Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0a3348-6336-4cea-aca1-d92447b1e0dd/1/qvxJkMNvUOJd3wNduqW5j_BA2AM.roa
File: qvxJkMNvUOJd3wNduqW5j_BA2AM.roa (raw, json)
Hash identifier: vEKq5GmSdn/dknQAoMDOzxihZ9i3oUrMQK5BvIY6NZk=
Subject key identifier: AA:FC:49:90:C3:6F:50:E2:5D:DF:03:5D:BA:A5:B9:8F:F0:40:D8:03
Certificate issuer: /CN=503b60a0eac18d53780b2eb6d0629c4a7c6bfb57
Certificate serial: 018964C05ED69CD93BE89F77AD50133059A3
Authority key identifier: 50:3B:60:A0:EA:C1:8D:53:78:0B:2E:B6:D0:62:9C:4A:7C:6B:FB:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDtgoOrBjVN4Cy620GKcSnxr-1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0a3348-6336-4cea-aca1-d92447b1e0dd/1/qvxJkMNvUOJd3wNduqW5j_BA2AM.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 178.23.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5e:d6:9c:d9:3b:e8:9f:77:ad:50:13:30:59:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503b60a0eac18d53780b2eb6d0629c4a7c6bfb57
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aafc4990c36f50e25ddf035dbaa5b98ff040d803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:92:36:18:3d:fc:6a:c7:3c:d8:a2:73:3d:
7c:6f:70:37:b6:3a:4e:ee:58:33:94:3b:37:6b:b5:
5b:35:3c:4f:bb:41:65:c9:ef:3d:d5:9d:ec:bf:cf:
e7:61:62:8f:c5:60:f8:46:ff:e0:2b:fd:4f:cb:c6:
86:84:c9:c0:78:c0:d8:a6:07:4e:03:69:15:e4:69:
5e:4e:2c:dc:5e:ea:2c:94:58:52:17:5c:ad:b6:fb:
c6:90:14:11:61:55:47:17:d5:72:dc:b7:72:96:a8:
5b:16:87:a6:b8:72:3f:d9:f5:58:b6:9e:d1:ba:58:
1c:2b:4e:1e:bb:21:4b:aa:a3:0c:04:ce:38:82:28:
95:c8:2a:88:77:bf:84:a4:42:79:66:77:c2:c0:72:
dc:42:7b:af:89:4a:14:bd:54:30:e7:cc:d7:50:8c:
6b:b1:36:81:be:38:30:15:28:30:e6:56:02:b8:ac:
c2:55:47:50:24:7a:c2:8e:89:a3:e9:42:98:2c:2f:
b7:7d:17:59:32:ba:c2:d3:9d:91:6e:ab:f7:35:53:
2c:04:98:14:37:4f:a7:78:4b:05:a7:cc:be:56:85:
0b:b5:7f:07:68:09:54:bb:ff:47:e5:65:84:fe:5f:
bb:7b:d2:f2:81:e3:a1:83:88:43:27:68:ef:56:98:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:49:90:C3:6F:50:E2:5D:DF:03:5D:BA:A5:B9:8F:F0:40:D8:03
X509v3 Authority Key Identifier:
keyid:50:3B:60:A0:EA:C1:8D:53:78:0B:2E:B6:D0:62:9C:4A:7C:6B:FB:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDtgoOrBjVN4Cy620GKcSnxr-1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0a3348-6336-4cea-aca1-d92447b1e0dd/1/qvxJkMNvUOJd3wNduqW5j_BA2AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0a3348-6336-4cea-aca1-d92447b1e0dd/1/UDtgoOrBjVN4Cy620GKcSnxr-1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.185.0/24
Signature Algorithm: sha256WithRSAEncryption
06:21:c0:ca:86:b2:d3:59:65:8f:2a:ee:c6:0f:1d:11:54:55:
53:dc:03:a2:5f:aa:55:6f:89:41:1b:eb:39:15:57:e9:b4:cb:
ed:bf:b4:74:fa:1e:5a:0b:06:2c:ec:9b:9c:dc:66:7b:a5:d6:
68:3a:54:af:52:a0:1b:b5:9d:ef:77:f4:ea:35:d5:98:c9:c4:
0a:2f:b3:b9:32:0d:2f:8a:40:a9:67:7e:3c:a5:40:93:bd:b9:
4c:7d:21:71:93:50:9f:a0:94:2e:ea:7c:ab:ed:d9:2e:33:ee:
fe:58:65:dd:4c:7c:a7:e6:9c:20:08:9f:8e:82:be:dc:14:38:
3c:65:a2:1c:16:e2:a3:5a:f7:56:39:7d:0d:15:01:68:6d:89:
1e:c5:b5:b9:ca:54:4e:13:11:5d:e3:76:fd:66:b0:41:4a:78:
42:34:78:4c:ad:01:7a:3c:00:9e:e7:8f:a8:d4:63:5d:ff:7f:
8d:53:a0:b1:64:4c:ef:96:f0:e6:66:bc:96:06:75:d0:b5:82:
a6:a7:9e:39:78:3b:cd:e6:99:27:b9:63:40:59:a8:08:88:ea:
30:c1:a3:f9:27:c7:5c:5b:48:e6:ca:8c:db:0b:2e:9a:b6:c5:
89:58:87:31:c4:8b:68:8a:a4:02:b5:5d:74:ab:54:ef:c5:04:
7a:60:1d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:17 2025 by rpki-client