Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/QwYq6ZmZhp2cg_qDnQtGdDcCBW0.roa
File: QwYq6ZmZhp2cg_qDnQtGdDcCBW0.roa (raw, json)
Hash identifier: 79uoXPDq9Zs4u17vgj2x1V091NB/Vd4XB662CZTLpxQ=
Subject key identifier: 43:06:2A:E9:99:99:86:9D:9C:83:FA:83:9D:0B:46:74:37:02:05:6D
Certificate issuer: /CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Certificate serial: 0182F529537B9DB9CCDC8CFA5E9DE7180C6A
Authority key identifier: 5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/QwYq6ZmZhp2cg_qDnQtGdDcCBW0.roa
Signing time: Wed 31 Aug 2022 18:28:22 +0000
ROA not before: Wed 31 Aug 2022 18:28:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35470
IP address blocks: 87.239.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f5:29:53:7b:9d:b9:cc:dc:8c:fa:5e:9d:e7:18:0c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Validity
Not Before: Aug 31 18:28:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43062ae99999869d9c83fa839d0b46743702056d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:50:c9:68:10:2d:c6:5b:b3:34:83:54:13:e0:
4c:f5:e3:50:bb:57:57:4e:8f:cf:9b:c5:5f:fd:f5:
ab:04:15:cc:c0:e4:1b:3d:89:3c:43:cd:25:6a:a5:
34:83:7a:5c:64:da:93:66:a7:b8:7f:13:3e:02:35:
b3:db:4e:67:2d:80:46:01:fa:fd:dc:f7:3a:f5:0c:
74:2d:bb:cc:57:09:6e:12:77:58:08:a0:0d:0b:d6:
f0:be:c5:85:4e:b2:0a:11:a0:2c:67:e1:0a:4c:49:
b8:3d:83:67:bd:80:95:f3:e6:1e:29:63:1f:12:3f:
38:7c:ed:6e:f5:08:dd:8e:7b:a4:f4:f6:7a:a1:3e:
f0:3e:dc:7e:c5:d0:d9:62:d5:83:c3:06:8e:80:9e:
5a:75:a8:b8:49:bb:7b:42:b5:7e:c7:ea:c2:42:e2:
ba:1d:25:a9:36:1e:38:cc:cc:67:19:2c:5e:18:8e:
b8:f7:4b:03:19:1b:10:32:f1:9c:3b:cb:20:cb:b7:
0e:6b:32:c4:2b:1b:fd:89:2b:d9:87:f0:b1:92:70:
d3:c1:a1:84:ca:bc:db:18:c0:13:13:db:a7:69:d5:
7e:8c:fa:89:3f:33:50:3e:53:fd:43:5b:71:46:96:
5c:75:e6:54:bb:74:76:c5:15:24:17:f9:a3:a4:7e:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:06:2A:E9:99:99:86:9D:9C:83:FA:83:9D:0B:46:74:37:02:05:6D
X509v3 Authority Key Identifier:
keyid:5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/QwYq6ZmZhp2cg_qDnQtGdDcCBW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/XbPKebuql1PeKlZEjEkB8wZ-Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.11.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f4:9f:33:c2:6f:9c:b2:8e:78:25:7a:9b:ad:c3:7c:56:80:
da:12:70:91:7c:fd:eb:5d:4e:0e:7e:68:3a:bf:ab:cd:b4:2e:
4d:fe:27:96:bc:e1:98:92:96:41:ef:53:bb:59:0f:3a:3c:d5:
10:fb:30:8c:87:f2:bb:67:c4:6d:c3:94:c8:68:79:82:6f:9d:
92:c6:3a:6b:eb:82:cc:61:a0:15:5d:d0:91:52:b7:36:02:64:
aa:48:c9:5e:bb:66:e8:59:fb:04:81:28:72:a8:b8:a5:2a:2e:
cd:3e:9e:b3:c9:b4:b5:18:f1:9e:f3:6a:f3:43:be:57:3a:59:
12:45:51:13:04:86:dd:79:f0:70:8c:46:5e:b0:48:46:4d:12:
54:ba:97:b5:0a:3c:6f:ee:c4:38:2a:57:33:97:8c:fc:d1:18:
a5:5e:84:d7:41:1d:2f:51:b6:ea:c4:73:5e:7f:32:53:74:bd:
13:3a:b6:46:32:e9:80:05:a7:36:b9:f1:a8:18:d1:02:46:86:
7e:46:fa:0a:03:ec:3e:9a:4f:40:fd:f5:c1:cd:0d:bb:ec:f9:
4b:b2:f7:71:0f:16:dd:e2:9f:e4:50:b2:c4:72:61:64:0f:77:
6d:d2:66:40:0f:73:51:dd:94:53:e6:9e:7b:bb:dc:71:65:57:
42:12:b7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:44 2025 by rpki-client