Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa
File: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (raw, json)
Hash identifier: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=
Subject key identifier: 09:24:0F:2A:EF:AA:A4:F4:EA:83:5C:A1:08:F1:26:B0:98:51:9F:32
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0194244494DF4A31539A5E42D890148A927C
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206282
IP address blocks: 94.240.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:94:df:4a:31:53:9a:5e:42:d8:90:14:8a:92:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09240f2aefaaa4f4ea835ca108f126b098519f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:f7:0b:bf:08:53:df:3a:9f:07:7c:e2:8d:
41:7a:87:1f:71:18:fb:1b:c7:69:76:ed:4b:bf:93:
97:48:b4:ed:da:d6:d9:b6:72:ac:a0:64:b4:91:a9:
ad:37:bc:d5:d8:cb:a4:98:93:58:bd:6e:c7:e4:bf:
09:25:fe:08:fb:fb:60:fc:02:99:7f:8f:05:6c:24:
f7:00:52:e8:f4:d3:a5:6c:75:fe:b0:10:98:86:26:
4b:6b:80:0b:b3:eb:ae:c2:af:33:4a:13:01:26:fe:
1d:35:22:77:c1:8f:cf:b7:23:42:c8:b4:4a:45:f7:
2e:e6:c8:c9:8d:e2:e6:29:2f:c4:53:75:d3:0d:59:
87:87:68:20:18:36:8f:47:ac:93:5f:e5:90:50:56:
4c:16:54:f8:61:93:c7:bf:b9:a8:32:f5:fd:a6:b3:
de:59:17:03:fb:57:a1:1f:f9:43:04:71:e3:d8:a6:
fc:6f:90:b9:9b:65:1b:ba:37:76:ac:b2:10:a0:fa:
c7:68:f2:40:e4:24:f2:9b:71:38:61:5a:2d:98:aa:
80:e8:7e:1c:3d:13:ad:3f:5c:18:7a:74:5a:2e:7e:
39:c6:dd:77:50:34:76:50:af:fd:99:b3:3c:a6:96:
51:d1:22:bf:ff:33:5f:a6:10:0a:b0:e7:cc:b3:df:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:24:0F:2A:EF:AA:A4:F4:EA:83:5C:A1:08:F1:26:B0:98:51:9F:32
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.24.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9e:d2:d7:a4:77:80:49:a7:7c:8b:bc:14:ac:6a:c7:ea:b6:
41:33:52:c0:84:24:d5:5c:5b:da:90:04:9d:6a:39:17:6e:87:
49:5b:28:5d:1d:bd:c4:7b:9c:6b:c2:94:b0:4a:a8:05:fe:86:
f6:95:5c:f5:b1:47:ca:1a:52:e6:31:03:3e:26:97:44:dc:9e:
8a:32:ee:3e:8e:f3:e3:23:52:31:ee:c4:48:82:6b:5b:6c:ce:
33:47:3c:88:64:b9:7e:84:98:5d:ec:92:c6:96:0d:0e:55:79:
84:07:e6:70:9b:63:5c:dc:b0:8a:97:d8:b6:1f:7a:f4:83:77:
91:f3:2f:d3:4b:cc:71:43:46:f0:79:7e:89:9d:12:0e:90:08:
d0:24:b8:ec:bb:dc:a1:aa:e4:0a:7f:29:b9:0f:40:b4:bf:34:
02:2b:57:f3:a8:8e:fe:74:80:68:96:93:8c:7f:0a:07:dc:72:
84:68:10:d3:9d:b5:9e:91:a4:d9:15:9d:0f:e1:9d:92:ba:e7:
9c:07:65:7b:fb:d5:c7:29:68:08:86:e8:50:c5:d5:a6:13:ea:
5f:23:a1:51:df:63:59:48:8f:3c:d3:14:98:8f:56:d4:cd:77:
3f:86:06:2c:9f:47:97:59:d8:a5:a6:5f:fa:26:16:2f:20:24:
cb:d9:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:33 2025 by rpki-client