
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qW5ruWmELXcPHa8kFDUBFkPKez4.roa
File: qW5ruWmELXcPHa8kFDUBFkPKez4.roa (raw, json)
Hash identifier: uoLHYHxLsKBacLBKR/F1NYX0UeOaZwmzWyXMoDWlcOg=
Subject key identifier: A9:6E:6B:B9:69:84:2D:77:0F:1D:AF:24:14:35:01:16:43:CA:7B:3E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143E101C1F385A6470EE31D88E8788D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qW5ruWmELXcPHa8kFDUBFkPKez4.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42927
IP address blocks: 213.210.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e1:01:c1:f3:85:a6:47:0e:e3:1d:88:e8:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a96e6bb969842d770f1daf241435011643ca7b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:72:86:bd:bb:af:99:81:f2:80:2b:bd:51:
15:7c:fb:3d:26:c0:0e:2b:3a:69:b0:82:4d:5a:78:
6b:17:e4:f4:c2:5a:32:23:9b:fc:68:11:6e:cb:9f:
43:03:20:53:95:b3:47:5d:cf:ea:5f:7a:d5:8e:0e:
93:96:c8:cc:5c:b1:f0:f7:88:55:0b:1c:6a:fa:65:
5e:c9:84:af:3b:83:4e:ea:5e:d2:f4:21:ca:04:ca:
92:b4:8d:77:42:ef:7a:76:c6:f6:8e:33:1a:91:57:
40:41:cd:e1:6e:1c:61:04:2c:78:6d:8e:f5:94:d2:
7d:2c:41:dc:44:ff:e7:32:bd:8b:63:2c:72:93:36:
45:b8:b9:62:a0:84:cd:9d:9c:6e:01:2f:a7:e5:32:
df:95:35:9c:2a:be:67:d0:12:5c:63:ac:9d:32:25:
93:86:81:ab:0f:6e:08:01:a6:77:5e:a8:6b:b2:bb:
36:1c:01:8e:7c:82:44:ae:b4:f2:0f:15:3f:86:b3:
fc:fe:19:ce:d5:d5:4c:ac:4c:7e:d9:fe:68:26:13:
24:2f:90:f1:bd:58:80:41:fe:0c:63:1d:4b:ff:07:
af:77:d3:e3:39:51:fe:cd:8e:10:75:4e:a9:88:08:
39:a2:d6:ba:12:ee:2d:9f:61:e4:97:dd:e8:d2:dc:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:6B:B9:69:84:2D:77:0F:1D:AF:24:14:35:01:16:43:CA:7B:3E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qW5ruWmELXcPHa8kFDUBFkPKez4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.35.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f8:87:68:d9:ea:93:18:82:9a:9d:97:91:68:70:71:3f:14:
8c:79:ae:59:97:d6:1b:53:8a:39:9b:4c:b0:33:a7:3f:7b:63:
1a:90:46:60:b4:74:a1:a5:ac:34:53:3b:a5:4c:43:57:c4:77:
3f:79:0a:ea:1c:e1:69:64:bc:3d:2a:84:ef:b6:12:8c:7a:b7:
36:83:88:a6:14:8e:cb:3a:92:2d:ef:98:ab:5f:2c:ee:8c:b6:
e0:96:5b:c1:9b:b1:98:e9:59:d2:e8:dd:44:ad:1e:69:e4:b9:
82:8e:f4:97:ce:b6:30:30:f6:b0:75:a8:11:e0:9f:d1:83:fe:
de:f6:79:71:3e:ed:b4:df:81:0d:84:ad:a6:07:ed:3b:cd:e0:
65:cf:9c:42:d7:f2:2d:c8:d6:0b:cc:98:2c:53:3a:40:ca:a6:
b0:f2:1d:57:94:6e:13:6c:94:e3:e5:a7:f5:aa:71:e8:e0:83:
cb:1c:1d:a3:3d:46:04:02:ad:9b:0c:4d:b1:10:bb:d0:3e:25:
dd:b9:6e:de:17:fb:1a:9b:ac:c2:b0:d0:fd:99:c8:91:b6:a9:
d4:ac:b4:b7:37:bd:88:82:ee:68:b9:e9:aa:1c:83:78:21:dc:
37:36:92:e9:88:f4:b9:b6:1d:c4:4d:88:87:64:eb:d6:23:6f:
e2:29:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 15:16:39 2025 by rpki-client