Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QcfpE2ybma4r9rV9a7x5D-hKw3c.roa
File: QcfpE2ybma4r9rV9a7x5D-hKw3c.roa (raw, json)
Hash identifier: w+026QZNXVysl+gAV59uum+hVcPr658jxTEkpPM4o6Q=
Subject key identifier: 41:C7:E9:13:6C:9B:99:AE:2B:F6:B5:7D:6B:BC:79:0F:E8:4A:C3:77
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01957F71D0BB0CAF842CEB5A0586D15FC8F8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QcfpE2ybma4r9rV9a7x5D-hKw3c.roa
Signing time: Mon 10 Mar 2025 09:45:20 +0000
ROA not before: Mon 10 Mar 2025 09:45:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 45.144.173.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:71:d0:bb:0c:af:84:2c:eb:5a:05:86:d1:5f:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 10 09:45:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41c7e9136c9b99ae2bf6b57d6bbc790fe84ac377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:27:d5:8c:83:9f:0f:1d:08:fb:66:31:7b:
26:10:88:a3:34:91:90:6c:78:69:c9:57:b0:30:cb:
cf:81:06:68:88:8d:2a:fd:da:5c:f0:32:8e:5d:63:
e6:9a:8d:22:7a:1b:56:ea:c8:2e:7f:21:48:7d:1f:
fb:54:04:10:27:64:9c:b8:b7:0c:54:7b:f1:40:46:
d4:dd:2d:50:29:d6:b4:4d:df:75:68:38:3b:2f:58:
00:95:80:46:14:2c:f2:ee:78:ee:79:44:90:71:9e:
cc:a3:2c:33:75:56:ee:ea:46:9f:57:03:ed:61:02:
50:7b:51:43:92:59:e1:e4:eb:5e:0b:ac:2a:f8:8e:
a6:66:c2:16:8b:04:ba:05:73:cf:fa:ff:e6:4a:10:
51:1c:59:cc:dd:70:46:28:d5:d6:31:55:4c:c5:a8:
36:0d:70:1b:a4:e1:d8:14:79:48:53:1c:62:55:7d:
0a:b6:99:aa:b7:59:32:b7:03:89:a3:bf:85:df:e7:
dd:69:67:22:f4:aa:de:db:49:67:a3:0f:d6:7d:99:
18:da:37:f4:83:fc:b5:3e:f9:29:6c:b9:54:5b:8a:
74:9f:bb:15:f2:bf:3e:f8:05:60:9b:20:2b:2b:07:
b7:bb:a4:bf:28:7d:71:9f:16:28:4c:5f:d6:3d:0b:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C7:E9:13:6C:9B:99:AE:2B:F6:B5:7D:6B:BC:79:0F:E8:4A:C3:77
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QcfpE2ybma4r9rV9a7x5D-hKw3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.173.0/24
188.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0a:b5:02:f7:c3:25:0f:01:c2:ce:68:65:7c:fc:c7:0f:20:
ee:6c:68:9d:3e:6d:de:1c:e4:bc:66:26:d2:a9:2f:7e:b5:a7:
ca:0a:e2:99:88:7d:52:5e:48:5d:b6:8c:f4:1b:bb:c8:f1:15:
a6:da:b7:20:98:6c:35:4a:b0:d9:c1:bb:a6:6c:f1:1f:9b:16:
c5:d8:85:4d:a1:3f:8d:8c:85:8c:8c:65:1b:b3:bb:62:a1:0d:
2d:fe:c3:78:10:1d:21:ca:d7:44:1d:ef:25:be:af:04:eb:e5:
f3:90:ca:5d:86:ba:bc:8d:de:e0:71:9b:c2:a3:6f:ec:0d:b8:
a4:26:73:70:11:3b:c0:17:0c:ce:a2:3e:d9:a4:b8:39:2e:fb:
5a:45:6f:15:79:a1:1c:5f:66:52:02:39:cd:68:92:45:d0:07:
03:32:8b:eb:76:75:31:0d:a1:61:26:cd:80:e5:9b:16:03:d7:
65:3b:b7:92:8f:69:e1:06:06:03:4c:a1:d6:70:6e:e5:93:8b:
f5:7e:13:42:da:39:dd:42:bf:67:2f:fa:4a:d8:e1:d8:08:51:
a0:10:e3:cc:27:a0:9c:1c:8b:a5:aa:3f:ab:b9:58:b8:0e:b9:
bb:d4:27:56:00:3d:3d:b9:c1:5f:f2:0f:b0:0b:0b:41:17:b4:
bf:1f:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:10 2025 by rpki-client