Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/qdvDPZ5zorFwuruEuwxHzgKio3k.roa
File: qdvDPZ5zorFwuruEuwxHzgKio3k.roa (raw, json)
Hash identifier: jduT4XmTOMSoltjvvpDKUwpJiPvLcav9IRQDDWe0XYI=
Subject key identifier: A9:DB:C3:3D:9E:73:A2:B1:70:BA:BB:84:BB:0C:47:CE:02:A2:A3:79
Certificate issuer: /CN=c4232bd5238dc4010d1c52929ddea4f23c042574
Certificate serial: 01856EB8FC339402FAEE1DCEBB9A482420D7
Authority key identifier: C4:23:2B:D5:23:8D:C4:01:0D:1C:52:92:9D:DE:A4:F2:3C:04:25:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCMr1SONxAENHFKSnd6k8jwEJXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/qdvDPZ5zorFwuruEuwxHzgKio3k.roa
Signing time: Sun 01 Jan 2023 19:04:55 +0000
ROA not before: Sun 01 Jan 2023 19:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.254.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:fc:33:94:02:fa:ee:1d:ce:bb:9a:48:24:20:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4232bd5238dc4010d1c52929ddea4f23c042574
Validity
Not Before: Jan 1 19:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9dbc33d9e73a2b170babb84bb0c47ce02a2a379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:f1:54:32:b0:03:69:fb:a5:c2:47:e8:7e:
e5:54:14:af:03:2f:72:bf:9a:3e:28:31:4f:ad:43:
55:09:80:b6:b0:ac:d9:7a:56:f5:e3:21:b8:b3:9c:
22:89:45:c9:c2:37:42:f4:96:b6:3d:9c:83:a5:e3:
4d:2b:24:c1:9d:7d:de:15:50:f3:06:5b:b5:a3:c9:
23:56:87:6a:4f:f9:9e:14:ef:83:2b:b0:09:7a:2e:
7d:b8:18:74:15:ef:f2:e1:35:91:5f:81:a0:80:5b:
a5:52:16:a9:5f:fb:f2:0b:82:81:85:96:75:b6:e3:
ad:c5:c1:9c:81:dd:27:d8:75:20:cc:74:dd:e7:c3:
a1:1d:35:e5:24:d7:2c:16:86:1e:5b:05:a0:bf:5b:
fd:01:9a:40:d1:12:e8:9f:8d:8d:30:0e:05:87:37:
fd:c5:03:9b:2b:36:35:61:55:a5:c7:45:27:12:b5:
37:e4:85:44:20:2f:31:f3:f6:64:96:66:b8:b9:e8:
f9:f0:89:be:69:eb:9b:78:82:14:e6:dd:85:c4:4e:
b0:5c:10:87:4a:8a:3f:b8:ee:ab:cb:96:ca:42:24:
1e:4f:ce:6d:62:a3:a7:b5:9f:55:81:24:55:4d:a8:
68:e6:7c:db:7f:0c:10:e6:39:4e:13:f7:96:29:79:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:C3:3D:9E:73:A2:B1:70:BA:BB:84:BB:0C:47:CE:02:A2:A3:79
X509v3 Authority Key Identifier:
keyid:C4:23:2B:D5:23:8D:C4:01:0D:1C:52:92:9D:DE:A4:F2:3C:04:25:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCMr1SONxAENHFKSnd6k8jwEJXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/qdvDPZ5zorFwuruEuwxHzgKio3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c42ae7-5f64-4039-a051-403b857bf8b7/1/xCMr1SONxAENHFKSnd6k8jwEJXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.108.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d2:40:ac:1b:fd:0f:f5:8b:de:71:b0:21:a9:99:c2:03:96:
15:3b:43:be:c9:f4:f4:bd:55:ec:18:5b:1c:37:ed:c8:ee:bd:
00:cb:60:74:12:27:06:52:a9:87:02:61:1d:ad:15:6a:a1:2e:
5e:52:e4:fe:4b:21:86:4c:23:1d:9a:27:93:7e:77:87:7f:22:
41:b5:bb:69:08:75:86:88:22:76:b4:3a:6c:28:4e:b7:fa:bb:
c5:99:62:3c:eb:14:bb:1c:16:6f:c3:ef:87:72:4c:f3:57:3b:
8d:be:db:66:25:46:5d:61:24:5e:28:e1:8b:71:c4:00:01:1e:
51:bd:36:a1:da:34:d1:8c:eb:4a:5b:e4:80:34:e7:6f:62:23:
68:a0:5f:50:3c:35:17:bc:bc:af:71:00:ae:b9:3d:d5:cd:96:
7c:ac:91:50:eb:32:f4:65:c1:9f:ab:4d:c0:16:de:62:3f:64:
6c:ad:f2:10:eb:b5:23:97:c1:f0:9d:54:4a:76:6c:f4:b2:66:
75:84:d1:3e:84:f7:aa:9d:4e:0d:1a:91:df:a9:8a:50:2d:e9:
78:b9:80:cb:37:9e:ad:09:62:4a:ae:bb:53:84:ee:ee:c3:f7:
53:ca:f9:28:09:9e:5e:98:c8:e3:5c:df:1f:c0:5e:19:e9:ab:
db:32:ee:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:07:54 2025 by rpki-client