Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa
File: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (raw, json)
Hash identifier: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=
Subject key identifier: B2:AC:2F:24:EC:8F:4C:2A:B9:B1:99:2F:37:93:DB:7E:FB:F1:86:08
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 01942825936D8BDB0CDB6535586E1C835F23
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa
Signing time: Thu 02 Jan 2025 17:52:18 +0000
ROA not before: Thu 02 Jan 2025 17:52:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209943
IP address blocks: 194.56.221.0/24 maxlen: 32
2001:67c:28ec::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:93:6d:8b:db:0c:db:65:35:58:6e:1c:83:5f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jan 2 17:52:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2ac2f24ec8f4c2ab9b1992f3793db7efbf18608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:2c:32:f3:89:c2:2f:e9:bc:84:e6:0b:a9:
a5:34:ee:aa:94:5b:56:28:83:54:42:03:91:11:d9:
ab:c3:ff:db:c3:81:14:e9:e5:d6:fb:6b:e1:ca:b2:
65:50:9e:02:ad:6a:27:49:50:01:db:1e:63:53:ae:
6a:29:d4:aa:86:94:b9:4b:26:84:53:21:15:e3:3e:
8d:0c:6f:00:2d:50:02:10:5a:49:47:89:63:73:11:
0b:44:e8:94:07:d6:0e:2e:6b:21:30:73:35:2c:71:
1c:fe:59:3c:68:df:8a:72:ff:7c:e0:f0:68:27:97:
b8:92:5d:05:49:35:3e:fb:25:9b:8a:22:00:c7:ae:
ef:48:b2:24:f1:eb:bf:3a:4b:a4:e4:a3:90:28:ff:
d6:5d:21:11:ab:03:42:07:b6:f5:7d:cd:ef:34:89:
d6:6b:94:67:39:87:f8:39:f1:5f:75:7a:61:ff:bb:
9d:39:ce:58:75:7e:21:2d:5c:fe:8e:0b:9f:63:2a:
53:0e:55:64:9d:5e:fd:79:24:0c:79:51:c2:37:57:
cc:fa:06:8d:d4:3c:6a:8b:67:d6:59:ee:17:ff:ff:
d4:84:cc:8e:e6:06:da:13:e6:5b:77:f7:62:6e:4d:
6b:d7:55:d8:d0:f8:13:0c:3d:46:be:0d:88:b5:7a:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AC:2F:24:EC:8F:4C:2A:B9:B1:99:2F:37:93:DB:7E:FB:F1:86:08
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.221.0/24
IPv6:
2001:67c:28ec::/48
Signature Algorithm: sha256WithRSAEncryption
60:b2:48:66:d2:7a:8d:fc:33:ae:3e:de:ab:be:19:e1:b9:ec:
c1:2b:24:d8:84:a0:d6:32:c5:20:2d:be:c0:63:e5:a9:9f:35:
28:fd:1e:1d:00:f4:2f:89:0c:bb:cd:f2:bd:a5:51:90:50:7b:
09:a2:3a:ce:d5:54:5e:7a:fa:cb:a4:6e:38:53:96:e4:da:de:
25:b4:b4:db:35:df:ad:c7:61:f8:39:a7:36:30:af:b7:42:86:
43:2b:ee:28:9a:42:04:5c:0e:b6:e3:bc:b4:0a:44:dd:13:20:
b4:4a:77:81:a5:9b:12:b9:31:b7:7c:17:c5:2e:b6:2f:2f:a8:
52:96:ea:c5:69:d9:4a:d6:b6:f2:9d:61:96:a2:e6:a5:35:8f:
89:4f:dd:18:bc:25:1e:32:e0:f0:d6:d6:f9:82:81:27:42:c4:
84:39:e0:75:14:30:92:b2:c5:dc:a5:f4:df:3e:65:24:55:0b:
2f:e8:fe:07:9b:e6:ff:b9:31:d9:17:8a:de:50:80:52:b3:52:
4f:f5:67:4f:12:96:cf:b8:00:ff:06:ba:2c:6c:e1:7e:de:b3:
37:ff:b1:2b:e0:2c:5e:76:3d:0e:bf:dc:73:75:a8:3b:0d:e3:
d0:7a:32:a5:be:7e:d8:8e:dc:32:2a:80:76:47:87:85:31:28:
01:14:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:35 2025 by rpki-client