Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/QTe4jy0Y7USAwEcic66n__FbD_M.roa
File: QTe4jy0Y7USAwEcic66n__FbD_M.roa (raw, json)
Hash identifier: Ufz9etYuHJLF7H/MXGpqcPwd71YR6zeWjk+oxp5gTtc=
Subject key identifier: 41:37:B8:8F:2D:18:ED:44:80:C0:47:22:73:AE:A7:FF:F1:5B:0F:F3
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182816E3F807A8B470516F2DAB9EAB97B79
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/QTe4jy0Y7USAwEcic66n__FbD_M.roa
Signing time: Tue 09 Aug 2022 07:07:42 +0000
ROA not before: Tue 09 Aug 2022 07:07:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 86.38.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:6e:3f:80:7a:8b:47:05:16:f2:da:b9:ea:b9:7b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 9 07:07:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4137b88f2d18ed4480c0472273aea7fff15b0ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cb:10:65:bf:0e:77:6c:f0:40:b2:d2:a4:a3:
91:3b:bf:65:79:ae:e3:d4:0f:9a:72:a9:74:7c:07:
dc:26:aa:3d:bc:c4:a4:0a:9a:f5:b1:1f:fe:9f:82:
51:9c:d5:cc:de:90:fe:37:c1:c1:0d:d6:94:2a:02:
e8:f1:f3:3b:c6:0f:d3:5d:52:cc:c9:92:4d:d0:6b:
d6:48:78:1a:2f:7c:8e:23:42:ef:0e:8c:d7:f3:a7:
97:bf:87:90:0a:16:56:77:a6:d0:d8:f8:3e:68:31:
7c:8d:6c:21:33:27:83:82:0b:52:3a:33:8d:5b:5b:
f8:8e:ad:dc:84:bd:3d:35:34:4f:8e:0a:24:8e:48:
33:3d:cd:f7:e1:e4:6a:b9:52:bf:e0:f7:b6:2b:04:
79:6d:37:4e:ba:53:4d:6f:8f:05:ec:8d:71:d8:a9:
c5:be:68:75:91:81:96:6d:2a:d5:cc:a3:b2:88:fa:
ca:44:13:26:03:98:bc:06:60:ca:0d:b0:fe:a0:3a:
96:6c:08:bb:4a:be:8d:bc:d0:e1:cd:f2:e0:4e:52:
2c:00:d7:3a:11:8c:e0:47:74:bf:67:9e:d5:fa:5e:
9b:cb:1b:c3:24:ba:e0:6e:59:0f:95:cb:ad:16:9b:
2c:a1:13:cb:7a:8e:63:68:6f:74:28:7a:ab:42:a9:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:B8:8F:2D:18:ED:44:80:C0:47:22:73:AE:A7:FF:F1:5B:0F:F3
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/QTe4jy0Y7USAwEcic66n__FbD_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cc:36:bd:ef:95:04:cf:cc:57:48:e3:03:92:b4:93:f1:c3:
81:38:6a:be:38:2b:3b:39:e6:9f:7a:f9:1b:f6:61:3d:89:b8:
ea:5a:c1:36:77:f6:31:9b:24:83:5c:7b:c6:c9:ff:85:09:08:
a5:ba:16:3f:61:51:1e:d0:f2:bd:cf:a8:cf:b6:74:b1:1d:77:
f1:13:fc:99:e4:ef:18:fc:b1:84:19:83:b8:b1:3f:7e:a8:aa:
9f:d8:e1:9f:60:61:b4:3a:71:86:6b:84:79:98:96:6e:30:97:
e4:b9:4b:ba:b8:3b:15:d4:35:71:74:51:30:3b:39:b1:82:eb:
ca:70:49:94:84:d0:4f:1d:95:9e:4f:c2:a2:b3:ad:19:dd:59:
8c:bf:eb:5b:a0:08:6f:c6:31:a2:94:19:03:cd:a1:ac:ec:ff:
6e:e9:a5:f1:92:ff:09:56:25:cc:1d:19:47:47:b3:0a:62:b5:
7f:9d:52:b4:43:a7:90:01:e7:9f:32:c0:8a:a0:d9:20:c7:5e:
84:2c:93:a1:c7:fc:71:9b:f6:df:88:df:7d:ac:28:54:26:53:
67:5f:29:d0:5f:f7:d0:fd:33:56:d7:34:7a:c7:86:2b:54:4a:
0d:a0:ef:de:de:42:83:80:f6:89:f0:7a:c8:ab:c3:e2:07:b2:
c5:66:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:00 2025 by rpki-client