Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/q_X0HArKn83LKgMSMyHtAohurV4.roa
File: q_X0HArKn83LKgMSMyHtAohurV4.roa (raw, json)
Hash identifier: FfxKx7X9yYtK2ZPRs68V26aIheapRy0B4VAyj/rNZb8=
Subject key identifier: AB:F5:F4:1C:0A:CA:9F:CD:CB:2A:03:12:33:21:ED:02:88:6E:AD:5E
Certificate issuer: /CN=9a9bbdaa00011f6c2f69518895fa023d32d5b7d9
Certificate serial: 0D35A123
Authority key identifier: 9A:9B:BD:AA:00:01:1F:6C:2F:69:51:88:95:FA:02:3D:32:D5:B7:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpu9qgABH2wvaVGIlfoCPTLVt9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/q_X0HArKn83LKgMSMyHtAohurV4.roa
Signing time: Sat 01 Jan 2022 14:59:22 +0000
ROA not before: Sat 01 Jan 2022 14:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24632
IP address blocks: 193.227.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221618467 (0xd35a123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9bbdaa00011f6c2f69518895fa023d32d5b7d9
Validity
Not Before: Jan 1 14:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abf5f41c0aca9fcdcb2a03123321ed02886ead5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:12:01:97:27:7b:d7:4f:59:cf:ed:dc:9f:
bb:bb:83:40:a7:8e:ae:c3:bd:10:67:7f:04:37:43:
49:34:b8:e8:11:5a:78:4e:ea:bd:c5:26:0f:23:5f:
59:5f:2c:43:48:3a:5b:c3:bf:21:cc:bb:b5:07:15:
4f:e1:38:df:be:34:c9:3f:af:cd:91:90:2c:fa:e9:
c4:b8:d3:39:45:fe:da:ed:fa:65:5d:c5:b4:2d:de:
23:8d:1c:7b:91:17:d2:09:9e:4d:b3:b4:ef:c2:48:
e4:36:71:c3:59:ee:2f:02:79:f0:aa:95:83:31:db:
a1:41:3b:09:3a:fb:80:6a:51:cb:b6:a3:7d:ef:a4:
ce:c5:6d:ba:30:6b:3c:a4:52:59:ae:9a:10:e6:d4:
45:8d:99:86:dc:86:ad:7c:8a:c0:10:47:c8:39:9d:
93:9a:cd:2f:c7:61:38:5e:c9:0e:5f:06:b0:26:42:
1a:43:d9:fb:a8:f4:c2:be:42:03:de:ac:37:70:8a:
55:6c:ec:09:b2:88:c5:30:08:26:4c:c0:ac:8c:06:
ab:83:1b:0a:71:c6:98:0d:83:c3:17:f0:25:80:1b:
e7:81:94:74:e5:02:96:98:5e:d4:6f:3b:df:bc:bd:
7a:b5:d9:01:ac:e9:00:77:d9:45:d8:39:60:2c:03:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:F4:1C:0A:CA:9F:CD:CB:2A:03:12:33:21:ED:02:88:6E:AD:5E
X509v3 Authority Key Identifier:
keyid:9A:9B:BD:AA:00:01:1F:6C:2F:69:51:88:95:FA:02:3D:32:D5:B7:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpu9qgABH2wvaVGIlfoCPTLVt9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/q_X0HArKn83LKgMSMyHtAohurV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d5d664-db1b-4899-9515-2b792f1b3230/1/mpu9qgABH2wvaVGIlfoCPTLVt9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:78:6c:fa:77:7f:65:b7:c6:69:2c:7e:af:1e:77:34:97:48:
5b:27:80:47:a0:d1:2c:63:05:3a:63:82:a6:ce:11:f0:c3:bd:
aa:73:e4:7d:c2:9c:4f:d8:36:1e:7e:10:9c:d6:2a:8b:15:c1:
ae:bd:fc:ff:c1:75:8e:fd:bb:5e:bf:db:3e:21:5c:b6:34:59:
0b:52:c8:e7:83:5d:b3:83:94:d7:2e:16:70:45:86:49:fd:9e:
7b:fc:6b:0a:a8:fb:8d:60:d9:89:13:59:da:0d:0f:0b:e7:da:
0c:e8:76:6c:5f:5c:72:9e:dd:17:40:56:29:e4:ef:7f:67:2f:
93:8e:f8:36:30:a5:23:5c:e2:56:74:ab:01:b7:d7:90:c2:65:
2d:62:dc:99:f2:11:e3:76:78:6e:15:94:34:a1:dd:c1:0d:a6:
13:59:0b:d4:26:bc:e8:7c:c5:eb:de:b8:17:ad:d2:e9:41:a6:
b2:16:1d:19:e3:06:a9:85:11:a7:47:08:04:ea:47:6f:e1:a6:
df:86:4d:96:a5:5d:c0:b6:df:40:63:20:b1:6a:d4:ec:15:9e:
ea:7e:1c:03:0e:f6:7f:03:60:19:49:14:87:86:5f:7a:dd:ff:
67:64:e5:6f:62:7a:f0:de:15:2f:7b:d6:c9:48:73:0a:af:3d:
e9:3a:55:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:45 2025 by rpki-client