Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/QtxEQGYqA7zt6kbo76L4Elg-1BE.roa
File: QtxEQGYqA7zt6kbo76L4Elg-1BE.roa (raw, json)
Hash identifier: BDm7256ve39MMR4Mv9LtNp15OMRgK9Ec6rAqIR1Wgck=
Subject key identifier: 42:DC:44:40:66:2A:03:BC:ED:EA:46:E8:EF:A2:F8:12:58:3E:D4:11
Certificate issuer: /CN=47399ddb8c70fe334fe9c287b692694628518c69
Certificate serial: 019421B1D3CC793CE2E7DD4DAAB6B49B46AC
Authority key identifier: 47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/QtxEQGYqA7zt6kbo76L4Elg-1BE.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59623
IP address blocks: 195.214.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d3:cc:79:3c:e2:e7:dd:4d:aa:b6:b4:9b:46:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47399ddb8c70fe334fe9c287b692694628518c69
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42dc4440662a03bcedea46e8efa2f812583ed411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:03:0a:57:90:35:24:fa:39:fb:fc:32:25:e2:
12:06:16:52:f9:3c:d7:f2:45:22:d0:9b:35:9a:a8:
d9:e3:de:0d:20:27:78:a2:31:43:67:02:46:e8:dd:
d7:74:3d:01:23:ae:72:ea:9c:3d:7c:f9:f6:72:93:
70:63:d4:71:23:6c:e3:62:d9:bc:64:c0:9c:20:a0:
b3:7f:8c:ed:5c:4c:dc:cb:38:55:b2:55:52:59:ec:
80:e6:2d:f6:4f:c9:bb:6f:f5:28:a9:20:1b:07:22:
a0:ef:1c:ac:96:76:94:f0:c8:b2:0c:09:be:85:b9:
0e:68:43:64:72:c7:e9:66:d1:a7:78:82:92:f5:5c:
2c:cc:6a:92:60:29:6f:98:90:d6:30:9f:99:83:eb:
ad:db:5f:f8:a8:30:a5:e4:91:79:e9:16:e2:f9:bd:
13:5e:5f:5c:c1:b5:c3:e0:d4:70:f9:71:c9:ff:64:
e8:2f:b0:4d:86:f8:0e:1b:a0:29:31:8c:1f:a3:7a:
67:bd:ee:36:a1:fa:0b:6f:09:ed:31:91:f6:18:6f:
ee:f0:73:2b:f6:d6:a4:6d:13:c7:31:c7:22:a8:bf:
c7:70:cd:4c:e5:25:2e:23:50:ec:66:fe:aa:9e:e2:
c7:01:2a:f5:a6:d1:2a:25:29:aa:a2:39:6d:dc:06:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DC:44:40:66:2A:03:BC:ED:EA:46:E8:EF:A2:F8:12:58:3E:D4:11
X509v3 Authority Key Identifier:
keyid:47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/QtxEQGYqA7zt6kbo76L4Elg-1BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.235.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2e:2f:50:df:9f:4a:22:76:f8:7a:b4:1f:ff:53:02:28:15:
0a:bf:3a:3c:60:d3:2f:1e:28:92:87:58:ea:33:03:3e:c5:bc:
92:17:b3:2e:ac:f8:91:a1:fa:15:2d:4f:3c:71:be:41:b7:46:
5b:0e:00:87:93:2b:e9:3c:27:8e:a3:a1:59:95:12:e9:76:c5:
29:84:f3:73:c0:19:1b:ed:7b:18:e5:f7:ac:f3:23:24:0c:6a:
7b:bc:e1:cd:e9:97:98:56:a5:c3:fb:7e:3e:49:e1:6b:26:5e:
52:11:87:51:52:4f:26:be:e6:41:94:bb:ba:59:56:00:d1:f9:
35:24:ea:ff:a2:20:23:44:f5:04:bb:b2:f3:39:9d:30:74:a7:
e6:60:04:ea:7a:4e:3c:06:77:e2:5d:ff:77:f9:27:ec:c3:02:
64:9d:72:ef:d5:c5:d9:89:64:4d:c9:d8:ec:32:c2:72:56:2a:
53:2b:d5:e9:6e:41:ec:9f:94:63:8e:75:e6:75:f2:6f:01:42:
5e:3e:24:b7:79:15:ad:09:36:e9:fe:22:ce:ee:7e:36:5f:a6:
7b:cd:d9:be:64:49:c4:1f:6c:53:0c:6b:c0:29:0e:de:08:b1:
19:f4:63:1d:71:17:0d:02:2d:e8:a0:ce:87:01:a8:d6:fa:e5:
eb:30:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:42 2025 by rpki-client