Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/qPU2_LO_IOLwIw_5UdC9HILGfrU.roa
File: qPU2_LO_IOLwIw_5UdC9HILGfrU.roa (raw, json)
Hash identifier: zovHlBAPS+CTTK/Pgho2T3I/C6ghppduwnAgw0j/qyQ=
Subject key identifier: A8:F5:36:FC:B3:BF:20:E2:F0:23:0F:F9:51:D0:BD:1C:82:C6:7E:B5
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D8779FD43F02419334E6B8BDEBA8
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/qPU2_LO_IOLwIw_5UdC9HILGfrU.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44277
IP address blocks: 195.228.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d8:77:9f:d4:3f:02:41:93:34:e6:b8:bd:eb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8f536fcb3bf20e2f0230ff951d0bd1c82c67eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f5:d9:1d:27:8a:2c:0f:40:03:26:d7:06:57:
56:b6:ab:0b:88:b1:52:70:9b:81:51:91:4e:78:fe:
fb:b0:04:4a:ed:45:13:9d:aa:96:71:c8:88:2e:88:
e7:62:0b:f0:a4:17:e8:75:c0:8a:52:0c:41:1e:5c:
35:0d:2a:d8:ec:6a:4b:29:0d:0e:9f:5d:cc:a3:27:
09:bb:26:d3:5d:d8:c2:97:a9:7d:13:17:a1:68:73:
50:25:59:a3:91:13:37:5c:be:1e:08:f1:44:19:1e:
5f:c1:e6:73:83:15:36:b5:c4:a8:2c:88:9e:1f:d0:
83:cb:15:87:c8:d6:12:52:72:12:49:f6:4e:1d:ea:
3a:25:20:95:47:2c:24:3a:d0:9b:08:8e:71:c5:42:
6c:70:b9:24:cc:7c:bc:7e:95:e5:0d:40:bd:96:fb:
c2:3d:6b:7f:e6:6e:59:9f:5a:c9:62:fd:7b:fe:87:
e8:7b:f1:2d:f3:7f:68:71:77:c8:e6:36:e0:72:d0:
f9:c8:75:2d:14:f7:bc:19:a5:b8:a5:24:42:f5:37:
78:26:39:98:4e:d6:52:79:8d:67:c4:b8:13:c6:7c:
04:3c:10:7a:dd:05:f5:98:e7:e4:c9:9d:64:59:c4:
8a:58:2a:ab:f7:f7:30:83:bd:8b:f1:19:0f:7e:1c:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F5:36:FC:B3:BF:20:E2:F0:23:0F:F9:51:D0:BD:1C:82:C6:7E:B5
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/qPU2_LO_IOLwIw_5UdC9HILGfrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.228.59.0/24
Signature Algorithm: sha256WithRSAEncryption
39:64:c7:9b:a0:b8:d4:61:58:0b:45:f6:a4:9b:02:84:55:7d:
a1:ae:ed:e9:0f:10:a8:ba:ff:e0:5b:a9:c4:96:65:b9:1c:7c:
4b:4e:5c:72:0f:7e:93:62:a3:79:0d:33:d1:26:e1:92:32:1c:
78:0a:48:05:03:c7:f1:ce:e0:63:f3:3b:9e:5d:56:9a:7b:12:
d8:08:b8:38:0f:a0:82:6c:71:67:a5:ae:6e:d8:4d:89:8e:36:
67:03:25:ef:26:09:85:18:b0:00:07:0f:bd:04:2a:61:12:03:
82:4b:69:81:b4:eb:10:42:87:4d:6b:28:34:fb:12:23:9e:03:
d5:57:62:07:84:c8:f2:0e:44:27:7e:00:45:57:47:9c:ac:e0:
0f:5d:1e:a2:7d:ff:2b:3f:9b:aa:d2:82:d8:b9:76:ab:96:6a:
e7:20:2e:56:13:97:72:e9:f5:78:f2:a9:29:24:72:f7:de:94:
a0:a8:57:21:a3:2e:20:17:23:0f:df:53:c0:78:22:98:b7:1f:
bd:36:46:41:da:61:5c:d5:13:7e:d6:6b:d6:99:9a:e8:b9:23:
26:84:b4:25:2e:3d:8e:cb:23:ee:01:db:33:bb:c4:a5:a2:18:
cc:61:41:9e:7b:d1:a7:5b:20:60:6d:1e:74:ab:96:d2:ff:07:
e6:44:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:41 2025 by rpki-client