Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/qFxAQCZF4aiL6zfEo3jI1pEhr0c.roa
File: qFxAQCZF4aiL6zfEo3jI1pEhr0c.roa (raw, json)
Hash identifier: BkBr3i0e4Cxn3N7LSXTACMYl6mqyYANucBQMfUXHhzs=
Subject key identifier: A8:5C:40:40:26:45:E1:A8:8B:EB:37:C4:A3:78:C8:D6:91:21:AF:47
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018BEC569ECE94A665E6D77690AD8C876B27
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/qFxAQCZF4aiL6zfEo3jI1pEhr0c.roa
Signing time: Mon 20 Nov 2023 10:46:21 +0000
ROA not before: Mon 20 Nov 2023 10:46:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.233.36.0/24 maxlen: 24
146.19.189.0/24 maxlen: 24
195.225.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:56:9e:ce:94:a6:65:e6:d7:76:90:ad:8c:87:6b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Nov 20 10:46:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a85c40402645e1a88beb37c4a378c8d69121af47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:07:3f:92:89:c9:a4:5a:2e:c6:e6:94:62:
9c:00:d4:07:30:40:25:4e:08:0c:be:ab:9b:8e:e4:
77:04:71:6c:47:54:be:5c:f6:db:af:74:61:a8:44:
7d:c2:e6:b7:3a:7c:9b:98:06:0e:19:32:33:3e:ea:
62:84:9f:b9:d7:07:5b:83:03:ce:28:a1:6c:1c:91:
e7:34:ec:68:25:6f:bb:16:8f:33:69:0a:16:11:ea:
be:83:76:f8:26:a4:01:34:85:91:89:b9:23:23:90:
dc:34:99:6c:f9:1e:30:09:1f:e6:42:ce:32:27:a5:
6d:76:65:e6:45:26:fa:87:ec:35:82:7f:dc:4a:50:
77:e2:12:ac:25:99:5d:d7:ab:24:a9:90:a7:eb:bd:
e3:da:70:b3:f4:06:f5:21:fe:24:73:eb:51:a6:82:
83:cf:c9:6b:85:1a:f5:fe:9e:52:1d:c8:f9:90:84:
de:f7:30:3f:4a:40:a2:fe:68:e9:d3:75:e6:c9:5c:
dd:cd:61:0f:bb:78:36:af:e8:ba:7c:7d:ce:ad:e0:
64:4f:af:6c:ce:80:1b:d6:eb:44:ef:f5:9d:a3:81:
94:ce:81:2c:f7:ad:bc:48:d1:cd:3b:17:65:b0:7b:
d0:a9:c4:a5:11:80:80:95:40:a9:e6:81:6b:8a:53:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:40:40:26:45:E1:A8:8B:EB:37:C4:A3:78:C8:D6:91:21:AF:47
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/qFxAQCZF4aiL6zfEo3jI1pEhr0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.36.0/24
146.19.189.0/24
195.225.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:16:d4:70:7f:03:c3:fc:63:3b:dd:12:17:13:9f:ad:8c:33:
ef:31:17:8c:e1:4d:75:98:ef:c6:11:fd:e4:3f:54:1f:b0:11:
a2:e6:bb:d1:84:6b:02:3d:21:b3:14:16:05:3d:81:62:f4:4d:
32:09:8d:a7:a1:3e:20:54:bd:b0:d9:e9:f1:50:0f:58:69:16:
7b:b7:ed:23:1e:d5:7b:81:1e:39:88:13:b3:d2:0b:cb:4b:4a:
73:7b:db:53:86:64:4f:82:3f:21:90:09:62:61:e2:10:51:cb:
b1:52:cd:90:3a:af:b8:54:07:ea:eb:56:02:12:e8:02:57:ac:
b4:a8:52:f3:15:c9:58:33:61:bf:00:3d:bc:cb:9a:1c:f7:a1:
5b:01:64:6d:f6:29:f5:3f:04:94:07:b8:b2:e8:73:5f:10:84:
0f:9c:8f:25:3f:0d:23:db:0f:48:56:c9:68:74:92:30:03:99:
0e:f7:8e:8b:92:e8:f6:6f:f9:ed:6c:54:03:b6:ad:dd:e3:1a:
1e:7b:56:69:b5:cd:05:3b:2c:44:06:9a:4c:0c:50:7e:e2:ba:
82:c4:a5:59:9e:b6:00:34:05:9f:62:21:54:ea:a6:54:dc:b3:
f6:f1:05:0c:4e:13:25:4c:dd:bb:48:d2:d0:64:fa:67:29:8a:
0c:b8:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:19 2025 by rpki-client