Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/qdm72qGAbed4Ja9qgaCiJYe38N8.roa
File: qdm72qGAbed4Ja9qgaCiJYe38N8.roa (raw, json)
Hash identifier: f/KJ6vPoBxPJv3GdeEp0uOEa1rCQ2vCgQYAeHqaXSRo=
Subject key identifier: A9:D9:BB:DA:A1:80:6D:E7:78:25:AF:6A:81:A0:A2:25:87:B7:F0:DF
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019421B1B9A5B860E51BA4E7AEA781B33D6A
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/qdm72qGAbed4Ja9qgaCiJYe38N8.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20668
IP address blocks: 193.164.143.0/24 maxlen: 24
195.189.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b9:a5:b8:60:e5:1b:a4:e7:ae:a7:81:b3:3d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9d9bbdaa1806de77825af6a81a0a22587b7f0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:ed:55:31:9e:66:88:d9:f4:b6:dc:d8:8a:
0f:9e:b5:71:c9:ba:4c:f6:31:bc:6c:ff:b2:98:10:
ce:45:30:c5:68:ff:66:bc:41:91:15:4c:ee:8e:87:
a9:fb:0f:b5:01:77:d5:9c:fb:97:1e:86:52:f3:e1:
38:62:2e:06:cb:7b:ce:c7:b7:b6:36:23:67:8b:1a:
65:f1:61:d5:75:7b:c0:50:11:49:96:28:87:63:05:
6d:ab:1d:f7:14:bd:a8:17:d3:30:e9:7b:70:9a:f5:
b1:ee:c5:54:61:08:44:8b:e3:1a:3a:48:00:3a:08:
5d:26:50:62:44:38:be:39:b4:95:40:21:15:60:ae:
2a:f4:ce:a3:b1:1e:ec:e3:c6:f3:17:d4:d1:54:2b:
f9:60:10:03:eb:bb:8b:e9:5c:9d:3c:7a:a1:20:47:
fb:d6:56:1b:bd:b6:2e:78:93:a1:e9:dc:ea:c8:af:
fe:bb:13:6b:48:50:d4:25:31:8a:7f:07:50:57:da:
54:f9:eb:ad:6f:ae:97:b4:cd:e5:1c:f3:6b:0a:15:
60:0b:d8:17:71:d1:63:49:95:b0:b5:c7:16:7a:9f:
78:cc:12:59:d9:2b:3f:02:ac:2b:08:db:4b:18:4a:
17:75:07:ff:df:33:7a:cc:0c:18:fe:f6:28:4e:f0:
a1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D9:BB:DA:A1:80:6D:E7:78:25:AF:6A:81:A0:A2:25:87:B7:F0:DF
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/qdm72qGAbed4Ja9qgaCiJYe38N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.143.0/24
195.189.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e5:84:ab:72:2e:08:ff:9b:3f:42:9a:bd:33:54:42:f1:a6:
f5:28:72:50:4e:be:4d:cd:1f:40:2a:87:65:41:22:11:82:c3:
f0:57:0c:5f:62:2c:89:52:fa:58:ae:fc:b3:58:d8:85:5d:7a:
b8:d3:59:d5:15:f6:3c:a3:01:ef:ba:d2:40:de:68:de:1b:f0:
8a:05:f9:94:ae:a8:06:90:13:7c:af:a0:60:c8:29:00:00:e0:
fe:0b:e4:76:7f:61:be:c2:33:80:d7:9d:73:8d:3e:1a:c5:7f:
b1:3c:76:39:39:03:ce:69:a2:ff:ed:e6:28:a6:9f:fe:17:ee:
12:3f:b0:3c:aa:40:1c:b7:d9:e8:e7:4c:88:3b:e5:89:4b:93:
9c:69:f0:1b:65:55:5a:53:20:2a:51:4a:cc:37:e0:9f:f9:7a:
01:47:08:66:e8:44:06:8f:01:13:e8:bf:c9:4b:6e:ad:9f:2a:
17:39:93:bb:a3:c0:7e:7f:ad:16:8a:75:32:4e:11:29:85:2f:
d9:f0:a0:ec:a4:d4:50:53:16:89:aa:83:fd:9a:fc:0e:e3:e4:
4f:ab:ad:20:b0:86:19:7b:62:9a:70:85:a8:85:e3:1b:9b:48:
e9:c8:2c:36:ed:67:cb:a7:c0:c0:6b:5d:93:aa:1a:49:31:3c:
73:07:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:54 2025 by rpki-client