Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qBtjnu9tcR8Dlm9lCrhpeE6253U.roa
File: qBtjnu9tcR8Dlm9lCrhpeE6253U.roa (raw, json)
Hash identifier: 9kvK+SJurCZTHkQaGnQBgihdUYzsj91a52C5C2hyF/Y=
Subject key identifier: A8:1B:63:9E:EF:6D:71:1F:03:96:6F:65:0A:B8:69:78:4E:B6:E7:75
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484EA7D15AB78FDF3465A2C3BE0668
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qBtjnu9tcR8Dlm9lCrhpeE6253U.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262199
IP address blocks: 178.19.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4e:a7:d1:5a:b7:8f:df:34:65:a2:c3:be:06:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a81b639eef6d711f03966f650ab869784eb6e775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:14:da:d2:3c:f9:1b:c7:2e:12:e2:c5:67:
a8:b0:4f:e0:51:92:5f:de:a2:8f:34:50:2a:1c:80:
e4:36:25:06:f8:30:8c:29:cf:50:c6:02:38:27:98:
45:db:12:b1:e2:4d:e1:87:fa:3b:1b:24:95:b9:21:
87:8e:d3:a5:bd:b9:ce:66:c0:12:65:7e:62:30:df:
8d:3f:49:dc:c8:95:71:7f:5a:3d:03:21:63:60:91:
51:25:3f:81:1f:74:d0:ed:d3:9b:47:a3:70:44:c0:
40:42:e3:a3:c6:53:33:bb:0c:66:0a:79:17:c0:02:
e9:46:01:53:52:0d:7e:79:0d:97:27:27:0c:ac:d1:
90:ef:c7:ae:c0:ce:37:f8:ff:9e:7e:a5:22:71:6a:
39:34:66:a7:3a:a5:26:ab:2a:86:06:4b:aa:0b:1c:
8c:d6:2f:cc:9f:07:54:68:9b:d6:9d:d1:e0:82:f9:
95:e2:85:01:e3:5a:36:8f:64:0b:1b:c1:29:b4:4a:
df:87:87:29:04:a7:a9:db:34:9b:5a:d2:6c:ea:43:
5b:b5:33:3b:0c:ff:14:c9:33:89:b0:5d:aa:85:05:
0c:92:9d:e0:f1:2f:7b:82:dc:5a:9d:0e:dd:b0:de:
b5:ca:ec:9b:49:d3:59:29:20:74:eb:2e:03:80:be:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1B:63:9E:EF:6D:71:1F:03:96:6F:65:0A:B8:69:78:4E:B6:E7:75
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qBtjnu9tcR8Dlm9lCrhpeE6253U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.43.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f3:d3:7f:16:56:f4:1f:da:dd:60:c3:91:67:fd:f4:ce:4b:
7c:83:3c:09:ec:b0:47:0d:71:d8:82:57:37:0f:a6:7b:12:b7:
1f:f5:6f:7a:74:ff:64:c2:10:f0:60:77:99:32:21:cf:64:9c:
3f:83:0f:72:7b:44:88:ca:12:75:60:1a:20:2e:be:84:c8:5e:
db:6a:4e:80:7d:29:7b:b1:8c:de:c1:64:14:3e:b6:72:fd:9e:
3d:36:5c:35:f3:51:f3:9e:6f:6c:77:70:fb:62:43:cd:c9:9e:
38:58:c4:0b:b8:fa:23:0e:79:c5:c8:33:93:d7:c6:8e:31:d8:
06:5b:33:52:86:e2:95:60:7b:96:96:1b:46:1b:68:e0:89:09:
fc:7f:9c:16:c8:73:ba:14:cc:47:9e:ff:07:8e:a6:6f:d4:7b:
17:5b:e0:f1:a2:d8:c7:e9:f3:98:e5:3c:2d:e8:34:13:56:44:
17:99:19:22:d2:42:9a:be:f9:bb:eb:41:ca:07:7d:37:ed:dd:
a2:b8:3b:c7:c5:ac:f7:93:db:e2:bb:10:ea:70:7c:ef:2c:e4:
d5:10:ca:78:8b:51:b9:47:a7:4a:6e:a5:ac:e7:37:95:c8:85:
a0:bf:37:0c:f1:f4:16:95:59:ea:82:c8:12:c2:94:67:c1:d3:
f8:16:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:40:22 2025 by rpki-client