Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa
File: qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa (raw, json)
Hash identifier: bNPdsQRy04HtNn/c+rfGq3WnL/GPuEnpubOXCkWKru8=
Subject key identifier: A8:59:25:F5:39:A3:27:B2:50:1F:33:E5:28:45:80:B0:CA:FE:54:89
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 01942521820D82F75C30AE2CE96343639BC4
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 194.42.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:82:0d:82:f7:5c:30:ae:2c:e9:63:43:63:9b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a85925f539a327b2501f33e5284580b0cafe5489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:bf:4f:23:d0:5d:74:98:0b:29:32:55:95:
83:b4:9d:2d:da:3a:ec:0d:bc:74:74:69:96:31:4d:
c0:52:fe:b4:e5:bf:8c:cf:57:61:ac:0c:c0:23:0c:
8e:05:7d:ec:46:92:af:6e:e7:63:03:b8:0b:d1:05:
19:0a:00:63:d7:58:be:30:8f:fe:a4:57:3d:90:0d:
81:e1:66:1b:4a:7c:96:5b:78:ce:a3:c9:46:a6:26:
04:d1:21:fd:2b:33:81:7d:ff:b7:44:65:31:85:47:
1a:6d:96:21:8b:d1:f3:3f:a6:5e:42:f7:06:31:21:
25:41:f5:02:49:11:4b:da:3f:31:52:f0:f9:70:c7:
bf:20:f1:86:0c:bf:0d:89:b1:b7:e0:0e:a4:9e:b6:
30:28:f6:37:bf:71:43:56:90:99:36:f6:44:0b:64:
ce:81:4e:c6:b2:15:17:0c:43:af:4a:7a:d1:87:10:
12:3f:29:83:ba:9b:a5:b1:8c:18:0c:bd:1f:79:41:
65:ec:3b:92:7f:1c:59:b8:47:9b:18:ea:c0:26:c9:
37:d7:29:62:6c:1e:e6:bc:90:df:85:b3:e9:c2:30:
b3:ab:2e:e3:99:fe:28:2e:93:16:ac:09:60:98:94:
c1:80:f5:75:14:5d:8d:57:e6:8f:fa:de:6b:fe:6f:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:25:F5:39:A3:27:B2:50:1F:33:E5:28:45:80:B0:CA:FE:54:89
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.160.0/23
Signature Algorithm: sha256WithRSAEncryption
88:0b:45:f9:00:bd:e0:cd:2b:0f:4c:90:77:81:00:46:2c:3f:
7c:2e:15:d2:f0:e7:62:df:90:c0:55:8b:c9:25:ec:8a:aa:61:
29:f3:f0:5b:d4:30:ed:77:06:ac:c3:ac:d2:84:bc:0a:33:93:
98:c4:e0:b5:19:c9:bd:f6:4b:76:6c:05:ae:06:13:52:76:d8:
90:e2:77:14:56:09:ea:86:ce:69:02:de:e5:50:84:93:a0:32:
c5:b8:95:ea:ce:a9:1a:cb:08:11:c9:68:e1:22:0b:65:7f:c2:
7b:77:7b:cc:ee:4b:59:86:0f:39:fb:95:c9:9b:87:ea:5e:8f:
a9:18:8b:ee:53:9c:07:c6:29:d1:15:b8:d6:5f:61:01:53:66:
b7:d9:77:ff:23:a3:4d:1a:4d:04:be:0d:79:53:0f:8a:45:e5:
b2:3e:49:6b:ea:6c:89:54:83:82:9e:6b:d6:f3:78:cd:2a:97:
d0:68:cf:b8:b8:21:90:f7:e2:a2:80:74:fc:47:90:96:7a:2e:
00:80:f2:d5:91:80:47:b5:91:2b:58:2c:b4:8e:3e:e4:ad:b1:
ba:b7:03:01:f1:02:b1:33:be:68:f0:b8:b1:81:e0:75:ed:73:
c0:b7:27:3c:28:c7:b6:ad:a5:fa:66:2b:58:1c:e1:42:5b:52:
7c:cd:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:37 2025 by rpki-client