Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/QuYfyHECL9u7YIDEFE906TX8dxg.roa
File: QuYfyHECL9u7YIDEFE906TX8dxg.roa (raw, json)
Hash identifier: 71f8Ca0uNtkIK5NyRwBepQ8l4F9xqs6tydM/OrOSxic=
Subject key identifier: 42:E6:1F:C8:71:02:2F:DB:BB:60:80:C4:14:4F:74:E9:35:FC:77:18
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5741A6BA3DF4A129A68AA4E38883
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/QuYfyHECL9u7YIDEFE906TX8dxg.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1133
IP address blocks: 145.90.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:57:41:a6:ba:3d:f4:a1:29:a6:8a:a4:e3:88:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42e61fc871022fdbbb6080c4144f74e935fc7718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:25:a6:a0:68:75:96:a3:2c:92:e1:34:4c:
00:eb:48:49:5d:41:c4:6c:d7:80:ce:22:56:82:a6:
c5:18:c1:b0:e1:0c:b2:1c:2c:e4:6f:16:57:14:39:
74:f3:50:b5:0d:30:31:3f:f4:16:6e:c9:51:f0:f6:
6c:d5:29:52:bc:93:19:95:da:3c:cb:8c:af:56:73:
1b:b7:ae:2e:7c:c5:25:15:cd:ab:f9:1b:3a:e5:07:
fe:06:4c:b7:52:22:00:9c:7f:ed:ce:ad:42:6e:54:
08:90:40:74:97:5f:52:29:95:7e:f6:a4:c5:e7:f9:
7b:f8:c7:bb:04:44:48:91:b8:dd:c2:44:f8:fd:f5:
9b:eb:8d:82:ad:ec:a7:b9:2a:d7:fd:c3:59:af:64:
0b:00:f3:a0:57:97:80:cc:16:49:59:29:54:01:73:
69:4a:ec:69:be:7e:16:37:9f:5e:43:5a:a6:ec:bf:
e9:eb:43:7f:ad:f8:6e:0e:da:cf:fa:61:c5:fa:ca:
10:2a:85:84:be:01:a7:5e:91:3d:0b:d8:af:d5:50:
22:ec:90:12:0e:ea:db:56:05:d3:47:5a:a8:74:f1:
cf:04:38:ec:b8:00:09:c9:98:08:c8:63:30:25:04:
59:a7:41:16:b6:9e:9e:cc:9f:fe:c8:88:01:af:9f:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:1F:C8:71:02:2F:DB:BB:60:80:C4:14:4F:74:E9:35:FC:77:18
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/QuYfyHECL9u7YIDEFE906TX8dxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.90.8.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0c:6f:57:24:72:b9:d0:27:0c:eb:a9:fb:02:b1:20:39:75:
4d:11:9f:f6:e5:3b:09:6f:36:64:36:b9:6e:8a:d7:17:e8:24:
41:e1:ce:69:11:b7:7a:42:12:39:44:c9:76:36:64:8d:e9:b6:
7f:61:e6:c4:e2:f6:fe:ed:65:1b:cf:00:8d:d7:a1:ee:1e:41:
0e:42:fd:e3:7a:38:48:9c:80:b2:03:d7:f0:10:a2:4c:5f:8f:
f8:b5:86:e7:f4:23:0e:77:88:bd:07:3a:51:5b:a2:05:39:21:
f4:0b:49:1f:8e:70:61:64:c3:f3:23:f1:21:14:89:ef:2b:cc:
64:78:f1:88:95:4a:cb:b8:cc:f0:45:17:c8:ce:7e:36:d0:62:
2d:d7:e1:32:f1:2a:3e:05:e6:db:56:1d:bb:a4:6e:31:35:61:
c6:9e:58:46:fd:a7:0b:cc:15:73:a2:37:cf:a8:d9:5f:02:3b:
fd:ce:11:de:88:c1:f1:74:fb:f2:36:fa:e9:76:a4:7f:dc:fa:
31:e4:27:89:95:fc:7d:17:29:29:c1:87:9f:c6:ca:7a:57:53:
f8:8b:17:54:65:56:d5:fe:e1:32:3d:46:12:e8:6c:a0:a8:b4:
50:f5:96:41:34:76:8c:14:dc:79:81:30:57:76:68:c5:8e:24:
6b:f2:5e:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaldBpro99KEppoqk44iDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmU2MWZjODcxMDIyZmRiYmI2MDgwYzQxNDRmNzRlOTM1ZmM3NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltUlpqBodZajLJLhNEwA60hJXUHE
bNeAziJWgqbFGMGw4QyyHCzkbxZXFDl081C1DTAxP/QWbslR8PZs1SlSvJMZldo8
y4yvVnMbt64ufMUlFc2r+Rs65Qf+Bky3UiIAnH/tzq1CblQIkEB0l19SKZV+9qTF
5/l7+Me7BERIkbjdwkT4/fWb642CreynuSrX/cNZr2QLAPOgV5eAzBZJWSlUAXNp
Suxpvn4WN59eQ1qm7L/p60N/rfhuDtrP+mHF+soQKoWEvgGnXpE9C9iv1VAi7JAS
DurbVgXTR1qodPHPBDjsuAAJyZgIyGMwJQRZp0EWtp6ezJ/+yIgBr5/98wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFELmH8hxAi/bu2CAxBRPdOk1/HcYMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvUXVZZnlIRUNMOXU3WUlERUZFOTA2VFg4ZHhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkVoIMA0G
CSqGSIb3DQEBCwUAA4IBAQCXDG9XJHK50CcM66n7ArEgOXVNEZ/25TsJbzZkNrlu
itcX6CRB4c5pEbd6QhI5RMl2NmSN6bZ/YebE4vb+7WUbzwCN16HuHkEOQv3jejhI
nICyA9fwEKJMX4/4tYbn9CMOd4i9BzpRW6IFOSH0C0kfjnBhZMPzI/EhFInvK8xk
ePGIlUrLuMzwRRfIzn420GIt1+Ey8So+BebbVh27pG4xNWHGnlhG/acLzBVzojfP
qNlfAjv9zhHeiMHxdPvyNvrpdqR/3Pox5CeJlfx9FykpwYefxsp6V1P4ixdUZVbV
/uEyPUYS6GygqLRQ9ZZBNHaMFNx5gTBXdmjFjiRr8l7R
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:30 2025 by rpki-client