Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa
File: q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa (raw, json)
Hash identifier: /Mga5oX8Op4TctH5TWu+rLivpwbBRAO4KpJeZeXs2ec=
Subject key identifier: AB:B5:99:1A:E4:55:C5:5C:BE:DA:97:F7:CC:12:14:05:14:1E:10:BF
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 0194244531FEC00058BC1B94A80AAF051CA4
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa
Signing time: Wed 01 Jan 2025 23:48:22 +0000
ROA not before: Wed 01 Jan 2025 23:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56457
IP address blocks: 176.119.210.0/24 maxlen: 24
185.201.254.0/24 maxlen: 24
2a06:5780::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:31:fe:c0:00:58:bc:1b:94:a8:0a:af:05:1c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Jan 1 23:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abb5991ae455c55cbeda97f7cc121405141e10bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:91:93:3c:47:a7:0e:a5:1b:13:7d:00:8d:fa:
2a:67:6a:83:81:a6:c9:28:7d:1a:54:a8:53:0f:c5:
fa:19:74:05:f2:9c:68:d9:12:24:6b:3a:e2:72:2d:
18:a3:7b:c2:fb:5a:8f:03:99:db:60:49:27:e4:fe:
eb:76:9f:4c:04:1b:62:cd:25:91:de:e0:81:1b:b5:
39:7a:cb:b4:62:f5:98:0d:15:42:f4:29:17:25:0b:
f7:d8:f8:cf:33:7a:75:c4:a5:0f:c6:97:5c:76:61:
65:9e:b0:bb:15:15:e5:1a:25:b1:d8:ee:d4:9c:5d:
11:a4:dd:45:e1:e4:f8:60:92:99:79:71:bc:14:0f:
a0:b7:f4:2b:0d:d3:05:80:49:07:84:41:b8:0c:47:
22:80:41:0b:cf:94:02:a8:19:32:35:b9:05:85:73:
d1:d0:b3:9a:d5:94:0f:45:3f:1f:c7:c5:73:7c:c5:
d5:6f:b5:63:49:05:f8:89:13:f3:5c:fb:19:ad:e6:
be:07:e4:5a:4d:5d:28:1e:f3:31:22:01:5a:e5:78:
d0:56:65:f7:63:13:f6:2a:7e:2c:81:c7:82:5d:45:
87:44:9e:09:da:00:fb:ec:94:8c:3f:c8:f7:8b:1f:
15:40:03:26:92:d4:d9:be:b4:8e:24:7b:6c:4e:10:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B5:99:1A:E4:55:C5:5C:BE:DA:97:F7:CC:12:14:05:14:1E:10:BF
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.210.0/24
185.201.254.0/24
IPv6:
2a06:5780::/29
Signature Algorithm: sha256WithRSAEncryption
56:67:da:20:dc:b2:84:a3:08:f6:07:bb:c5:65:da:a8:3f:2d:
c0:32:77:9a:fa:f2:45:98:45:ec:2a:04:94:1a:6e:54:02:f0:
6a:c0:f1:dc:2b:3b:14:ec:55:5f:d5:3a:3c:3f:e3:b7:58:87:
92:ba:d3:50:96:ac:4b:42:e1:f8:82:2b:c2:9b:b5:49:10:82:
92:ea:ac:2f:35:49:5d:25:36:86:1f:93:4d:23:eb:4c:5b:01:
16:30:9c:67:d8:89:96:b9:a0:f6:dc:f6:bf:8f:fe:13:7e:14:
f8:5d:9c:09:9e:a7:15:ca:46:ca:7f:45:6c:20:d9:2c:a9:bd:
5b:03:f4:58:de:41:26:b3:b4:77:ea:35:11:04:51:34:a7:44:
65:51:a2:82:51:a7:8f:fe:3d:de:7c:cc:72:ff:95:fc:f7:09:
69:d0:6f:5f:09:f7:df:cd:9e:3a:75:54:0b:a8:71:dc:a5:b0:
6f:9e:c2:b8:fc:82:a0:98:f4:55:c3:f2:d5:ca:a1:3a:f7:6f:
b9:5a:3b:5b:86:41:6e:6b:23:66:ed:8b:26:49:40:7e:5e:8b:
48:60:0a:2a:34:3b:7f:70:57:d0:27:55:26:3e:6e:00:c8:1e:
58:45:62:eb:b2:1a:3d:d3:38:b3:b6:61:28:21:37:3c:f9:87:
42:67:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:26:14 2025 by rpki-client