Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/CQSr_mSGvx_MO501tTIbCtodnJs.roa
File: CQSr_mSGvx_MO501tTIbCtodnJs.roa (raw, json)
Hash identifier: esowCKU64ui4/Ap6GOn6lU0uRgAnfvEQjSsW8NdABkY=
Subject key identifier: 09:04:AB:FE:64:86:BF:1F:CC:3B:9D:35:B5:32:1B:0A:DA:1D:9C:9B
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228DFA3F810C148EB5B3AAEE5E97957C
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/CQSr_mSGvx_MO501tTIbCtodnJs.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29066
IP address blocks: 213.21.228.0/24 maxlen: 24
213.21.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fa:3f:81:0c:14:8e:b5:b3:aa:ee:5e:97:95:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0904abfe6486bf1fcc3b9d35b5321b0ada1d9c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:49:e4:f1:4c:8d:24:7d:39:dd:39:9c:cb:
49:47:38:77:0e:69:82:21:0d:bc:6a:b4:6a:c1:6d:
d3:f6:b8:47:80:44:f1:9d:73:d6:35:ba:4f:9d:cf:
10:2b:32:5d:f0:5d:93:63:6f:25:cf:c8:89:10:b9:
63:67:fb:9d:f8:a1:53:79:85:be:50:50:0f:a4:cd:
94:35:b1:04:b9:a4:94:9c:aa:98:dd:35:d8:76:74:
97:13:d0:17:c5:13:8c:ce:ae:28:33:26:af:34:08:
16:b1:e6:e8:79:29:09:c4:ca:01:11:36:c9:5a:08:
ab:69:cf:d0:d9:63:05:62:cc:21:1a:61:dd:33:a5:
b4:f9:0c:8d:29:a9:62:36:f7:50:cc:ed:33:2e:f0:
00:fa:af:5f:3f:cf:37:de:d1:c3:e4:f2:57:f7:12:
2b:1c:f7:65:09:30:00:32:3c:27:fc:5d:76:63:03:
4f:36:33:d4:3d:f4:e7:6a:8d:0f:fb:ad:ad:ef:6b:
f3:69:f0:a2:db:81:64:ba:c0:3a:89:e1:24:0b:ff:
d2:bb:e6:3e:08:1c:4a:4e:ee:f0:30:56:d6:31:bf:
c5:ea:50:d2:04:fe:4e:f9:7e:8d:67:ab:20:a3:e7:
1d:69:1c:f9:6c:4e:74:6c:ca:95:14:8b:e8:64:26:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:AB:FE:64:86:BF:1F:CC:3B:9D:35:B5:32:1B:0A:DA:1D:9C:9B
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/CQSr_mSGvx_MO501tTIbCtodnJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.228.0/24
213.21.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5b:1b:7a:68:80:66:1d:7e:98:1f:41:d4:ad:61:05:12:86:
c1:50:8b:f8:52:29:d8:21:38:e0:76:93:31:b9:5b:ed:7b:7a:
9d:6c:db:2d:7c:79:43:57:55:88:ef:5e:23:41:fe:18:99:5e:
75:8f:45:08:89:24:2a:68:0d:42:5a:f4:50:c8:d3:3d:71:75:
41:d2:fe:e4:1d:8b:f6:f2:a6:60:95:c3:b9:25:23:1d:5c:5d:
77:eb:96:2d:b9:80:25:2c:34:1d:78:08:69:10:76:0c:68:a1:
88:91:d7:63:8e:58:af:0f:78:34:9c:75:05:be:c7:17:da:9e:
43:a1:73:f3:05:93:75:56:eb:76:0e:10:cd:b6:ad:b5:06:55:
2a:ba:59:72:ac:29:b7:32:5e:90:23:5d:ed:f5:b7:a7:3c:9c:
0f:b8:ad:9a:eb:f8:3c:bf:46:fa:16:2e:cf:13:c9:fd:98:ff:
0d:c8:a2:e1:a7:7b:ba:09:ab:23:89:f7:c6:1b:0b:10:88:80:
a1:3b:e8:15:38:57:dc:52:06:92:6c:3e:dd:42:bb:40:80:d9:
9d:1c:ac:48:6f:74:34:ef:2c:af:14:3f:d9:c1:2d:f6:45:4a:
4f:45:d3:43:0c:75:f0:ab:75:56:2d:2a:9f:99:3b:39:7e:b3:
8d:88:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:25:28 2025 by rpki-client