Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/qen-QoIAAGwgpqx4OQAF6M4rR_M.roa
File: qen-QoIAAGwgpqx4OQAF6M4rR_M.roa (raw, json)
Hash identifier: Pfgs1o9qvVrkxz8on7jtYneDypFRD7JuU2XED3GEHk4=
Subject key identifier: A9:E9:FE:42:82:00:00:6C:20:A6:AC:78:39:00:05:E8:CE:2B:47:F3
Certificate issuer: /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Certificate serial: 019420D5D52DC358612B90DA02EEDD169AAE
Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/qen-QoIAAGwgpqx4OQAF6M4rR_M.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 194.50.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d5:2d:c3:58:61:2b:90:da:02:ee:dd:16:9a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9e9fe428200006c20a6ac78390005e8ce2b47f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:00:fd:8a:37:a1:2a:f0:9f:7a:8f:d0:bd:
90:63:0d:c1:ff:75:c2:ec:f2:4c:1a:6d:63:41:b0:
cf:95:3f:df:86:de:6f:0c:b4:0b:c1:a1:ab:d9:96:
8e:c2:77:3a:39:9d:7e:78:af:11:71:4d:27:e9:21:
79:7d:26:a3:33:e0:9e:79:71:c2:fb:84:5a:0c:91:
d7:16:4c:5b:8e:8c:01:04:b8:75:47:08:bd:84:62:
15:b6:e6:03:e6:9a:48:ad:b4:6d:3b:46:5f:36:44:
ac:d0:00:b7:a3:87:6a:67:dc:b5:7f:60:16:04:8f:
2a:59:de:38:5f:ea:99:c9:bf:0b:15:e3:82:74:1e:
02:73:f5:02:ca:61:45:19:00:97:39:a7:70:3d:7f:
b3:bd:5a:69:d0:90:19:69:8a:a1:bd:22:92:2a:77:
b7:78:d4:c6:a1:df:98:9c:b4:5f:59:bd:58:94:24:
6e:73:d1:62:c6:9b:75:f1:68:7a:3e:ea:05:64:dc:
d6:55:19:d4:44:3d:d7:10:b0:96:1d:7c:63:73:d8:
9c:4f:c9:da:c8:e9:64:7e:84:25:ab:b7:06:92:e3:
1f:0c:93:64:9e:d8:7c:c4:76:70:b5:5c:48:bd:0d:
c7:19:ec:c6:b5:1c:4d:7f:ce:51:a5:86:47:c2:c5:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:FE:42:82:00:00:6C:20:A6:AC:78:39:00:05:E8:CE:2B:47:F3
X509v3 Authority Key Identifier:
keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/qen-QoIAAGwgpqx4OQAF6M4rR_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
82:69:3d:58:2a:78:c3:37:81:8d:2e:4d:fa:c4:6b:c6:08:76:
ca:88:b7:3a:64:b8:ef:0d:33:02:6f:99:36:d1:20:61:70:3a:
ee:0d:62:bc:35:ee:36:ed:d5:79:d6:29:f4:01:0a:b6:3a:45:
7f:48:96:b9:96:dd:f6:b7:1f:8d:a5:ce:3b:7a:a2:6c:6d:84:
5a:ce:f8:df:9f:c2:1a:f0:8a:70:68:14:97:34:35:20:2d:41:
66:b1:44:28:46:1e:56:cd:91:69:a9:0e:85:6d:d0:61:e6:cc:
3a:7b:aa:5e:66:11:86:b9:8b:ab:1f:7d:d6:3f:26:28:5b:3d:
57:bd:74:85:f2:48:1d:67:f3:3f:91:3b:e4:fc:51:55:a3:29:
5d:98:b9:a1:04:42:06:40:88:26:0c:e6:93:4a:9e:06:12:1d:
cb:0a:8c:48:e5:4f:71:5d:76:0f:99:16:da:5d:69:b6:ce:fc:
89:8f:38:3d:19:77:e6:e6:a3:d0:0e:16:68:fe:0e:eb:ae:fe:
54:fe:19:ed:25:b3:bf:38:87:4a:6e:92:67:dc:6b:d9:69:6f:
f9:5e:a3:90:02:83:a9:c2:1a:cc:12:b2:b7:0b:2d:9b:be:aa:
3f:bd:ad:9d:c4:ec:79:56:a7:48:95:9d:ea:79:51:a7:50:02:
e5:eb:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:30:55 2025 by rpki-client