Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/QcvRhttiBkUSguN78DFU_Ko1lHs.roa
File: QcvRhttiBkUSguN78DFU_Ko1lHs.roa (raw, json)
Hash identifier: WRNDQjLFiw5ucbOARYK4WH9c2oU9ppyyjuSJBlKSvDc=
Subject key identifier: 41:CB:D1:86:DB:62:06:45:12:82:E3:7B:F0:31:54:FC:AA:35:94:7B
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0187028CFFF9C1A16D28AE7B3C65FA33E620
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/QcvRhttiBkUSguN78DFU_Ko1lHs.roa
Signing time: Tue 21 Mar 2023 05:03:27 +0000
ROA not before: Tue 21 Mar 2023 05:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:02:8c:ff:f9:c1:a1:6d:28:ae:7b:3c:65:fa:33:e6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Mar 21 05:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41cbd186db6206451282e37bf03154fcaa35947b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:f3:05:78:2e:64:35:f3:be:03:be:a7:40:
46:88:38:49:f8:c2:a0:0b:01:c8:58:2f:8a:12:34:
86:84:4a:35:63:0f:d8:26:84:34:17:ed:37:9e:9c:
01:fd:bd:0d:50:da:ef:bb:be:a7:d0:ee:59:a0:e1:
3a:f0:88:ed:38:89:ec:f4:dc:24:6a:bb:4f:90:0b:
11:09:11:59:2f:ee:8f:4a:74:db:fa:73:61:52:35:
58:85:7c:83:7c:a9:a3:e1:19:0c:92:42:4e:e4:e6:
eb:f8:c8:31:7a:c9:16:e3:6c:f4:02:79:ac:7d:05:
7d:22:4f:19:0f:87:28:ef:3c:54:4e:ac:f9:f7:15:
9b:d7:0a:24:a1:d5:a0:b1:c1:ac:04:93:4f:0e:1a:
18:fb:c0:b2:11:42:c1:83:3d:12:59:48:8f:70:03:
4b:6f:17:a0:6b:2f:2e:59:e4:9a:13:ce:73:72:b4:
ae:76:06:f5:5b:e6:ae:d6:90:56:23:52:f7:93:4e:
3d:94:16:07:e7:6e:bb:47:7e:f5:ca:ef:0b:c4:2e:
4a:79:54:94:75:f4:45:65:0b:d8:d6:cd:8c:10:98:
f4:07:be:af:5b:a7:81:f3:cb:0d:8f:60:fa:cd:5c:
0b:ca:16:6e:aa:15:1b:0f:b3:a9:39:26:a2:cb:e4:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CB:D1:86:DB:62:06:45:12:82:E3:7B:F0:31:54:FC:AA:35:94:7B
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/QcvRhttiBkUSguN78DFU_Ko1lHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f2:f3:12:0e:2a:8d:0c:c8:26:c0:91:45:66:d0:d3:e9:cb:
56:25:f1:8e:c2:5a:01:6c:19:5f:ef:4b:eb:d0:c2:bd:17:88:
b1:8c:08:8b:f2:54:2f:88:fe:b6:2a:be:94:80:c7:6d:03:4c:
e8:7d:99:44:c7:a0:ba:1d:72:8f:f4:b7:82:00:20:fa:9f:68:
18:0a:39:4d:91:1e:fe:68:f5:5f:3f:9f:f9:16:9b:68:dd:9f:
0e:e6:fb:bd:60:7a:af:93:2f:8e:6a:60:d5:cd:6d:12:24:bc:
86:11:b2:7e:44:d2:47:a2:e0:71:ab:fa:dd:76:f3:a3:a4:31:
c9:3e:60:66:ec:c0:c3:80:ef:8b:c6:e7:50:fb:0e:a4:75:39:
6b:9b:57:b1:12:ac:9a:5d:d8:83:e4:30:74:3a:1d:55:7e:a9:
c7:ce:9d:63:06:04:0b:7a:50:8a:e0:2b:6f:e7:00:99:7d:dc:
51:36:96:0c:96:69:94:73:1f:27:e3:cf:d3:64:b1:10:a6:77:
93:17:b8:a2:56:ca:07:91:84:aa:66:11:91:53:68:fa:fa:b3:
d1:c7:bc:7c:e9:cf:e3:69:cc:86:1c:10:75:5e:5b:90:83:47:
9d:2b:59:28:eb:40:3a:7d:06:c7:7d:cd:fb:37:ab:15:0a:6e:
2b:da:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:46 2025 by rpki-client