Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QOO7-aDI60snng__tQFWvhG4q6M.roa
File: QOO7-aDI60snng__tQFWvhG4q6M.roa (raw, json)
Hash identifier: wjxjavLkz8EZnYEzQWqkhpJY+YT+ZyRxIFSxbjXWB5o=
Subject key identifier: 40:E3:BB:F9:A0:C8:EB:4B:27:9E:0F:FF:B5:01:56:BE:11:B8:AB:A3
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019402ACAF4E3059147834EE2C7E7C0F4CF4
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QOO7-aDI60snng__tQFWvhG4q6M.roa
Signing time: Thu 26 Dec 2024 11:14:19 +0000
ROA not before: Thu 26 Dec 2024 11:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213789
IP address blocks: 109.248.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:ac:af:4e:30:59:14:78:34:ee:2c:7e:7c:0f:4c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Dec 26 11:14:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40e3bbf9a0c8eb4b279e0fffb50156be11b8aba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:9f:cc:22:55:3a:1b:fe:f9:2d:ed:5b:28:
f5:e9:b0:3f:0d:f6:28:13:9e:eb:87:32:09:7c:d3:
15:a3:11:0b:83:fb:9e:68:65:60:91:8b:52:17:e8:
35:66:bb:32:f0:4d:83:f2:b6:53:a8:e9:c1:47:bc:
d4:4c:70:23:3d:cf:32:df:13:dc:08:10:79:72:24:
a8:00:ee:66:fe:b4:00:d6:36:68:d8:89:2a:74:24:
08:02:1a:3c:f0:06:79:50:8a:70:26:66:d1:36:8c:
e0:0c:de:ab:07:1a:0a:9d:b9:41:09:0f:87:70:84:
5a:f9:fd:d4:85:8e:ba:fc:e6:20:f2:d6:fd:6d:7f:
24:65:d6:4b:bd:3d:08:f6:71:84:d1:4f:42:2f:94:
c4:63:cd:09:fb:3b:33:d9:c0:64:c1:ce:20:61:a3:
72:38:7c:67:10:c1:40:e0:96:56:d7:0e:24:d5:81:
73:f4:b2:b8:07:a2:90:24:7d:0b:50:d6:22:2f:1e:
ee:ee:9d:c0:c3:fe:b8:88:a1:84:85:95:ca:9c:7c:
97:d6:fd:ac:9f:cd:6c:0c:e8:d3:17:62:9d:81:d7:
49:c6:4f:b1:1d:c7:c3:f3:73:82:68:5f:c0:e3:a6:
4c:99:6d:fa:0e:25:d2:90:5c:63:10:1b:5b:a0:81:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E3:BB:F9:A0:C8:EB:4B:27:9E:0F:FF:B5:01:56:BE:11:B8:AB:A3
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QOO7-aDI60snng__tQFWvhG4q6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:09:b7:fa:e5:dc:77:4b:e3:76:a6:6b:1c:54:36:9a:4e:f0:
c8:17:a9:9a:8b:2c:ba:97:22:3d:00:77:de:c9:88:0c:15:7c:
3e:23:67:3c:26:70:f4:5d:25:d5:64:cf:5b:6f:03:ea:e5:a9:
ce:fc:45:b0:e1:87:ee:e4:65:51:73:0a:ac:ac:b3:b4:1a:60:
ea:fd:7e:18:ed:69:e7:4d:5a:a0:02:18:1d:1c:ae:6f:7c:59:
a4:df:d2:79:82:28:58:34:20:8a:6d:5a:34:24:8e:8c:a7:7a:
e2:c7:67:a3:11:e9:e9:bb:49:61:df:cf:53:51:c8:94:43:33:
58:0a:90:d5:d6:0c:38:7c:03:cc:f8:c9:80:bb:fc:2f:ab:0e:
b1:69:cc:75:37:ad:5c:0f:25:ed:95:87:fe:6f:ee:7a:f2:97:
89:a9:14:9f:3c:85:f2:2b:2a:62:b6:e5:17:2d:83:3f:fa:6d:
f6:e6:2d:c4:cf:6b:27:d8:c7:ed:9e:2d:45:3a:ca:01:1f:4e:
23:46:eb:73:e6:1b:00:49:b4:fc:68:aa:fd:5e:25:92:c1:00:
77:4b:d9:16:3c:1f:b3:32:7e:3c:a0:27:fc:d5:f0:26:ad:33:
d5:91:1e:81:fe:dc:9d:b6:93:cc:2e:24:a7:de:64:bf:08:94:
35:a0:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:08 2025 by rpki-client