Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/qjxC3CMWMpiM1TpibiIWl8s1Se0.roa
File: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (raw, json)
Hash identifier: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=
Subject key identifier: AA:3C:42:DC:23:16:32:98:8C:D5:3A:62:6E:22:16:97:CB:35:49:ED
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA41B75E4DFF7E3E98DDC54562E833
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/qjxC3CMWMpiM1TpibiIWl8s1Se0.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62874
IP address blocks: 204.225.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:b7:5e:4d:ff:7e:3e:98:dd:c5:45:62:e8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa3c42dc231632988cd53a626e221697cb3549ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:87:41:2b:cd:be:b0:51:b7:35:f5:42:67:
59:f8:f6:10:99:f2:66:55:5b:09:ba:ff:29:9c:f9:
10:f4:0c:41:27:87:d2:08:b7:03:82:31:2a:0a:d4:
b8:1c:db:0a:7e:22:ca:da:0c:65:d0:87:b9:a9:34:
64:25:a9:98:e4:cf:e1:d9:a7:cd:00:c5:89:62:7a:
0f:4d:22:05:4a:1d:28:ee:f3:55:82:91:8e:1b:6f:
46:cf:a6:30:60:d6:3d:5a:ca:0a:34:c3:7a:59:d6:
78:fc:62:02:b1:e9:fe:f1:dc:3e:c2:21:65:fd:f0:
84:38:8a:d7:41:13:1d:ec:19:87:2c:3c:16:8f:37:
92:4d:81:32:1b:aa:f8:c5:00:cf:08:43:a0:25:6c:
10:ac:58:af:36:62:85:d6:11:bf:b9:89:a8:a5:74:
a4:6e:7c:85:72:16:98:8f:07:5f:63:50:43:b5:be:
aa:a6:c6:8c:f1:e9:82:a8:b9:56:92:f7:52:ac:00:
de:55:18:1c:0b:c8:fe:17:fd:a5:00:3e:cf:05:9f:
e2:be:83:6e:e5:de:0f:2c:8e:6a:86:66:3e:cc:f2:
f9:db:cf:a6:45:76:7f:84:f8:ee:1d:fb:53:3b:f2:
2b:20:57:2b:27:b2:69:1e:ce:9f:f6:02:dc:f5:77:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3C:42:DC:23:16:32:98:8C:D5:3A:62:6E:22:16:97:CB:35:49:ED
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/qjxC3CMWMpiM1TpibiIWl8s1Se0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.225.218.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:3f:fb:ef:90:a2:0a:b8:18:36:46:97:33:37:cd:79:21:69:
85:46:0a:59:25:dd:8a:f1:bb:4b:23:1c:bb:da:1e:e8:87:09:
f7:2a:a6:e9:d8:46:e1:27:05:78:de:6f:bf:4e:c1:af:1b:f3:
6e:0e:8b:61:e6:43:7a:4b:5a:55:3d:6c:49:bf:10:87:f6:51:
91:c2:ea:7d:b2:43:34:72:30:78:60:e3:09:7d:7c:84:6a:f2:
2b:ae:9f:25:a0:82:ce:36:79:d8:c3:85:55:a2:99:a7:5c:87:
6a:7d:28:e6:e5:61:d3:fd:69:7f:a5:60:59:f0:9e:c6:10:a4:
f7:7d:8e:7e:8b:db:da:a4:c6:dc:8d:7d:32:93:3b:10:61:a6:
cf:ea:cf:cb:d5:c5:f0:d6:b4:b4:61:d2:ff:d7:09:74:46:da:
ba:8a:45:46:d8:bf:a8:76:d7:25:db:7f:b9:13:26:be:3e:61:
4a:50:37:9f:f5:25:37:6b:2f:89:31:a0:16:13:b0:72:d0:29:
15:29:1f:9d:9e:58:28:3e:fa:da:ac:63:42:ae:d8:68:5a:00:
ce:85:18:d1:1f:57:cf:7a:90:7d:de:be:55:d7:3a:b2:6d:00:
2b:ef:3a:28:cf:bb:95:a5:6e:55:1a:b5:4a:91:7c:46:a7:af:
91:f9:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:42:40 2025 by rpki-client