Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/qkYxxaIiN3jcZulu8UiMqofxjLE.roa
File: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (raw, json)
Hash identifier: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=
Subject key identifier: AA:46:31:C5:A2:22:37:78:DC:66:E9:6E:F1:48:8C:AA:87:F1:8C:B1
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 01946A353B34D5FFB2173A0CDB91A3E9730D
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/qkYxxaIiN3jcZulu8UiMqofxjLE.roa
Signing time: Wed 15 Jan 2025 13:44:20 +0000
ROA not before: Wed 15 Jan 2025 13:44:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42068
IP address blocks: 195.242.150.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:35:3b:34:d5:ff:b2:17:3a:0c:db:91:a3:e9:73:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jan 15 13:44:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa4631c5a2223778dc66e96ef1488caa87f18cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:b1:db:46:d6:c5:91:00:7b:69:fe:01:07:
ae:e7:a3:a0:91:b2:db:6b:b9:b0:fb:7f:09:5e:b3:
d7:21:14:cc:c4:4f:7b:b1:40:bb:5f:47:b0:d3:53:
3e:49:17:b5:c5:54:3f:7c:1a:f1:16:2c:b2:15:03:
44:f5:a7:48:b5:76:da:2c:a6:f1:dc:6e:94:b3:08:
5d:16:5e:52:6d:31:f6:64:c8:7d:14:ec:24:6d:e9:
40:0b:5a:1f:6f:a9:3f:b7:c2:2e:1c:d6:6a:22:9a:
e2:cb:48:54:18:a2:fc:fd:b5:cc:c7:78:b4:05:9b:
a1:47:0c:ac:60:f8:06:65:44:10:35:89:34:c5:ad:
0f:bf:ea:1d:9c:6a:5e:a5:7c:d2:96:dc:42:f6:24:
c0:e4:ae:8a:da:e9:64:24:ba:c3:b9:a1:a4:a9:5a:
7d:b1:5f:61:10:ac:85:32:d9:dc:24:ab:02:15:a5:
25:d2:fc:51:94:0a:08:74:8c:2b:12:b6:45:0c:e9:
22:9e:e3:f5:a4:93:c0:68:4e:d5:bc:f1:26:cb:a3:
70:06:a7:b1:86:d2:ed:e7:3e:6d:9f:90:46:8c:38:
f4:a7:56:44:3b:6b:63:f0:fd:8e:0f:c8:36:a4:ff:
3f:ab:4c:8f:42:ff:02:99:5c:6f:3e:00:a4:a2:5f:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:31:C5:A2:22:37:78:DC:66:E9:6E:F1:48:8C:AA:87:F1:8C:B1
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/qkYxxaIiN3jcZulu8UiMqofxjLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.150.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:8e:3f:e5:3f:e9:8b:9a:c5:ed:6d:3b:49:eb:8a:84:cb:4d:
60:30:e5:9d:43:98:19:d7:3f:37:f3:22:97:6d:c5:2b:04:a6:
06:5a:0c:2e:87:e0:f7:a9:3c:90:e3:00:29:a0:91:b7:bf:d1:
fd:e2:0d:cd:fb:aa:92:9c:54:d9:71:42:c6:7e:24:f7:da:61:
92:b8:7c:96:0a:52:5a:ef:86:3f:2b:29:4a:d3:10:94:07:27:
21:60:5f:fb:be:02:de:d8:47:68:8a:7d:50:ef:78:91:03:05:
55:9d:33:52:9f:c0:c3:e3:9b:6b:79:ee:76:73:0b:0f:76:fc:
76:84:ea:12:83:38:3d:75:37:0b:ba:c1:da:c2:c4:ab:cb:fe:
d0:32:87:6c:e8:02:72:ef:bd:00:2f:f1:6d:5a:b0:e0:f2:92:
73:9e:e1:bb:44:ec:7d:03:c2:6a:df:af:7a:b8:2f:51:ee:99:
b0:af:79:b4:6e:3a:86:3d:c8:7e:37:44:c8:f3:1b:4b:e4:f5:
45:ae:a5:85:b0:4d:89:29:75:7e:c3:f8:0d:6a:0e:07:61:dd:
21:7c:60:db:c9:e1:b6:ce:d2:a0:6a:23:29:06:f4:e3:06:e7:
d4:7d:00:72:db:ef:fb:2f:47:b1:1f:72:60:d1:cc:da:87:4b:
f3:64:14:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:51 2025 by rpki-client