Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/q3q-Kf7njl3Xfhp1OG8FoHdtWhM.roa
File: q3q-Kf7njl3Xfhp1OG8FoHdtWhM.roa (raw, json)
Hash identifier: +hHS4uIIpq6a0mEbo3Fihw4+tH/VcK1aKCpqD2F+GkQ=
Subject key identifier: AB:7A:BE:29:FE:E7:8E:5D:D7:7E:1A:75:38:6F:05:A0:77:6D:5A:13
Certificate issuer: /CN=7075bbe4538815802030afec052706ca34342ce8
Certificate serial: 018964C089A118E2F2572E37C12C37EF7908
Authority key identifier: 70:75:BB:E4:53:88:15:80:20:30:AF:EC:05:27:06:CA:34:34:2C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHW75FOIFYAgMK_sBScGyjQ0LOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/q3q-Kf7njl3Xfhp1OG8FoHdtWhM.roa
Signing time: Mon 17 Jul 2023 16:48:06 +0000
ROA not before: Mon 17 Jul 2023 16:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.104.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:89:a1:18:e2:f2:57:2e:37:c1:2c:37:ef:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7075bbe4538815802030afec052706ca34342ce8
Validity
Not Before: Jul 17 16:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab7abe29fee78e5dd77e1a75386f05a0776d5a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:da:51:31:1f:9d:ee:cc:f5:2c:f7:b3:2d:
ee:ee:01:b5:ef:03:1b:89:ba:73:f1:fe:e6:60:1c:
56:2b:8b:14:05:82:c5:03:e2:38:e2:55:c0:a0:62:
0b:18:0a:7b:9b:52:00:67:10:a8:ee:52:c3:9c:e5:
0d:21:35:99:f7:97:97:c6:f8:c8:6a:f6:87:e2:ed:
4e:ab:e8:ee:fc:e8:1b:2b:cf:d6:fe:05:bb:6a:46:
73:a9:0b:fd:d9:7c:93:29:f5:c6:c4:75:08:21:f5:
41:5b:56:34:03:d8:15:30:ff:95:81:d7:9c:01:77:
8c:30:00:f2:7b:00:04:89:a3:6b:fd:d8:95:bd:cc:
b1:bc:f1:8f:dc:fd:74:05:8c:2a:c4:e1:63:ae:66:
4a:1c:7a:b2:6b:ed:1e:49:d8:b1:1c:94:46:a2:81:
28:d2:33:66:8d:db:c1:bb:44:cd:a5:e9:5d:6c:07:
e3:2c:91:46:2b:93:75:4d:9d:46:b8:7d:72:3f:b6:
26:63:06:dc:4d:2f:7d:be:d2:64:f7:82:fa:bf:1e:
36:e1:0a:3d:6a:a8:91:6f:b9:e6:59:3d:9e:30:91:
b0:af:71:d1:b8:ea:86:01:e0:1b:b8:d0:0e:54:58:
25:6e:45:01:68:f4:e6:dd:c6:eb:cc:b5:69:e4:04:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7A:BE:29:FE:E7:8E:5D:D7:7E:1A:75:38:6F:05:A0:77:6D:5A:13
X509v3 Authority Key Identifier:
keyid:70:75:BB:E4:53:88:15:80:20:30:AF:EC:05:27:06:CA:34:34:2C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHW75FOIFYAgMK_sBScGyjQ0LOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/q3q-Kf7njl3Xfhp1OG8FoHdtWhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/cHW75FOIFYAgMK_sBScGyjQ0LOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.143.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ec:b8:77:61:7e:d0:28:3b:f5:57:76:7a:c8:82:20:30:55:
5f:e4:06:75:51:2b:34:07:c4:9b:99:2d:1f:40:0f:95:2d:59:
c1:44:a4:05:95:fb:26:5a:3b:b5:b0:e6:39:3d:1a:f3:c2:fe:
a6:af:80:2c:a4:9a:06:83:c9:29:d6:5c:54:d8:c0:2b:12:0f:
fe:dc:38:36:3c:a3:7a:be:27:38:55:2b:98:21:00:33:d8:4f:
1d:35:72:81:a5:71:99:5b:54:d2:35:84:e0:4d:2d:b7:40:49:
95:0c:09:25:0b:8a:cf:f5:0c:29:89:de:01:0e:6e:95:93:33:
bf:a2:6f:87:cd:bd:da:1e:9d:45:c6:ed:64:36:aa:98:48:62:
f2:5b:de:80:c6:51:a7:f4:47:ee:82:fe:46:16:dd:33:4b:fb:
2c:79:25:df:1f:f5:65:db:7c:31:75:af:19:c3:eb:f5:38:02:
14:1b:22:c5:fc:d1:b7:b4:9b:0f:84:d4:5d:92:f1:ff:66:35:
1b:19:1f:8e:78:58:c6:02:ed:ab:04:eb:43:74:79:d9:e6:82:
eb:01:29:ff:83:f2:93:76:08:cc:ea:7d:46:a3:ce:14:3c:fa:
9a:30:5a:b7:1d:80:73:51:1f:26:21:94:32:49:a9:4e:9c:31:
86:60:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:13 2025 by rpki-client