Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/QnMq7wHmb4VO29vxnDInAUL0lKw.roa
File: QnMq7wHmb4VO29vxnDInAUL0lKw.roa (raw, json)
Hash identifier: GZcYAH7ZONTmMpTXBFRJcMtbApxgsgvr6bH1HpA4tFs=
Subject key identifier: 42:73:2A:EF:01:E6:6F:85:4E:DB:DB:F1:9C:32:27:01:42:F4:94:AC
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01936EB67102DA2A9D89B84531F8922282D4
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/QnMq7wHmb4VO29vxnDInAUL0lKw.roa
Signing time: Wed 27 Nov 2024 17:41:10 +0000
ROA not before: Wed 27 Nov 2024 17:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19930
IP address blocks: 155.204.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:b6:71:02:da:2a:9d:89:b8:45:31:f8:92:22:82:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Nov 27 17:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42732aef01e66f854edbdbf19c32270142f494ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:05:ae:82:c4:ca:57:00:10:37:19:52:a4:
27:a0:41:3d:a2:d9:d2:a0:76:92:93:16:92:20:db:
f5:50:f5:fe:27:1b:54:c0:4c:8a:06:06:0a:15:14:
df:e6:ad:c0:90:56:b8:4c:af:82:cf:f1:94:af:4d:
05:03:a3:95:35:25:6f:56:73:93:6d:08:a0:a8:4e:
e4:9c:6a:df:77:8e:33:f1:15:99:b7:82:57:71:b1:
13:e2:67:8e:13:26:3f:e6:06:ab:5b:87:f1:bd:1a:
c2:c4:e3:2d:6b:87:47:f9:26:00:d5:b0:0c:47:fe:
b9:ac:0e:a1:2a:59:69:e8:0f:b8:5a:b7:7f:a1:11:
1e:b4:f6:13:c6:ee:eb:c9:b8:47:e1:79:87:68:5f:
9e:bb:f5:9b:28:a9:df:d9:c0:82:29:ae:bd:0c:20:
f2:25:69:b3:7f:99:39:71:9c:b3:a6:dd:c6:07:19:
da:9a:e5:1d:1b:e7:61:a8:8d:33:d9:00:61:57:71:
e3:91:e4:ce:b6:5f:45:6c:2b:80:8b:fa:aa:25:2c:
db:73:80:c2:7a:e9:39:56:7b:99:57:c1:4c:f6:c5:
46:6b:78:bb:a3:a8:e0:8f:c2:5b:2c:8a:45:8a:33:
4a:2c:76:4c:c3:6c:72:79:f9:8e:46:30:d9:26:ad:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:73:2A:EF:01:E6:6F:85:4E:DB:DB:F1:9C:32:27:01:42:F4:94:AC
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/QnMq7wHmb4VO29vxnDInAUL0lKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.204.152.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:4e:62:ee:88:04:4d:86:11:8b:97:fe:56:cc:2d:31:0b:72:
0a:4d:16:ea:45:eb:16:e8:09:17:9d:d0:97:0f:7c:65:11:00:
9c:12:61:8b:67:20:b3:54:14:fa:cc:9d:d5:df:cc:76:b0:d2:
a9:d2:75:7d:39:4e:5d:29:d9:90:43:98:3b:00:8a:19:6a:1c:
36:7b:b4:2d:5b:bf:00:f1:28:ba:07:00:e7:46:b7:c0:1a:d2:
fd:1d:d0:c9:8d:fa:fc:57:a7:76:4a:20:93:30:6e:a6:f3:ea:
22:4f:00:96:d3:26:00:30:8a:20:7b:ac:f1:ff:e4:37:0d:5c:
6f:1c:3b:59:52:11:db:09:0c:d7:b5:41:3d:94:bb:1b:6c:9b:
18:0c:64:48:d0:3a:8c:b4:92:50:21:79:d9:72:ed:92:9f:91:
fe:08:89:a4:98:e5:5e:85:7e:83:d7:f0:28:11:d0:35:00:f1:
e4:71:35:d4:ff:4e:f8:c7:5e:3e:d4:88:f1:dc:5a:ee:69:de:
b6:81:02:92:c3:3d:95:28:95:69:b4:49:77:da:c8:23:5f:db:
81:71:ac:30:5f:ea:12:2f:78:68:b8:9d:2b:4f:7a:32:bc:7b:
7d:0d:05:57:be:b2:b8:2a:86:91:0c:4c:eb:82:6a:9e:85:99:
3b:b0:04:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNutnEC2iqdibhFMfiSIoLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm
Nzk2NzgwHhcNMjQxMTI3MTc0MTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjczMmFlZjAxZTY2Zjg1NGVkYmRiZjE5YzMyMjcwMTQyZjQ5NGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3gFroLEylcAEDcZUqQnoEE9otnS
oHaSkxaSINv1UPX+JxtUwEyKBgYKFRTf5q3AkFa4TK+Cz/GUr00FA6OVNSVvVnOT
bQigqE7knGrfd44z8RWZt4JXcbET4meOEyY/5garW4fxvRrCxOMta4dH+SYA1bAM
R/65rA6hKllp6A+4Wrd/oREetPYTxu7rybhH4XmHaF+eu/WbKKnf2cCCKa69DCDy
JWmzf5k5cZyzpt3GBxnamuUdG+dhqI0z2QBhV3HjkeTOtl9FbCuAi/qqJSzbc4DC
euk5VnuZV8FM9sVGa3i7o6jgj8JbLIpFijNKLHZMw2xyefmORjDZJq1HYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEJzKu8B5m+FTtvb8ZwyJwFC9JSsMB8GA1UdIwQY
MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt
NTkxY2FmNTM2ZWNjLzEvUW5NcTd3SG1iNFZPMjl2eG5ESW5BVUwwbEt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj
LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDm8yYMA0G
CSqGSIb3DQEBCwUAA4IBAQAfTmLuiARNhhGLl/5WzC0xC3IKTRbqResW6AkXndCX
D3xlEQCcEmGLZyCzVBT6zJ3V38x2sNKp0nV9OU5dKdmQQ5g7AIoZahw2e7QtW78A
8Si6BwDnRrfAGtL9HdDJjfr8V6d2SiCTMG6m8+oiTwCW0yYAMIoge6zx/+Q3DVxv
HDtZUhHbCQzXtUE9lLsbbJsYDGRI0DqMtJJQIXnZcu2Sn5H+CImkmOVehX6D1/Ao
EdA1APHkcTXU/074x14+1Ijx3Fruad62gQKSwz2VKJVptEl32sgjX9uBcawwX+oS
L3houJ0rT3oyvHt9DQVXvrK4KoaRDEzrgmqehZk7sATh
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:43 2025 by rpki-client