Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/QajEwkbx04DeU-__NIG_To3nAd4.roa
File: QajEwkbx04DeU-__NIG_To3nAd4.roa (raw, json)
Hash identifier: DL3wmR5aQwUYr9WHU8u6HM9lbpHPvXLenfBtN39yssQ=
Subject key identifier: 41:A8:C4:C2:46:F1:D3:80:DE:53:EF:FF:34:81:BF:4E:8D:E7:01:DE
Certificate issuer: /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial: 019424447DC757665C9D4B87F955AFE3173B
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/QajEwkbx04DeU-__NIG_To3nAd4.roa
Signing time: Wed 01 Jan 2025 23:47:35 +0000
ROA not before: Wed 01 Jan 2025 23:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212485
IP address blocks: 193.163.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:7d:c7:57:66:5c:9d:4b:87:f9:55:af:e3:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Validity
Not Before: Jan 1 23:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41a8c4c246f1d380de53efff3481bf4e8de701de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:a6:de:4a:98:77:60:c1:72:27:30:7e:57:
10:02:6d:3c:20:f1:5b:60:97:3f:a8:8c:a7:9f:bb:
9c:4a:15:cd:87:c2:d7:58:04:2d:7f:5a:f1:59:df:
b2:54:a6:d9:e6:ff:07:27:95:c1:44:08:8c:b1:38:
fe:48:52:e4:91:6c:49:4c:85:02:a9:38:65:08:4f:
85:c2:f2:01:08:8d:d1:7a:81:36:fd:ec:d6:25:16:
57:ff:5a:4f:a3:21:a3:3e:ae:6c:62:9e:a9:16:c5:
d6:cc:30:d8:e0:cd:aa:30:89:af:47:25:66:5c:9b:
b5:96:60:c4:b2:c1:c0:61:af:98:fa:56:24:2c:8a:
89:59:f7:e9:8c:ff:47:08:8b:ae:17:57:e1:97:0b:
41:7a:b2:0e:bc:aa:f2:3f:4b:b8:07:96:9e:53:3a:
e5:74:0b:bd:1f:72:a9:f5:be:7a:7c:23:2a:05:b0:
66:67:0d:75:06:f0:f6:f6:03:fd:47:94:bc:86:e7:
20:1f:a1:f2:d3:0b:19:e6:49:19:62:04:67:e8:8b:
fa:b7:21:56:06:82:e3:59:74:16:f3:a2:ef:39:f3:
12:5b:93:1c:c4:72:54:01:f6:73:a4:c8:98:3c:24:
5a:d6:8a:00:1f:dc:10:96:c7:d9:9f:da:f5:57:87:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A8:C4:C2:46:F1:D3:80:DE:53:EF:FF:34:81:BF:4E:8D:E7:01:DE
X509v3 Authority Key Identifier:
keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/QajEwkbx04DeU-__NIG_To3nAd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:be:95:ff:ff:d9:c0:1f:f6:0b:c7:8d:97:58:f1:ac:9e:6e:
0d:e4:36:79:ea:34:ef:2d:0e:ed:08:4e:ff:d6:b2:b9:21:a3:
82:5e:85:ea:30:ec:d3:06:fd:25:5e:9a:af:67:5d:f4:f5:46:
dc:e5:05:5c:da:75:24:f1:60:b9:75:44:18:53:05:2e:7c:ee:
74:ac:e0:cd:0a:2a:ae:0f:31:23:03:a5:86:ce:e7:fb:a7:5a:
00:b5:47:32:5e:80:b4:a8:9b:1f:a5:2b:b0:e4:f3:16:3a:20:
ae:68:87:65:4a:90:e3:42:ec:34:bc:4a:b7:5f:16:58:e4:25:
72:10:20:48:3e:4d:1d:6e:89:c5:a6:7b:67:ec:c7:37:3d:b4:
48:5c:c8:64:f1:95:93:c6:1d:f5:b4:91:ef:a9:74:fe:59:36:
a4:5b:29:79:19:b8:53:ba:02:32:8b:b3:a7:26:27:a9:95:8f:
b2:84:6c:21:87:58:c2:34:d2:4b:69:61:53:b3:5d:6d:a7:78:
28:90:37:6f:26:81:32:1b:48:8e:e7:9e:e2:91:92:0c:47:d1:
89:e9:f5:3a:ef:55:d4:e3:d1:1f:8d:e0:2f:5b:2f:1b:a8:5f:
c7:ce:f3:a4:b6:be:29:47:79:42:59:40:d8:b0:6d:57:d9:89:
7b:cd:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:54 2025 by rpki-client