Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/QJbak2jPSanxy-67qdVl-_suT3k.roa
File: QJbak2jPSanxy-67qdVl-_suT3k.roa (raw, json)
Hash identifier: Mrtr8d8DyDVb1FcIM/ncJZdZiQJbrEhaf7B91X5c0J0=
Subject key identifier: 40:96:DA:93:68:CF:49:A9:F1:CB:EE:BB:A9:D5:65:FB:FB:2E:4F:79
Certificate issuer: /CN=83900d6fb55a544ae2b12d363dacfe2b3c749a87
Certificate serial: 01856BCA289E19475193E30245A2841A2B36
Authority key identifier: 83:90:0D:6F:B5:5A:54:4A:E2:B1:2D:36:3D:AC:FE:2B:3C:74:9A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ANb7VaVErisS02Paz-Kzx0moc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/QJbak2jPSanxy-67qdVl-_suT3k.roa
Signing time: Sun 01 Jan 2023 05:24:48 +0000
ROA not before: Sun 01 Jan 2023 05:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 193.163.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:28:9e:19:47:51:93:e3:02:45:a2:84:1a:2b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83900d6fb55a544ae2b12d363dacfe2b3c749a87
Validity
Not Before: Jan 1 05:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4096da9368cf49a9f1cbeebba9d565fbfb2e4f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:bd:55:e8:37:2a:c4:69:ae:a2:50:7b:5c:
d0:e9:73:4d:ca:87:75:5b:9c:ae:b9:4d:08:ce:58:
66:99:d8:93:3f:f8:2e:99:a9:16:42:02:10:c8:8f:
0e:3e:26:cf:06:e1:51:d0:47:26:71:e3:22:eb:19:
27:3a:97:46:c2:88:70:fa:ed:85:e1:ff:6d:42:a2:
c3:e7:f7:c8:80:e4:c2:95:bf:9d:dd:92:44:ae:18:
8a:14:f5:5f:b7:72:99:25:9a:28:87:58:e5:31:6f:
2e:7c:de:8b:2f:f1:e8:60:22:5e:97:05:9a:1f:24:
c4:a3:81:29:87:ed:2f:b6:bf:d7:66:dd:c6:5e:bb:
2a:2d:2b:64:2b:f6:45:55:ae:a7:d8:df:81:51:cb:
13:4a:6a:c1:0a:1f:4c:df:57:e7:db:11:96:bd:e3:
34:20:de:47:69:96:86:cd:9d:11:52:02:2e:d4:af:
7d:4c:52:b0:9c:0d:c2:95:b1:b6:65:ac:08:b9:d8:
5d:d9:c9:06:99:75:f6:f2:7e:7b:14:d5:fe:6c:e3:
3e:97:7f:1e:0f:40:41:9b:6e:74:f4:32:92:87:9d:
cc:dd:f3:5e:0b:fd:64:6e:0d:1e:02:df:59:fa:5a:
30:2a:17:83:47:fa:62:4e:75:d9:2c:8e:12:b2:d6:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:DA:93:68:CF:49:A9:F1:CB:EE:BB:A9:D5:65:FB:FB:2E:4F:79
X509v3 Authority Key Identifier:
keyid:83:90:0D:6F:B5:5A:54:4A:E2:B1:2D:36:3D:AC:FE:2B:3C:74:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ANb7VaVErisS02Paz-Kzx0moc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/QJbak2jPSanxy-67qdVl-_suT3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/g5ANb7VaVErisS02Paz-Kzx0moc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0b:d9:4c:2b:ea:2e:c9:81:b1:05:0c:c3:30:79:57:1b:2f:
6e:6c:96:dc:89:de:d8:2b:75:20:1f:31:8d:54:97:fe:4b:b1:
7b:ff:b7:73:fd:b4:eb:f5:80:a3:d6:03:13:14:2c:f9:85:09:
18:74:82:df:8e:9b:1c:1e:2b:11:42:fd:dc:0a:73:39:9d:c8:
5c:29:73:4a:29:71:49:38:58:8c:86:6f:d0:20:da:b0:67:48:
14:f7:05:c8:a5:65:37:c8:ae:fc:38:25:a6:8d:01:b9:3a:10:
c7:0f:04:ab:36:56:50:18:ee:b0:88:27:e9:f7:22:d8:48:70:
dd:84:e5:eb:e3:0b:94:86:c3:69:60:07:72:a7:c2:5c:4d:2c:
2b:36:dc:9e:b7:16:34:e9:c4:57:dc:45:c4:cc:43:0a:af:cd:
fa:06:12:dd:7e:83:e4:0f:6d:51:55:8d:0c:7d:85:01:00:b9:
b0:d1:17:03:66:b6:94:14:36:63:7c:a2:3f:d8:f3:8e:f7:65:
45:3b:10:e4:94:53:04:2f:0f:da:98:51:24:e1:19:94:e2:84:
a4:cd:f3:8c:ea:e9:18:39:e9:c5:b7:88:55:61:70:6b:49:7b:
1c:d8:29:26:ff:aa:d3:05:06:7c:a5:51:bc:3e:fb:6c:b9:96:
d2:ad:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:50 2025 by rpki-client