Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QUI8v1HuiASpdbTDU1b4lk3Tqd8.roa
File: QUI8v1HuiASpdbTDU1b4lk3Tqd8.roa (raw, json)
Hash identifier: Wv8VFUej86Qjhi//J3El9TXewVEL/CoaWUGUP3LOTfg=
Subject key identifier: 41:42:3C:BF:51:EE:88:04:A9:75:B4:C3:53:56:F8:96:4D:D3:A9:DF
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64AEF4B7E1295D20F704AF75CC3E7A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QUI8v1HuiASpdbTDU1b4lk3Tqd8.roa
Signing time: Thu 09 Jan 2025 09:28:19 +0000
ROA not before: Thu 09 Jan 2025 09:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45007
IP address blocks: 82.118.248.0/21 maxlen: 24
91.148.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:ae:f4:b7:e1:29:5d:20:f7:04:af:75:cc:3e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41423cbf51ee8804a975b4c35356f8964dd3a9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:79:82:19:07:d3:d6:1a:06:6c:16:de:54:4c:
19:85:26:39:fc:60:e9:1b:9c:78:d7:b4:08:e3:9d:
b0:a5:60:ae:fd:30:96:ee:5d:91:87:e8:9a:aa:45:
d8:f1:ca:4a:7b:6a:2d:35:ca:14:68:39:8c:94:4b:
7b:a9:48:d5:d7:65:bb:e7:5e:62:f2:a1:69:9a:8b:
9d:93:06:a5:9d:c0:b5:25:23:27:b9:70:e3:9c:91:
00:78:e4:71:b3:c3:aa:5d:12:fd:af:5e:b3:41:ea:
0f:61:7a:93:7c:ac:1f:19:66:5c:17:ac:f7:1d:22:
b3:99:93:74:f2:0b:96:e7:b8:e4:b9:33:4c:41:f1:
2d:11:31:a1:1b:fe:4c:ab:a5:1f:1c:bc:b6:85:45:
e3:e9:f0:ac:3f:e8:af:62:82:23:7d:b9:93:18:14:
fd:70:8d:90:fc:98:0f:a9:16:0d:a3:b4:09:af:f8:
cd:af:f6:a5:ff:22:a5:ca:27:f0:bb:f5:8e:bf:0d:
58:b1:21:ae:8d:1a:50:26:3f:48:5d:2e:84:4d:9a:
75:03:98:ba:e9:86:d4:ee:6d:33:f2:6c:f7:7f:55:
98:d8:66:58:49:b1:6a:9a:9b:22:56:38:15:6a:9e:
17:4a:70:78:a1:2a:23:0f:c7:40:ab:f7:7d:20:a2:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:3C:BF:51:EE:88:04:A9:75:B4:C3:53:56:F8:96:4D:D3:A9:DF
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QUI8v1HuiASpdbTDU1b4lk3Tqd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.248.0/21
91.148.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:6d:09:e7:13:8f:b6:76:05:70:57:96:1e:ff:c6:a8:aa:b9:
b0:88:ff:ce:cd:9b:cb:8e:6b:f5:8b:4d:3b:d6:81:fc:17:85:
7e:b6:dd:98:3d:47:f1:45:ca:ee:34:b6:38:64:d5:8c:ca:f5:
ba:b9:ff:fd:44:65:44:c8:73:ea:12:37:6b:22:b1:65:7a:e5:
99:52:a9:37:94:eb:11:42:cc:9b:a2:d9:34:b7:ce:a7:c8:94:
81:1f:2e:e8:e8:9e:7e:59:68:e5:2f:ba:4b:6b:61:76:9b:49:
b7:b9:1b:dd:e3:a2:bc:df:ff:f0:d7:aa:15:8f:82:09:c4:5b:
14:4c:8b:71:0a:49:bf:af:2c:23:43:d8:4a:16:32:06:6b:fa:
a6:0e:35:8c:17:c6:68:63:c3:73:8b:64:15:ee:23:d2:10:a8:
f8:89:d6:29:20:2d:e0:e8:a5:fe:86:75:40:09:11:9c:d6:5a:
c1:fc:ba:c6:0d:b0:a2:60:ff:47:3f:ac:a8:cf:02:b0:56:6c:
74:71:1a:6e:b8:61:62:28:48:0a:80:6d:98:13:6d:92:c4:68:
b4:04:88:e8:7f:a5:9e:6f:e2:e4:45:10:9d:fe:d8:91:f6:47:
f8:e8:92:4d:c6:29:a5:2b:1b:59:9c:b6:a3:be:d2:fc:59:0a:
fc:0b:e7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:49 2025 by rpki-client