Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/Qfno-jAugdwOIbQTtdk6Qt14vp0.roa
File: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (raw, json)
Hash identifier: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=
Subject key identifier: 41:F9:E8:FA:30:2E:81:DC:0E:21:B4:13:B5:D9:3A:42:DD:78:BE:9D
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 0194221F6FFF27785C33BDFB3A1571AF8BD0
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/Qfno-jAugdwOIbQTtdk6Qt14vp0.roa
Signing time: Wed 01 Jan 2025 13:47:53 +0000
ROA not before: Wed 01 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 193.34.72.0/23 maxlen: 23
193.34.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6f:ff:27:78:5c:33:bd:fb:3a:15:71:af:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41f9e8fa302e81dc0e21b413b5d93a42dd78be9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:43:72:b6:c4:cd:0b:8f:e6:9e:95:ae:89:
0a:43:b0:ed:13:38:a6:30:af:50:ea:67:16:dd:e6:
cd:83:e6:7e:10:1a:41:e7:38:e6:eb:17:33:03:01:
f4:50:30:ee:a6:a1:48:38:80:f5:07:fc:76:75:b3:
bd:f1:67:5b:88:1a:28:c1:11:52:33:61:61:e8:43:
c7:cf:e1:bb:e8:43:83:41:fc:fc:0d:5b:ab:59:02:
33:73:7a:b4:bd:3d:6e:8b:c4:32:3f:2b:3c:72:68:
72:56:6d:10:74:6e:16:67:98:97:e6:55:fd:82:3b:
f2:17:13:3f:ee:3f:ad:6a:e6:c3:73:d5:03:89:55:
66:57:c3:dc:33:48:55:3d:fe:07:ab:b0:a1:39:fa:
30:e9:0c:97:b0:56:fb:88:ff:c7:f5:a1:14:89:9a:
8f:cb:0d:16:bc:45:c9:60:46:fc:e7:4f:24:a8:30:
41:9e:3e:18:31:d1:af:aa:d4:4a:66:40:e3:6a:9b:
40:bc:13:f4:5f:78:b6:9f:6e:b2:22:fc:d4:be:23:
51:b1:68:1b:99:36:6e:47:2d:ce:e0:c1:9d:24:b7:
aa:23:6d:c0:67:16:6a:0d:91:dc:cc:48:cc:b2:7a:
83:25:42:b9:ba:8a:bf:a1:9a:60:fb:e6:35:07:d9:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F9:E8:FA:30:2E:81:DC:0E:21:B4:13:B5:D9:3A:42:DD:78:BE:9D
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/Qfno-jAugdwOIbQTtdk6Qt14vp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.72.0/22
Signature Algorithm: sha256WithRSAEncryption
44:52:34:35:de:85:71:f9:a5:7f:99:3b:92:49:ae:71:d7:39:
17:9e:6c:51:51:d5:49:d8:58:ef:59:44:db:78:7e:b1:e2:0d:
45:06:d8:8c:60:c4:4b:5c:f7:c8:3d:5e:e1:a5:5e:ab:4c:bc:
2f:c5:65:c3:74:3b:48:d0:2a:87:c5:1a:e6:6f:11:ba:ff:d1:
a4:38:25:3b:b2:ec:9b:e9:eb:9c:dd:89:0b:8b:2e:6e:8a:c9:
cb:04:9f:78:93:15:a6:17:d7:fd:d3:8f:25:c8:0f:e3:03:fc:
40:8b:83:08:58:cb:bf:17:56:25:10:91:f0:4d:26:01:f3:0e:
c1:15:38:c8:f0:75:2e:cc:71:f3:45:c2:bb:55:1c:f6:5d:a8:
c6:36:43:21:15:40:2f:20:22:24:79:f8:29:12:80:54:df:46:
3f:56:cc:37:33:b3:04:7e:c5:da:12:e0:38:14:44:97:e0:20:
07:ee:ea:7a:16:3c:09:79:83:c1:0e:46:ef:de:bd:a3:0f:6b:
4f:a7:da:f1:af:39:4c:e6:c5:be:fc:bf:a9:4d:c2:d0:b3:3d:
fe:b1:9c:4d:db:de:38:a6:d9:91:9f:6f:47:52:4e:2d:d5:e3:
8b:b3:bc:19:48:77:d8:76:50:bc:4f:32:1c:af:6d:c8:b4:55:
25:d3:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:57 2025 by rpki-client