Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/QgAQA7LO7HCIX5xtXh78BKGz93U.roa
File: QgAQA7LO7HCIX5xtXh78BKGz93U.roa (raw, json)
Hash identifier: Er+0rMl+DUWgnUrnrVZDEcXkdxYMYRnD87I+qpq16kI=
Subject key identifier: 42:00:10:03:B2:CE:EC:70:88:5F:9C:6D:5E:1E:FC:04:A1:B3:F7:75
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 0917FF95
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/QgAQA7LO7HCIX5xtXh78BKGz93U.roa
Signing time: Sat 01 Jan 2022 13:01:09 +0000
ROA not before: Sat 01 Jan 2022 13:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 92.249.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152567701 (0x917ff95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Jan 1 13:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42001003b2ceec70885f9c6d5e1efc04a1b3f775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:60:63:9d:73:7f:cb:27:bc:a8:9f:8b:65:
ab:ac:c0:1b:10:3d:35:9c:a7:40:5b:a5:5a:54:d3:
bc:5f:e5:ee:96:44:48:2d:74:03:e9:5e:5a:1b:cb:
4a:ed:a5:26:35:b8:5b:3f:70:d0:67:c7:e4:e1:66:
9f:45:92:09:00:57:fe:04:b3:32:2e:84:d1:53:94:
15:53:a8:ea:4e:44:29:5a:f1:39:f8:e4:42:a1:68:
e7:30:15:59:81:a5:44:73:13:ef:ae:c7:4b:e4:b9:
eb:a6:e8:59:fe:a8:08:b0:8b:37:c1:29:d0:9d:49:
33:64:80:12:35:03:4c:9a:76:23:b9:2f:99:7f:a4:
ba:c1:e6:70:66:a4:d4:54:a1:d9:df:a6:c9:91:72:
e4:5f:ea:c2:bb:d1:43:c7:76:54:21:91:ef:e0:c0:
ed:fa:c5:59:8c:1b:0d:d3:72:03:f9:cc:5c:a7:bb:
4d:5c:8a:55:f9:9c:1d:af:d1:e2:ce:4b:92:1c:f9:
73:b4:b1:57:1f:2a:e7:e8:f5:67:d0:e3:c9:8d:ae:
ac:4d:d3:26:a7:66:0f:2a:cf:55:26:14:fa:c6:a5:
fe:76:b8:79:0d:c3:11:ad:11:8e:c9:fa:24:22:37:
66:06:d1:f8:41:a8:1b:4e:7a:21:72:bf:bb:4a:31:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:00:10:03:B2:CE:EC:70:88:5F:9C:6D:5E:1E:FC:04:A1:B3:F7:75
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/QgAQA7LO7HCIX5xtXh78BKGz93U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f0:0b:fd:e2:10:d5:9b:1b:be:87:35:df:7e:b8:fe:b5:92:
11:d3:dd:e7:fc:62:7a:82:6d:bb:bc:3b:75:a8:13:0c:33:d1:
82:51:06:92:9d:6a:21:59:dc:09:85:f0:af:40:46:cd:44:ef:
25:b4:f1:d2:8d:74:38:c6:f6:e8:aa:b6:63:ae:ac:16:8d:db:
81:0f:af:85:8f:d5:21:76:61:71:5b:f8:e7:d9:25:b5:8e:d8:
d3:0b:99:89:28:ba:53:fb:4e:86:64:fc:31:b8:dc:e5:19:d7:
25:10:76:8b:5b:4a:49:79:bf:d7:6b:fa:21:95:b5:71:12:51:
35:6f:71:41:c3:79:4a:b5:78:d8:a8:94:1c:f2:c2:f4:4d:8f:
35:00:0f:39:c4:3a:7c:30:95:7e:24:8a:4a:1a:75:c1:a1:40:
78:be:de:65:e2:da:c8:f7:ef:5b:56:8c:e6:07:ef:e8:09:a2:
11:a9:3f:10:ea:ef:eb:67:9f:5e:50:f9:9e:e0:d3:45:16:20:
cd:a3:73:6a:c6:a9:6d:66:67:4d:5e:6d:e1:c1:35:58:db:b1:
0e:78:5c:58:85:e1:c2:3d:fa:c2:4a:35:f2:37:ef:45:61:db:
52:c2:8f:a2:19:63:41:c2:bd:20:a9:5f:1a:6d:d1:02:d0:88:
2b:a5:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:03 2025 by rpki-client