Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/QCt4xEJyOWiZ5_c8dsZunAVVGQc.roa
File: QCt4xEJyOWiZ5_c8dsZunAVVGQc.roa (raw, json)
Hash identifier: o6B3K4qqAMiBZLr0d/hEDZCsI3Fj+dNsf7eNQpY4AgQ=
Subject key identifier: 40:2B:78:C4:42:72:39:68:99:E7:F7:3C:76:C6:6E:9C:05:55:19:07
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 33A65F98
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/QCt4xEJyOWiZ5_c8dsZunAVVGQc.roa
Signing time: Sat 01 Jan 2022 15:03:55 +0000
ROA not before: Sat 01 Jan 2022 15:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.106.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866541464 (0x33a65f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 1 15:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=402b78c44272396899e7f73c76c66e9c05551907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:eb:f8:52:f1:e3:7a:0d:ba:35:cb:b0:c5:
55:63:40:ca:11:52:fd:62:51:64:b4:f1:51:b6:fd:
ed:ba:78:43:28:54:5a:db:25:5e:d5:0f:d4:d7:7e:
46:0b:21:f0:0c:ce:6b:4f:01:3f:2e:5f:87:3d:40:
57:45:29:df:2e:ce:ff:f1:f8:b7:eb:23:eb:d7:4e:
08:bd:62:f5:76:9a:f2:9e:29:61:16:c4:1a:2b:a1:
13:cb:0e:8b:23:47:9b:6d:cf:6c:2b:5b:38:87:a6:
f7:8d:18:49:4b:cc:62:d5:c7:3c:b6:54:d9:66:dc:
a9:79:78:2c:83:00:1c:44:6f:52:fb:28:bf:01:b4:
14:ec:58:5e:66:80:b8:80:56:03:f0:2b:12:82:34:
23:63:73:a1:b7:20:26:95:de:b3:68:f6:f7:17:15:
90:e9:29:ef:64:99:18:d0:cd:cf:0c:80:1b:5d:82:
9e:74:be:e1:3d:b0:69:39:46:b1:28:7a:c4:9e:d7:
9b:62:f2:54:74:53:18:fe:6e:0b:e2:8e:9f:5b:93:
bb:db:9f:cc:23:0b:f1:79:ee:80:f9:90:cc:12:b2:
60:4a:1c:49:2f:3e:86:af:75:49:62:95:9b:7d:87:
33:b3:60:a0:6b:70:5e:51:3c:e4:f8:8b:56:05:03:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:78:C4:42:72:39:68:99:E7:F7:3C:76:C6:6E:9C:05:55:19:07
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/QCt4xEJyOWiZ5_c8dsZunAVVGQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:74:fe:08:14:cb:6c:ae:24:5a:fb:4f:e9:b3:ea:e6:45:d1:
a0:59:61:1b:d5:de:a1:cd:0e:3b:bb:0a:c3:36:b5:f5:19:de:
be:fa:0e:29:46:a2:08:57:d8:f9:bb:66:50:b2:25:78:a9:90:
d2:5b:53:a5:5d:12:26:d7:5e:ba:fc:af:5d:3a:57:61:8e:3a:
e9:b1:d3:24:59:50:43:1b:73:77:58:e1:e5:70:81:2f:10:50:
fc:ad:cd:ce:8a:21:c4:5d:d2:be:56:21:d4:2c:9e:8d:06:c5:
b8:8c:1d:0c:07:b7:53:ea:e1:14:cd:97:06:13:2a:47:90:c0:
4c:4c:a0:70:a6:50:74:30:f5:bb:e5:aa:d8:8c:45:12:2b:60:
b7:47:33:d3:91:e1:93:2a:e3:a5:ed:d2:5d:90:20:7e:b8:26:
ff:b5:46:89:5d:84:05:50:28:f4:a3:70:74:87:ef:f2:5f:94:
3c:54:0c:40:42:ab:56:21:85:90:30:78:a1:e7:4c:b9:16:77:
4f:4c:67:88:95:a4:2e:cf:fc:fb:a1:b0:a6:ea:59:f9:51:1c:
67:d3:5c:10:9f:04:aa:b4:38:73:42:de:11:a6:56:a3:44:95:
44:5d:29:2f:dd:cd:da:2f:99:c9:92:c6:df:41:7c:67:d3:42:
c5:88:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:29 2025 by rpki-client