Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/q8aI8en4lXWEAOIqjltL2dKCNEM.roa
File: q8aI8en4lXWEAOIqjltL2dKCNEM.roa (raw, json)
Hash identifier: mIK7Q6QxymI6Gyc9Mumf03eU529f/5ddct/D368l5+0=
Subject key identifier: AB:C6:88:F1:E9:F8:95:75:84:00:E2:2A:8E:5B:4B:D9:D2:82:34:43
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B4086DB83FF983A87A1DA17136D7A1
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/q8aI8en4lXWEAOIqjltL2dKCNEM.roa
Signing time: Thu 02 Jan 2025 01:49:25 +0000
ROA not before: Thu 02 Jan 2025 01:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53340
IP address blocks: 147.189.133.0/24 maxlen: 24
176.111.222.0/24 maxlen: 24
193.8.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:08:6d:b8:3f:f9:83:a8:7a:1d:a1:71:36:d7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abc688f1e9f895758400e22a8e5b4bd9d2823443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:9a:a6:cd:de:fc:d4:2e:23:e2:9a:9b:9d:
0d:e3:51:ee:05:7f:81:de:37:fc:71:6d:49:33:bd:
32:9d:f0:b9:a6:41:9e:8b:20:13:cc:ad:b7:b6:bc:
df:55:0c:a7:07:63:c8:ad:99:b4:f7:b1:93:f1:cb:
fc:d1:bf:92:c2:ba:08:32:24:cf:1a:9b:b9:4b:13:
6b:a0:82:f7:b9:9b:4e:f2:9e:a5:61:81:fc:f6:54:
8f:24:12:f5:74:f9:3c:9b:84:5e:65:50:e7:d4:e9:
db:e7:66:e4:63:5d:e6:5a:98:bf:b7:eb:8b:bc:db:
0f:fd:aa:bb:c1:1a:d3:93:b9:71:a4:72:d0:30:54:
a3:04:10:d2:60:93:b0:17:9d:f8:a8:53:50:91:22:
18:92:27:c5:fa:98:cf:5a:d1:2b:46:52:1c:73:6e:
79:f4:7a:55:ba:bf:41:d6:d5:c8:77:db:3d:b5:ea:
02:b2:05:16:88:fe:52:c8:3c:62:f4:1c:c5:a2:29:
fa:c3:8b:f1:6c:ba:ff:00:38:c8:3d:22:e6:b4:fa:
62:19:e1:cd:a7:a3:5c:09:d5:86:0e:96:2d:ad:92:
08:d2:14:cb:cc:17:5a:f9:cc:85:30:b4:7b:cf:51:
9d:39:22:eb:99:75:51:27:84:aa:5a:ea:29:a9:f8:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C6:88:F1:E9:F8:95:75:84:00:E2:2A:8E:5B:4B:D9:D2:82:34:43
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/q8aI8en4lXWEAOIqjltL2dKCNEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.133.0/24
176.111.222.0/24
193.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
95:88:1d:01:e3:88:61:13:96:2d:01:18:a7:e2:ae:99:0e:ad:
02:de:32:d4:7c:b7:ec:9b:69:ed:4d:0f:af:56:7d:b2:77:b8:
64:38:96:5a:58:41:bb:75:0c:f0:cb:7b:45:5d:f9:5f:ca:ad:
3e:f5:0f:ea:99:e7:42:28:ce:95:57:31:25:47:a5:13:34:4b:
83:52:15:3d:0e:b0:3a:82:98:3f:8f:a8:60:4b:37:2a:a1:55:
ea:0e:94:c0:5a:01:65:20:bf:d4:aa:9c:96:57:e7:0f:fe:ee:
c6:7a:d6:26:93:33:d2:ce:0f:38:f2:c0:58:61:23:7f:a6:2a:
bb:50:1b:12:8f:08:cd:e4:ed:ec:a7:6b:c7:b9:85:7b:6c:ce:
0b:a1:b7:99:43:ef:08:10:41:38:5a:62:e6:4d:a5:6d:a6:cf:
12:b4:16:18:34:f2:58:fb:5c:e1:e8:47:a8:ba:ea:44:9f:91:
67:75:fb:37:93:01:6a:dc:6e:20:02:af:55:c8:fa:bb:1f:d6:
25:2e:0b:ce:ee:11:c2:ae:e6:6d:14:f6:e2:3c:dd:bf:09:5e:
a4:6b:83:ea:90:08:94:34:39:3d:70:f4:a6:ef:72:29:e0:bc:
2a:a0:60:89:58:aa:4f:85:3b:85:d1:2c:24:41:7c:5b:bc:09:
46:3a:4b:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:15 2025 by rpki-client