Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/QPglHGOSHFrs1mgAtq2zwd82Smc.roa
File: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (raw, json)
Hash identifier: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=
Subject key identifier: 40:F8:25:1C:63:92:1C:5A:EC:D6:68:00:B6:AD:B3:C1:DF:36:4A:67
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 01942823278A8B1AA31862C06062BC5599B5
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/QPglHGOSHFrs1mgAtq2zwd82Smc.roa
Signing time: Thu 02 Jan 2025 17:49:39 +0000
ROA not before: Thu 02 Jan 2025 17:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206433
IP address blocks: 195.122.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:27:8a:8b:1a:a3:18:62:c0:60:62:bc:55:99:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jan 2 17:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40f8251c63921c5aecd66800b6adb3c1df364a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:3d:b6:3c:2e:a1:a7:37:02:b0:68:85:0f:
b5:d0:76:80:06:89:7e:7f:71:f1:cf:67:62:14:18:
93:3f:04:40:d3:5d:d5:a2:b0:2c:bc:b4:06:9d:b1:
84:47:9a:85:d8:4f:ef:50:08:31:bf:a8:d5:60:ec:
01:52:fb:c6:4f:b8:d2:1f:4c:f6:4a:7f:e5:86:36:
40:b4:03:05:ed:48:0b:1d:e5:6f:73:46:bc:83:fb:
e2:f4:21:04:42:6f:ba:58:2a:fc:cc:2f:68:f9:9c:
d6:a8:d5:e7:4f:12:3a:c1:44:47:01:92:42:7b:f9:
80:fe:86:f1:c6:5f:a0:d1:26:a8:1d:b7:75:4a:6f:
b2:d9:41:86:e2:cb:a7:01:24:90:f2:fa:2a:5f:a2:
43:2f:bc:40:b6:99:60:41:98:24:17:15:5c:de:b1:
a0:72:af:4c:46:de:51:99:be:b9:ac:1c:b3:2e:d4:
f1:0c:a6:fc:52:b7:9e:f8:bb:47:8b:42:9a:87:5e:
32:49:f9:56:81:a7:03:e9:e9:b5:e8:4d:c0:b7:86:
61:4f:2b:48:46:3b:2c:40:c9:a5:4a:bb:82:02:48:
75:34:28:d0:ba:af:59:92:c3:a7:20:df:39:fb:5e:
3e:71:09:ed:86:3c:94:ce:4d:c7:8c:68:d0:ab:4e:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:25:1C:63:92:1C:5A:EC:D6:68:00:B6:AD:B3:C1:DF:36:4A:67
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/QPglHGOSHFrs1mgAtq2zwd82Smc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.122.92.0/24
Signature Algorithm: sha256WithRSAEncryption
79:34:22:7f:9a:96:8f:d3:ca:f6:a2:5d:9a:cf:ca:82:7a:9b:
17:bc:61:58:ac:e8:d3:1d:3b:ee:70:f1:9f:98:0c:94:4d:e4:
d8:95:8e:4d:47:b3:07:6c:76:fa:0a:11:43:e8:93:9b:47:fc:
41:8f:49:4a:a5:07:b1:d9:3a:2b:7c:df:77:2d:4b:ba:f1:a2:
4d:94:93:0b:3c:84:b3:c6:de:8c:b3:f5:ec:c8:ce:94:d3:67:
59:22:08:49:8b:54:9b:45:ce:b2:28:9f:51:3d:02:b1:bc:96:
10:bc:02:f2:ad:90:34:08:f2:e6:a6:2c:30:bb:48:9c:dc:92:
51:e3:35:a2:e1:d1:aa:9e:fd:9a:27:b5:2a:4e:c5:25:28:92:
77:bd:18:82:58:3c:c0:af:aa:39:6a:7e:eb:ab:1f:e4:1d:ec:
b0:f1:4b:b0:0d:99:48:0f:cc:8c:49:05:0d:1b:b3:6d:52:bb:
e5:dc:3c:2f:29:cc:94:59:ae:05:44:20:37:52:7e:58:36:9f:
20:a4:6c:25:df:d3:41:c1:ae:36:72:6b:80:aa:b7:d9:59:88:
16:1d:69:8f:a1:cc:62:fd:bb:4b:6e:be:e2:5e:d8:ed:77:a9:
ae:f4:3d:c2:43:33:ff:71:cf:f6:a3:3c:86:cf:d7:30:bb:f6:
95:b9:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:37 2025 by rpki-client