Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/cjjqef6iWCl_1yFiNx4mwIqngEo.roa
File: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (raw, json)
Hash identifier: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=
Subject key identifier: 72:38:EA:79:FE:A2:58:29:7F:D7:21:62:37:1E:26:C0:8A:A7:80:4A
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 01942067EECC8EA9232CD67626B490ED986E
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/cjjqef6iWCl_1yFiNx4mwIqngEo.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9023
IP address blocks: 193.46.40.0/22 maxlen: 22
2001:67c:2418::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ee:cc:8e:a9:23:2c:d6:76:26:b4:90:ed:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7238ea79fea258297fd72162371e26c08aa7804a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:78:67:94:c6:10:67:77:97:3f:03:b5:0f:
43:9b:9a:cb:04:f8:ef:bb:cf:84:48:e3:a1:3d:ce:
33:c4:a0:b6:71:d0:25:55:99:8c:1f:2e:00:ad:3c:
bb:34:9c:e6:11:26:f9:fd:3e:06:ef:2f:3e:9f:44:
aa:e6:b1:1b:b7:b2:6e:97:85:d1:50:12:1c:a1:da:
fa:b4:15:a3:84:19:80:0f:99:8a:01:08:ad:4f:84:
f5:4f:68:03:e3:5b:ec:f2:d0:7c:34:d4:dc:cf:e0:
d7:99:bf:c7:3a:6c:3b:85:6f:f6:1c:c9:dd:c6:a2:
fb:01:11:db:fd:76:f5:74:b8:b4:03:63:33:ba:6f:
98:54:a3:96:f2:d0:16:59:dd:d6:5a:5b:36:37:8c:
8f:06:9e:f8:46:2c:b7:96:cb:e6:f9:43:eb:61:29:
c7:28:57:ac:d1:c0:23:62:ab:8a:9f:10:03:01:9c:
8e:62:21:10:72:41:bc:ff:9e:1b:b1:09:1d:6b:9e:
8e:ff:ef:17:b1:82:fa:fb:72:95:2e:0a:10:99:f4:
69:f9:96:a3:2a:fd:e4:c1:31:d4:ed:bd:8a:d8:b4:
8a:db:d2:96:e0:de:92:f9:45:36:ba:df:fb:d0:fa:
52:b7:91:9a:f4:9a:f7:c1:0e:fc:6b:d1:bf:66:2c:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:EA:79:FE:A2:58:29:7F:D7:21:62:37:1E:26:C0:8A:A7:80:4A
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/cjjqef6iWCl_1yFiNx4mwIqngEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.40.0/22
IPv6:
2001:67c:2418::/48
Signature Algorithm: sha256WithRSAEncryption
4b:a8:0e:c7:2a:04:ce:d6:86:d2:01:24:16:3d:d7:ae:f4:e8:
c8:e8:66:57:fb:02:c9:40:01:f7:ca:2f:9e:ae:84:41:f3:c9:
02:30:3b:73:75:d4:43:34:bb:88:b3:d2:98:bd:d0:eb:ab:83:
62:b7:9e:56:9c:83:8e:70:07:e2:2c:bf:fa:b1:e9:94:c4:5e:
8a:ef:58:d0:e3:be:30:cc:37:2c:5b:c4:5e:55:e4:bd:a1:c5:
a9:10:19:86:81:04:10:0d:b5:8a:78:21:73:ca:cc:e7:99:65:
fb:eb:4a:28:78:2b:df:7a:62:a4:33:4c:42:27:a9:0b:93:e7:
2d:dc:b7:9c:f6:db:e5:87:0c:ea:be:d7:4e:b5:dc:e1:25:90:
01:2f:b8:4b:d9:fd:c1:90:85:87:47:62:7f:2b:8a:d8:f1:01:
7f:19:b3:11:b7:fa:88:a8:77:ec:50:d4:75:84:eb:12:7f:05:
73:48:9f:b7:d4:ec:77:30:b1:a8:86:bc:0d:af:f5:14:4b:83:
5f:cd:b8:d6:23:77:0b:cc:67:a8:14:78:88:bc:63:c8:91:f0:
c4:3b:d5:1f:aa:f5:8e:78:9b:a8:e5:93:5d:45:1c:ea:24:76:
be:d8:1e:db:20:16:2e:f8:37:b8:14:cc:37:06:23:2e:e8:2a:
84:88:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:49 2025 by rpki-client