Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/qk8EWpo7s7ShKgijVXt4ttNGR4I.roa
File: qk8EWpo7s7ShKgijVXt4ttNGR4I.roa (raw, json)
Hash identifier: 8cGK3f47iB4cKrsv92GbwEX10qTYXnb/+ZMn/gL9V/4=
Subject key identifier: AA:4F:04:5A:9A:3B:B3:B4:A1:2A:08:A3:55:7B:78:B6:D3:46:47:82
Certificate issuer: /CN=29b899d7dfa63fc8862ec239201eb1f6c08f07f4
Certificate serial: 018CC64ACFE87E8D3262D32811276E15DF24
Authority key identifier: 29:B8:99:D7:DF:A6:3F:C8:86:2E:C2:39:20:1E:B1:F6:C0:8F:07:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/qk8EWpo7s7ShKgijVXt4ttNGR4I.roa
Signing time: Mon 01 Jan 2024 18:30:40 +0000
ROA not before: Mon 01 Jan 2024 18:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206004
IP address blocks: 185.194.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:cf:e8:7e:8d:32:62:d3:28:11:27:6e:15:df:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b899d7dfa63fc8862ec239201eb1f6c08f07f4
Validity
Not Before: Jan 1 18:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa4f045a9a3bb3b4a12a08a3557b78b6d3464782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:63:b1:b7:55:60:87:32:c4:e7:38:ed:e1:
0b:ed:ea:1a:50:af:00:5c:2c:19:01:cd:82:8c:bf:
9e:7c:9c:92:bb:d9:38:fe:d3:d3:df:7f:27:ca:c5:
62:b5:c9:5a:55:ac:12:24:99:6d:a7:62:40:5e:63:
47:13:4e:21:a2:4e:cf:19:be:32:6d:42:4b:f5:ea:
c7:7a:4e:1b:ff:32:ea:11:c4:47:9b:eb:34:fd:6b:
2a:eb:99:19:27:11:d7:40:d1:67:d4:7e:22:e7:ae:
36:a8:90:01:41:bb:04:47:d4:66:28:30:30:6e:fc:
53:fc:11:f1:fd:e7:4e:ff:22:20:df:04:f2:6e:46:
6c:d6:57:f0:bc:67:8e:a0:0e:29:4f:d6:99:18:b3:
c7:a5:03:34:27:00:ef:a6:80:08:96:c0:b4:cc:ed:
58:f7:5d:a7:25:fb:5d:60:ae:c6:49:02:a2:2c:0d:
95:aa:84:e2:71:cd:1d:cf:99:9b:62:d4:9a:e4:03:
44:a8:b5:70:ce:75:8c:27:90:45:17:e1:40:d5:d7:
77:e0:2b:3e:36:20:4b:53:ff:a1:af:18:43:7e:a3:
66:ef:33:38:3e:4b:ec:12:89:7b:84:5d:61:e9:cd:
35:58:a6:36:6c:43:50:fd:f1:0e:61:d4:a7:81:5e:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:04:5A:9A:3B:B3:B4:A1:2A:08:A3:55:7B:78:B6:D3:46:47:82
X509v3 Authority Key Identifier:
keyid:29:B8:99:D7:DF:A6:3F:C8:86:2E:C2:39:20:1E:B1:F6:C0:8F:07:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/qk8EWpo7s7ShKgijVXt4ttNGR4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.200.0/23
Signature Algorithm: sha256WithRSAEncryption
06:40:43:f2:fc:06:f9:2b:b7:27:d3:dc:b3:ec:b6:26:65:94:
d3:b5:73:03:9a:25:2c:6b:a9:f3:56:f7:28:8c:1a:0d:0f:74:
24:cc:53:7d:d8:a4:fb:22:62:a8:bc:2e:b5:50:a9:00:f6:8e:
6e:a8:65:72:67:ad:74:0e:ab:84:54:43:ff:34:6a:12:d6:fe:
bf:d6:ba:a1:c9:66:e9:0e:ea:be:5d:44:60:ac:fe:c7:5b:a7:
5d:d6:a0:80:e5:2a:d0:4c:6a:a8:c0:fa:a6:0a:e4:f0:61:5c:
09:79:7a:92:87:7a:2c:ab:a7:6c:29:91:e2:f0:c4:7c:05:71:
dd:d0:af:5e:2d:3e:b9:29:50:10:46:39:47:cd:be:57:94:ee:
39:16:e0:83:44:b5:9c:a5:3b:2b:bc:c6:5f:d3:1a:19:92:8c:
f3:cc:fe:d4:5c:28:f6:54:4c:4e:7c:d6:b0:4d:60:16:ab:02:
f9:50:35:74:a3:38:55:27:42:c3:45:57:ec:07:68:2b:bc:a9:
54:c5:fd:fc:e5:23:c2:88:8e:f6:dd:ea:97:23:6b:f9:cf:5c:
7c:3f:01:84:a7:69:1b:31:07:ed:75:6d:68:be:76:70:ec:51:
c2:7d:bf:8f:73:3c:2d:47:07:54:a8:f3:cb:a6:98:20:58:dd:
f9:74:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:50:45 2025 by rpki-client