Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/QF9fIw7vy0eAFpEn9gjeokPnPnM.roa
File: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (raw, json)
Hash identifier: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=
Subject key identifier: 40:5F:5F:23:0E:EF:CB:47:80:16:91:27:F6:08:DE:A2:43:E7:3E:73
Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial: 019422FBDB1650DA8A3D84BBEE6BF548F54C
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/QF9fIw7vy0eAFpEn9gjeokPnPnM.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39531
IP address blocks: 194.50.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:db:16:50:da:8a:3d:84:bb:ee:6b:f5:48:f5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=405f5f230eefcb4780169127f608dea243e73e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:67:a9:58:f3:1b:ea:79:8a:71:78:d2:63:
6f:37:51:62:59:68:1b:dd:0c:1f:e5:6b:46:8b:ce:
9f:bd:ee:04:ad:1c:7d:91:d1:cb:af:e7:86:59:38:
fe:7b:34:26:a8:4a:e6:dd:37:2e:85:01:be:70:35:
25:da:60:c5:aa:0d:91:c7:55:18:ad:ad:76:f7:86:
3d:1b:7e:4f:bb:ce:e3:46:3a:5d:07:44:01:f3:f9:
b2:bc:e9:55:cb:8b:a2:88:19:dd:17:f1:0a:b7:39:
8b:67:03:fa:2b:d9:db:b6:df:66:e9:5b:38:45:7a:
a4:3c:a5:f0:bc:74:ec:2a:25:d3:ea:e2:78:53:5f:
96:e5:7d:0c:cc:6c:ed:0d:39:70:38:7d:d4:8a:c8:
c9:f8:d2:9c:0d:54:fc:07:22:7e:59:f0:bd:8c:2e:
8c:03:83:4d:65:1f:c4:7d:ac:cf:f9:08:98:e6:64:
57:4f:3e:96:3d:32:10:4b:c9:5b:af:9a:a4:b4:55:
94:c1:b3:ef:53:ca:0c:e0:46:14:0d:8f:76:51:15:
f0:8b:34:ca:bf:02:83:4b:fc:ce:a0:06:61:56:51:
53:fd:b7:15:9f:63:98:fc:c6:ad:e1:f5:73:8c:8e:
09:14:c9:fe:ea:ff:ae:3b:80:8b:c5:b5:c3:84:28:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:5F:23:0E:EF:CB:47:80:16:91:27:F6:08:DE:A2:43:E7:3E:73
X509v3 Authority Key Identifier:
keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/QF9fIw7vy0eAFpEn9gjeokPnPnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:70:3f:05:de:1b:2a:63:fe:c2:48:b6:38:0d:d4:8b:95:96:
51:68:2c:bc:72:02:3f:d2:d1:b5:4c:0f:3a:2e:fa:ba:a9:ac:
4b:84:14:ac:e7:fb:d3:af:c0:69:ed:84:44:96:cb:c5:fe:bc:
c2:c6:98:dd:44:57:5b:f9:d1:cf:ba:95:df:d5:31:fa:95:c4:
e6:35:50:9b:bb:d6:03:5a:f8:3b:6b:c4:01:a3:10:cf:cb:77:
ed:b5:75:07:40:15:31:e4:0f:7d:d9:b6:c6:0d:55:b8:75:d0:
73:a3:ab:1c:7d:42:25:85:e5:20:2d:22:4a:41:14:d5:9b:ef:
b4:d1:05:32:84:47:49:d8:75:c1:86:31:94:ca:a3:07:92:9a:
e2:ad:8e:26:5f:bf:cd:3c:68:bd:1e:89:21:0f:c3:49:c3:96:
4e:d8:e6:d1:84:6d:1b:3d:79:29:d6:9e:6d:c1:54:65:34:a3:
3b:0e:e1:42:49:07:57:ab:46:7f:0c:d5:da:fb:88:73:4c:6f:
82:e3:9c:60:bf:35:2f:5d:75:1a:b1:5b:a2:86:e3:14:c5:05:
b1:1b:7c:f3:65:42:b2:16:61:77:cb:bb:6e:ed:19:19:3c:70:
e3:86:ff:5c:49:de:57:c3:d2:40:aa:e3:b6:8d:d3:e5:34:38:
e3:9f:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:48 2025 by rpki-client