Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/qBQ4PpPE5P8XdhcUoWCDuAXt6I8.roa
File: qBQ4PpPE5P8XdhcUoWCDuAXt6I8.roa (raw, json)
Hash identifier: HQlkXWYR+3G+Z3bxPauT7uQF4cyDx7Q1qlEbJ26vhlk=
Subject key identifier: A8:14:38:3E:93:C4:E4:FF:17:76:17:14:A1:60:83:B8:05:ED:E8:8F
Certificate issuer: /CN=843d8aa1269d1a3f3321335860c67c7e08677dc5
Certificate serial: 0190FA28EE3D9AA5AB8E96C656442B5E6468
Authority key identifier: 84:3D:8A:A1:26:9D:1A:3F:33:21:33:58:60:C6:7C:7E:08:67:7D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD2KoSadGj8zITNYYMZ8fghnfcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/qBQ4PpPE5P8XdhcUoWCDuAXt6I8.roa
Signing time: Sun 28 Jul 2024 16:25:04 +0000
ROA not before: Sun 28 Jul 2024 16:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 185.173.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:28:ee:3d:9a:a5:ab:8e:96:c6:56:44:2b:5e:64:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d8aa1269d1a3f3321335860c67c7e08677dc5
Validity
Not Before: Jul 28 16:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a814383e93c4e4ff17761714a16083b805ede88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:ea:41:b5:7a:d4:71:63:2c:7c:0f:3d:23:
a4:88:88:77:83:5e:ef:b2:f8:eb:f6:cb:d8:b4:e4:
80:c9:9e:9b:fa:cb:6d:7b:94:b8:21:29:99:d4:35:
e7:db:72:0d:e7:0f:d9:cc:c9:59:87:83:1d:1e:cf:
d8:96:d4:7e:f4:6a:a9:da:c3:b6:18:36:89:03:62:
a0:0c:62:8f:fb:40:67:11:0b:30:bc:e0:c7:f0:b6:
1f:01:32:2c:36:6f:7d:50:0e:23:86:fe:44:cf:b6:
0f:6b:5c:8e:6b:4a:db:f3:73:d5:9a:88:54:e5:0a:
f5:10:bd:c1:0f:59:29:cd:bc:f9:77:20:e5:7b:ca:
1d:3c:7b:60:75:7c:ab:ab:c7:df:22:38:a0:23:72:
00:15:0a:f0:f0:22:b9:6c:69:25:04:cf:01:27:0f:
ab:5a:c5:e2:ef:a4:ce:e1:aa:0a:86:77:18:58:c6:
31:0d:3c:f4:80:9f:81:8b:14:bf:23:ca:82:69:c1:
4b:ea:a6:c6:d0:0d:94:fe:e3:dc:6a:c7:38:a3:76:
bf:3d:86:d3:19:41:7e:1f:f6:e3:56:ea:85:32:00:
b5:2f:b6:db:e2:4d:12:c6:76:83:73:29:bb:dd:87:
f8:cc:27:af:71:3a:79:78:14:da:24:1f:16:ba:88:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:14:38:3E:93:C4:E4:FF:17:76:17:14:A1:60:83:B8:05:ED:E8:8F
X509v3 Authority Key Identifier:
keyid:84:3D:8A:A1:26:9D:1A:3F:33:21:33:58:60:C6:7C:7E:08:67:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD2KoSadGj8zITNYYMZ8fghnfcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/qBQ4PpPE5P8XdhcUoWCDuAXt6I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/hD2KoSadGj8zITNYYMZ8fghnfcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:e0:99:d8:51:f1:22:98:ab:30:57:d7:51:39:56:b3:18:43:
08:b1:b7:af:aa:9f:fd:f8:91:1b:f2:5d:0b:67:fa:0a:87:b4:
c1:fa:56:83:c3:8f:eb:46:11:8c:c7:91:d4:fa:ed:cf:97:46:
6f:51:72:9b:54:60:18:e4:8e:fa:42:2f:7b:cc:75:13:1e:53:
a3:b6:9d:2c:05:20:ed:e1:f8:2b:b1:2b:87:c2:23:d8:de:25:
ce:8e:1f:36:3a:74:30:60:34:49:c0:e2:80:57:ee:a7:dd:9b:
b9:0e:c8:6f:e0:9e:e4:45:39:57:b4:62:71:ff:d3:39:fc:14:
ec:9f:e9:41:94:79:40:bc:ab:88:db:bb:18:a1:34:68:69:07:
c2:1f:7e:07:51:8f:5d:3c:11:ed:65:73:2f:5a:31:72:e5:bb:
ac:c9:e0:d5:f3:f4:a8:37:65:a0:4f:33:75:51:c4:58:d6:a7:
7d:c7:9b:f5:1a:bd:0d:53:39:8b:15:92:66:09:61:1b:ea:4e:
45:75:89:fa:cb:b0:98:3f:42:09:75:3a:fc:a8:14:7a:fa:d0:
5c:16:7b:19:f9:47:35:74:94:a4:05:b9:f2:f5:96:5a:66:4a:
47:de:98:91:91:44:83:20:a3:0e:31:47:df:5f:28:ea:76:58:
2b:41:0e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:57 2025 by rpki-client