Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/QIAcGzg1E-mkwGlMwIaZKUybW5U.roa
File: QIAcGzg1E-mkwGlMwIaZKUybW5U.roa (raw, json)
Hash identifier: vPFlVcoFxwCs0hnXKdVw9v7+IGUFGVEz3iANXdrxvec=
Subject key identifier: 40:80:1C:1B:38:35:13:E9:A4:C0:69:4C:C0:86:99:29:4C:9B:5B:95
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019420684A0E09435F969B1834C72703BAF1
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/QIAcGzg1E-mkwGlMwIaZKUybW5U.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397563
IP address blocks: 80.253.252.0/23 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.136.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.142.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4a:0e:09:43:5f:96:9b:18:34:c7:27:03:ba:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40801c1b383513e9a4c0694cc08699294c9b5b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:d4:8f:72:85:69:ca:02:11:e2:d1:78:bb:
c0:8e:b8:50:b5:84:aa:90:36:45:ca:12:5a:07:2b:
48:c9:7c:ec:5b:26:0c:ef:15:29:a6:ce:ea:7f:41:
23:bb:72:b7:bd:7b:9d:55:64:70:10:46:e6:12:e9:
76:fa:5b:b2:09:5f:27:91:82:fc:25:33:a2:50:57:
b3:da:af:d1:21:bc:9d:02:5b:86:2f:47:f7:68:b0:
db:78:6d:9a:f3:5b:d1:bc:0c:37:5d:33:13:40:72:
01:1e:19:08:7d:b0:12:f4:c7:0b:10:fd:30:b1:e9:
1e:a8:88:7e:cb:95:54:2b:5e:06:be:12:c9:2c:42:
c8:60:05:54:c4:0f:cb:e9:60:69:75:6d:96:03:bf:
05:73:ea:9c:1a:6e:1a:14:1c:4a:84:8d:9a:e0:d4:
9c:3e:cf:9e:29:9a:8e:1e:43:04:7c:cf:1b:a9:4d:
c7:95:9b:c6:b4:22:a0:1a:c0:aa:ec:3d:5f:f1:e0:
69:4a:87:48:48:d2:31:de:8a:36:f7:7e:a7:37:65:
25:d7:6b:ad:33:1a:f6:86:7e:4b:92:b3:69:66:99:
6a:bc:b5:a7:e4:cc:0a:ef:76:c4:d8:11:37:98:a4:
a0:78:39:e4:fb:ef:34:65:f0:52:3f:00:7e:63:9e:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:1C:1B:38:35:13:E9:A4:C0:69:4C:C0:86:99:29:4C:9B:5B:95
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/QIAcGzg1E-mkwGlMwIaZKUybW5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/23
91.151.80.0/24
91.151.82.0/24
91.151.91.0/24
213.142.128.0/22
213.142.136.0/23
213.142.142.0/24
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
55:98:28:cf:d0:7d:14:54:41:49:87:48:20:c3:72:b7:c5:c4:
b9:7f:dc:34:f5:29:61:14:7c:d8:a9:7a:8b:90:26:75:46:5c:
88:3a:9c:76:fe:61:96:10:3d:98:1f:a9:f9:e0:9b:ca:20:44:
bd:09:20:83:02:14:2e:3a:61:f9:0b:cd:22:98:80:82:bd:20:
4e:25:88:64:52:c8:46:0e:ab:36:6e:c8:5a:b0:84:b3:41:d0:
8b:c7:00:66:cc:39:1d:ad:52:eb:62:91:a0:de:d0:60:1f:a8:
3a:22:f2:ed:83:de:2f:1b:90:2e:0d:cd:5a:51:e8:c0:b7:bf:
47:c4:38:87:d3:54:70:4b:0f:d3:7a:24:43:49:bf:43:7b:1d:
91:16:c6:5b:4e:ee:eb:e9:28:e3:61:f0:1c:16:d6:c7:83:80:
f3:1c:0e:3f:ed:69:d4:db:21:cf:26:f9:66:95:e8:0e:92:91:
bb:e6:79:5b:81:ed:3f:56:6b:8f:ee:a2:5b:dc:4b:47:35:08:
6d:e7:23:da:b4:2d:f6:dc:d8:b0:89:db:af:24:ea:f4:51:2f:
44:fa:9c:97:af:07:14:df:8b:e5:d7:22:7b:c5:a8:c7:45:ae:
30:5b:f6:fd:ba:df:3f:48:47:21:81:02:51:45:52:fc:23:f3:
df:4f:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:12 2025 by rpki-client