5:e0:33:30:23:d0:7c:ac:f4:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CD:33:1E:70:C7:98:20:7C:EC:C2:5B:96:8D:D2:3E:44:15:D2:5F
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/qM0zHnDHmCB87MJblo3SPkQV0l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.24.0/21
185.10.156.0/22
195.22.100.0/22
IPv6:
2a00:1938::/32
Signature Algorithm: sha256WithRSAEncryption
b5:9c:62:d8:4a:9d:9d:bb:75:92:fb:30:2d:77:f1:c2:4f:8a:
be:14:c8:13:bf:67:8b:a9:72:e0:97:d4:a7:de:8f:ee:e6:ae:
bb:fb:2b:3b:3b:73:4d:65:86:48:b8:0b:af:2d:b9:f0:5f:3b:
8e:10:7d:89:56:79:5a:91:9c:30:a4:73:0b:41:80:03:67:96:
31:81:56:88:68:9e:7f:54:02:47:29:0b:87:79:27:b5:6c:52:
8c:93:d5:95:10:0d:6e:0c:3a:19:f7:83:e9:7f:c9:c2:f9:ce:
09:d6:63:6b:71:e2:bf:60:68:fa:8e:cf:3c:fb:02:72:0b:b4:
d4:6e:1e:fe:50:66:11:2e:ec:1b:e3:c6:72:36:00:45:34:09:
29:7a:34:01:7f:52:80:db:a1:6a:66:f2:5e:0f:86:67:e3:b1:
62:b5:9a:01:16:ab:be:cd:51:80:39:a8:20:14:3c:68:25:36:
fb:cf:e2:f0:16:64:16:91:e0:a4:b0:68:a6:31:60:6c:60:81:
49:32:74:b5:fb:c6:a5:8b:4d:ab:fc:fa:3e:3a:cc:cd:76:11:
1e:e1:b1:d3:e2:68:ba:d1:fb:e5:68:1f:af:15:6e:16:7b:19:
14:ff:59:c4:9e:71:f6:99:f9:64:d0:07:67:75:5c:88:68:6e:
75:d7:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:09:19 2025 by rpki-client