Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa
File: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (raw, json)
Hash identifier: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=
Subject key identifier: AA:75:BE:90:6F:EE:6D:C6:04:4A:42:21:64:0F:00:F9:15:A7:F5:8A
Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial: 0194266BACBEEA0569C0677AFE29F3F015C2
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20760
IP address blocks: 193.127.0.0/16 maxlen: 24
193.201.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ac:be:ea:05:69:c0:67:7a:fe:29:f3:f0:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa75be906fee6dc6044a4221640f00f915a7f58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:7c:3b:1c:b1:34:9e:93:7b:75:0c:77:4d:
9a:db:d0:e3:a2:35:75:8d:dd:eb:66:6f:e9:96:6e:
f0:d2:41:5f:d0:38:2a:47:ee:eb:4d:59:9d:0e:a0:
56:a8:5d:84:24:1a:f3:6e:da:6f:8a:1b:0a:a9:26:
25:0d:70:b0:3d:f0:5c:00:a7:4f:c5:c6:91:f0:ea:
9d:0c:08:84:80:ce:40:7c:14:58:dd:85:1c:fe:cd:
2d:54:f7:b2:0a:53:8f:ca:46:0f:17:b0:5a:65:f7:
e9:cb:1d:91:62:6b:ae:00:6f:96:77:10:33:5a:5f:
d6:6c:b8:a8:59:0d:eb:22:e9:cf:ef:a1:70:5d:bb:
c4:67:66:75:0a:4b:0f:8c:2e:cc:ac:bf:f4:49:41:
50:af:5a:da:01:30:bb:23:2f:f2:fa:15:f3:e9:b4:
f7:cd:e5:3d:33:6e:5b:0b:a1:e4:93:5a:32:a3:e8:
3b:00:9b:83:e4:1b:e8:b9:43:39:4e:df:98:bb:34:
0f:39:17:4d:04:a8:f7:31:19:ea:6d:2f:74:f4:33:
1c:09:de:7d:f5:b6:52:0d:4d:21:06:b4:9e:dc:a2:
f7:48:d3:f1:bc:98:5f:45:10:38:a3:d7:75:15:82:
1e:02:a9:ce:52:c4:32:57:57:54:57:da:20:d1:a8:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:BE:90:6F:EE:6D:C6:04:4A:42:21:64:0F:00:F9:15:A7:F5:8A
X509v3 Authority Key Identifier:
keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.127.0.0/16
193.201.108.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7d:68:7c:06:a3:36:9b:67:bd:ea:88:8a:70:df:6e:ab:22:
ff:be:56:eb:ea:9a:e4:d4:26:7a:c9:c2:51:48:df:7b:64:82:
58:c8:07:8e:fe:29:e6:fb:35:4c:12:40:0c:c5:07:c6:81:cc:
0f:a2:3e:7c:d7:39:75:af:e1:88:23:f5:06:61:2f:18:65:b5:
7d:9f:89:16:68:0e:e3:3a:ad:31:a2:78:cf:a3:e0:10:00:d4:
95:79:ac:88:6f:17:ca:94:96:8d:c5:33:10:72:fd:98:6d:bc:
d9:45:4a:9a:3f:2c:d7:7e:89:d0:59:bb:0c:60:27:ca:8a:d7:
6f:fd:35:78:14:2b:8f:62:cf:ad:28:1b:59:79:d0:cb:66:9a:
06:98:3e:cc:ad:e7:05:6f:46:27:36:a4:cb:8d:73:3b:d9:88:
6b:0b:4f:1d:c6:ae:d6:e8:59:43:c9:f2:a5:b4:2c:fd:77:40:
c8:3c:2d:22:4f:18:cc:01:b3:ae:97:23:7c:db:a8:05:70:e6:
f1:82:8e:19:b3:47:01:9a:4d:48:c1:82:58:88:2a:e1:71:37:
16:ff:7e:dd:da:bf:27:ec:d8:19:a7:e3:d9:e2:c3:dc:33:c7:
34:1c:06:64:cb:bc:b3:d1:33:62:61:02:45:ad:fc:42:46:6c:
19:5c:78:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:53:46 2025 by rpki-client