Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa
File: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (raw, json)
Hash identifier: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=
Subject key identifier: AA:41:8E:71:BF:4C:2F:54:9C:3D:CE:A8:71:D9:04:73:E7:C9:74:FA
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019423D80384E4646F2063BABC3E6AF50C78
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31082
IP address blocks: 94.125.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:03:84:e4:64:6f:20:63:ba:bc:3e:6a:f5:0c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa418e71bf4c2f549c3dcea871d90473e7c974fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:9f:03:33:5e:b5:e0:2d:d5:51:67:20:19:
f3:f7:ab:4a:e0:b2:88:dd:be:6a:ba:ce:07:13:8f:
ba:58:43:78:88:be:50:f7:6d:5b:d6:e4:ac:4a:d1:
19:09:2e:d9:07:4b:18:2c:e3:7b:de:6e:3d:78:69:
c5:7e:b9:06:b4:a2:d0:8d:43:b1:4f:2e:a2:c0:8b:
7d:00:31:f8:e2:9e:c1:37:1d:3f:f2:6e:d3:9b:dc:
9b:2c:5a:03:9d:55:c4:b2:e6:53:be:77:65:99:47:
38:94:69:8a:d2:c4:d1:1b:ae:f2:6c:4a:39:69:c4:
42:b2:87:a7:62:31:22:dc:2b:5d:ab:4f:aa:f9:95:
5a:6f:4a:eb:d4:ca:8d:e7:c0:d3:03:96:30:cf:0a:
50:45:99:7e:fe:39:23:69:f4:ec:bb:80:3a:84:b2:
bb:5c:74:94:81:0a:86:f8:5d:3d:1d:2d:d5:92:b5:
ae:fc:9d:01:8a:61:44:26:ec:08:93:44:28:b0:27:
b3:75:7d:25:9f:97:e8:99:e6:9a:6b:84:89:38:a6:
c0:cd:d9:1c:5a:f3:c3:61:68:d9:7b:85:c7:fe:f2:
ae:3d:44:ff:f7:d5:d2:a5:6e:af:98:02:42:3c:54:
53:ab:b8:0e:b3:fe:d9:38:39:da:a0:14:35:0e:44:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:41:8E:71:BF:4C:2F:54:9C:3D:CE:A8:71:D9:04:73:E7:C9:74:FA
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7a:b2:85:6e:33:8c:1b:50:2b:af:e6:1b:7b:1b:38:9d:90:
38:db:04:38:ba:8d:2e:e0:92:c8:d9:b2:00:34:ba:c0:f7:78:
9b:0f:3e:f7:2f:ad:83:e1:66:e4:3f:94:52:a3:46:f4:9d:53:
b1:23:7d:65:85:f5:19:c3:8e:32:27:cd:c0:2a:47:dd:31:e6:
77:d6:cd:be:85:63:fc:07:ea:2c:7e:13:47:8e:93:9d:2c:23:
ce:6f:c3:12:c3:85:59:9d:f1:3d:31:8a:0c:80:cf:24:9a:74:
95:b4:44:b9:3a:07:6d:79:34:40:11:1f:70:74:3c:dd:c9:af:
b5:8d:ce:f6:b7:8c:8b:e0:71:fb:b1:85:07:5a:21:a4:88:77:
0f:54:9a:26:6a:86:28:e7:d4:8b:eb:45:93:9e:2d:81:26:a3:
e8:e0:1c:b0:49:d9:8d:94:f6:15:2a:b2:b9:89:38:f4:93:7c:
21:79:1d:4d:d7:4c:71:7b:bc:6f:5f:a3:f1:1e:89:e9:6c:6e:
f6:9c:b7:1b:55:66:30:38:09:66:f9:d1:f0:97:83:54:62:0d:
20:f5:01:3e:48:d5:5b:f2:db:9a:94:95:37:4e:2a:87:82:6b:
39:c6:9c:2c:e0:6c:36:25:e2:cb:3f:91:0e:29:84:63:5b:2a:
a1:48:44:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:40 2025 by rpki-client