Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/q-UJXCOoCLIoRY1pL8LA-GHUqRU.roa
File: q-UJXCOoCLIoRY1pL8LA-GHUqRU.roa (raw, json)
Hash identifier: U8gQKwbPX0c9MoQK0T0egJw2T4/AR+OTGlQOtQWM6Tc=
Subject key identifier: AB:E5:09:5C:23:A8:08:B2:28:45:8D:69:2F:C2:C0:F8:61:D4:A9:15
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B24BB2E56771B61E5C09A5E899AF31
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/q-UJXCOoCLIoRY1pL8LA-GHUqRU.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211114
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4b:b2:e5:67:71:b6:1e:5c:09:a5:e8:99:af:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abe5095c23a808b228458d692fc2c0f861d4a915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:d8:1a:17:da:e3:13:2e:30:6e:f0:e9:5f:
17:7a:0a:f7:25:d8:bf:50:11:0b:17:49:f9:e2:21:
44:3f:b3:bd:db:6a:d6:ff:43:3e:6a:97:57:bb:ca:
23:22:39:5e:b5:09:09:61:44:21:d4:44:6e:93:b3:
e8:b1:c9:b1:68:03:f7:fc:ae:2d:45:0c:9e:90:30:
c5:2f:be:41:ab:05:15:06:45:1d:40:d5:ab:2f:e8:
fb:50:e8:d7:59:51:70:4f:4a:74:7b:9e:4e:7d:5f:
13:86:28:9a:9b:87:94:cd:12:62:2e:b5:2d:a4:db:
99:86:b5:a2:cc:88:14:46:1a:58:70:a1:52:6b:91:
84:42:b8:76:52:0a:57:b0:f5:bd:ec:05:f8:c9:77:
1f:ac:4b:97:67:c8:2a:0e:94:62:ab:a0:80:b0:f2:
37:ad:53:02:fc:c4:dd:56:b9:2a:81:20:e0:54:e5:
a6:e6:96:0b:c4:05:6f:66:86:bb:4f:93:f5:f3:67:
70:04:c3:e8:5b:75:fd:83:40:e0:d3:15:f8:fd:33:
d2:c6:83:c9:68:0a:40:ef:a2:22:9b:f9:75:67:fd:
82:ea:cc:97:e5:3a:1c:ef:6d:1c:9a:81:4f:60:5e:
fa:71:33:fa:70:d1:70:d9:5d:a1:04:d9:dd:d0:7d:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E5:09:5C:23:A8:08:B2:28:45:8D:69:2F:C2:C0:F8:61:D4:A9:15
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/q-UJXCOoCLIoRY1pL8LA-GHUqRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bb:3f:9b:d1:cd:ae:80:c3:a3:c5:97:80:55:57:14:b0:e9:
65:05:a1:8f:1c:1a:40:b7:b3:b7:d3:ee:69:d7:80:0c:22:b8:
f0:83:3e:14:f6:86:e1:5c:db:20:e5:ab:bb:9c:51:4e:69:fa:
15:75:3c:8b:f4:2b:c2:ef:cf:11:fa:c5:61:60:56:fa:aa:62:
29:34:a5:df:fb:40:fb:7d:4e:51:3e:86:a4:68:32:8a:61:da:
1c:b6:4c:96:84:2c:50:04:a5:aa:f5:88:7b:4d:53:4e:23:46:
bf:57:99:6b:0d:a7:2f:13:fa:6b:38:6f:b4:e6:38:f1:21:32:
86:2b:a5:d2:43:e8:b6:4a:58:09:32:69:5c:4d:ee:03:ac:2d:
8a:54:93:b6:a8:86:47:7f:64:28:47:9c:99:e6:1d:bd:58:b7:
bf:b2:bf:aa:a2:cc:e1:f0:ff:66:57:b4:77:8e:5c:65:56:30:
5a:ec:0e:72:89:71:99:8e:ba:c0:a8:86:af:56:83:2e:9b:95:
84:c6:f6:36:b3:79:19:91:91:a1:d6:27:f1:ba:56:2f:fb:a7:
5a:4c:b6:b5:60:84:a1:77:6f:ca:72:04:00:a6:e1:6b:37:0a:
99:78:91:e7:2a:9e:7f:df:02:c9:d4:f3:61:dd:63:52:a5:82:
7c:5f:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:24:01 2025 by rpki-client