Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/QSEOG3c1R6giDFhGCuTe0hYZpjc.roa
File: QSEOG3c1R6giDFhGCuTe0hYZpjc.roa (raw, json)
Hash identifier: GcRtBuCCVULsQO2wY/DVulhch7pAYDf/l9JF+bQ2VBo=
Subject key identifier: 41:21:0E:1B:77:35:47:A8:22:0C:58:46:0A:E4:DE:D2:16:19:A6:37
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FD2EFC6B7D561B05EE91ADD4A8475
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/QSEOG3c1R6giDFhGCuTe0hYZpjc.roa
Signing time: Wed 01 Jan 2025 13:48:18 +0000
ROA not before: Wed 01 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211985
IP address blocks: 157.25.143.0/24 maxlen: 24
157.25.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d2:ef:c6:b7:d5:61:b0:5e:e9:1a:dd:4a:84:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41210e1b773547a8220c58460ae4ded21619a637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:3b:56:6d:82:0d:9c:23:67:ff:8f:5a:b5:
fe:c9:21:69:6e:f1:e6:4f:b7:fa:08:a8:40:45:fe:
ba:d0:ca:0a:f2:14:03:cd:e9:d5:0b:65:e4:fa:85:
76:3d:f1:b0:f5:5a:51:6a:97:9a:80:47:82:9c:73:
9d:67:5c:b6:26:a4:19:4d:7a:2a:2c:bb:be:55:72:
0a:72:3f:e3:d5:ce:d1:aa:37:17:e7:ad:37:9e:c4:
2e:92:79:66:a3:13:62:e2:7f:ce:f4:8f:88:a9:60:
c2:5f:1a:36:c8:21:0d:ce:b4:23:e5:4c:a3:55:76:
85:57:c1:d7:b0:0a:26:b6:45:ec:04:55:48:29:11:
b5:b8:91:f4:c2:c6:4b:11:8c:17:e5:ea:fb:20:3a:
6a:cb:56:8b:ad:21:4c:06:b8:8a:a7:d2:12:80:90:
74:98:31:c1:cd:a4:f0:c6:f2:75:4c:be:dd:58:f5:
bf:19:27:6f:42:9c:b6:c6:3c:18:32:9b:31:39:ef:
bd:37:74:27:c2:d0:c7:82:2e:6f:4e:8c:53:4d:11:
89:9e:dd:98:06:8b:a4:7c:b6:bb:f5:35:ac:d8:69:
1a:08:1b:d5:17:67:9e:4c:ad:8d:bc:49:0b:a3:e7:
53:5e:1b:36:17:11:62:fd:d8:07:3f:7b:d8:69:86:
12:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:0E:1B:77:35:47:A8:22:0C:58:46:0A:E4:DE:D2:16:19:A6:37
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/QSEOG3c1R6giDFhGCuTe0hYZpjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.143.0/24
157.25.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:98:51:fe:53:b2:da:8b:e7:f1:fc:28:17:fc:a9:1e:44:b6:
25:c2:1a:7d:5f:af:46:04:3a:ed:28:0e:d6:98:98:8e:0c:f6:
8e:48:e5:d5:e7:74:06:3b:4f:5a:b7:b0:8c:09:15:dc:8a:f0:
c2:da:59:20:36:89:ba:f9:e5:db:9e:24:41:62:a5:01:d3:48:
7b:53:82:da:76:29:b2:ba:7e:f6:e2:35:c1:25:41:4c:d7:dd:
c7:e9:8e:e4:24:f0:aa:8d:41:ae:1a:2d:8b:a6:a5:3d:c6:f9:
60:d5:23:9e:63:c7:3c:fa:81:bb:57:0c:4b:79:3d:80:f1:50:
9a:34:96:70:9b:c4:d9:48:08:bd:18:28:26:22:e4:53:c1:2a:
3b:27:01:e0:19:af:b2:cf:b6:cf:83:8c:04:cf:c8:18:8e:00:
53:b6:d3:fc:17:94:da:e9:77:d6:74:9e:c9:d5:cf:ba:f5:8f:
61:76:fe:1b:fc:fc:2e:bd:dc:15:c0:ba:a2:a2:d7:61:1f:ff:
a8:dc:d2:23:a5:f0:89:75:07:b6:81:5a:06:4f:be:4e:1a:0f:
ad:14:81:7e:52:9b:63:45:d9:f9:c2:bd:56:e0:59:86:78:ed:
8d:04:6a:b9:ce:00:ba:b2:ef:93:e2:bf:eb:7c:55:69:57:88:
80:cf:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:40 2025 by rpki-client