Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/Q_F5FBMRJgiBKxNjWiortg2YMoY.roa
File: Q_F5FBMRJgiBKxNjWiortg2YMoY.roa (raw, json)
Hash identifier: aObbq13Sl5QPy6edKviS0LhaIUtmg0bsHO4b4zIGuiQ=
Subject key identifier: 43:F1:79:14:13:11:26:08:81:2B:13:63:5A:2A:2B:B6:0D:98:32:86
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 019423D7EE93162418E03F627D9B9735966A
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/Q_F5FBMRJgiBKxNjWiortg2YMoY.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 88.214.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ee:93:16:24:18:e0:3f:62:7d:9b:97:35:96:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43f1791413112608812b13635a2a2bb60d983286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:6c:80:bd:9b:5f:0c:3a:e4:27:15:ed:ac:
17:37:54:36:54:c4:b6:91:d8:af:30:98:02:52:ed:
be:05:d2:1a:eb:14:62:88:00:88:c7:b3:e7:71:59:
6b:b1:22:6a:9c:27:af:1f:82:5b:9a:01:a3:85:90:
91:ce:36:bb:56:ac:53:f0:70:60:a2:53:19:91:8d:
0b:71:63:e3:b6:dc:9c:5d:2f:c0:8b:4c:11:cf:31:
0e:d5:b8:c8:70:99:89:f3:34:cf:7a:3b:ed:bf:a7:
85:ca:b9:2f:98:37:ea:d0:ad:f4:3d:91:be:fb:66:
cf:5c:04:be:0b:56:9c:30:7b:58:9d:c5:94:37:d2:
6e:14:52:cc:71:f0:17:1e:33:e0:9c:dd:63:9e:e3:
64:42:d1:33:8b:fc:48:d4:fd:0e:8f:ee:64:8c:9c:
59:11:5a:2e:35:8a:97:85:67:e4:d5:f6:9a:85:a2:
dc:19:b6:f8:0a:ea:c4:07:2d:05:ff:a9:9a:04:cf:
a1:18:42:94:23:d5:21:f2:31:69:52:23:ee:3f:a1:
84:ed:7a:66:20:c4:4e:65:17:57:e7:70:e6:e1:d2:
b7:52:2a:e8:f9:87:48:2b:55:4d:4d:a0:6c:a9:e7:
46:da:ab:d5:c9:12:8c:84:3b:32:1c:4c:07:84:c6:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F1:79:14:13:11:26:08:81:2B:13:63:5A:2A:2B:B6:0D:98:32:86
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/Q_F5FBMRJgiBKxNjWiortg2YMoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.41.0/24
Signature Algorithm: sha256WithRSAEncryption
70:25:e0:22:e4:39:a0:d2:63:2e:0c:08:85:4d:88:b6:dd:77:
40:75:cc:08:e2:f4:cc:1d:39:8b:55:7a:49:fb:fe:35:93:09:
4c:ca:6b:e3:40:ba:8e:2b:93:13:72:c4:9c:29:ca:5d:2c:24:
bf:5e:89:6c:9b:f0:33:92:18:e9:cc:0c:e4:57:74:c6:4c:0d:
cf:bd:93:3e:d5:9e:0b:d3:a2:50:46:3e:b6:04:dd:85:1f:89:
bc:49:31:e2:e6:30:e2:0b:73:8c:60:1f:16:37:20:3c:96:08:
de:c9:40:b2:e9:ff:c7:ae:68:75:d1:6d:55:37:ec:70:c6:5c:
65:39:b9:09:11:74:8f:76:ec:c4:8b:64:da:71:a7:ea:94:94:
dd:81:a6:8b:8c:97:4e:17:0c:fc:26:40:b0:54:2e:4c:9f:bb:
83:7b:85:16:56:b8:95:62:e5:c1:5d:a9:ad:8a:c4:50:5a:1e:
ce:5a:a7:a8:24:3b:ae:88:8d:b1:51:99:98:df:5b:54:a5:8c:
cc:3d:6c:73:3b:83:d7:5b:99:2e:c1:00:b3:56:c4:30:b0:cf:
fb:5e:81:45:82:01:a5:b0:24:61:83:25:80:1e:03:fa:28:89:
2b:b8:2d:05:77:5b:de:ab:33:32:88:97:a6:b2:8a:b1:2e:32:
31:b9:bb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:00:30 2025 by rpki-client