Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/qqCgMFCXnwIZz9uTU81FoXmcBE0.roa
File: qqCgMFCXnwIZz9uTU81FoXmcBE0.roa (raw, json)
Hash identifier: +UcRySHg4YiJNOm3BmNFnGj2lkLnjDMa276WIPY7Bs4=
Subject key identifier: AA:A0:A0:30:50:97:9F:02:19:CF:DB:93:53:CD:45:A1:79:9C:04:4D
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018313F0AE08C93BF8B35BF7E8B6A4081A42
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/qqCgMFCXnwIZz9uTU81FoXmcBE0.roa
Signing time: Tue 06 Sep 2022 17:54:43 +0000
ROA not before: Tue 06 Sep 2022 17:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 45.8.216.0/24 maxlen: 24
45.8.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:f0:ae:08:c9:3b:f8:b3:5b:f7:e8:b6:a4:08:1a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 6 17:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaa0a03050979f0219cfdb9353cd45a1799c044d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:87:7c:e8:8d:70:cc:91:8a:91:30:2f:22:16:
4e:40:bf:76:be:5d:9e:6e:06:06:da:37:4c:fb:a5:
69:97:12:1e:ce:8f:26:1e:c9:82:b2:fe:03:0c:97:
ad:19:0d:a6:b5:7f:8f:0c:b1:15:64:63:df:ca:97:
10:c1:ba:89:28:ae:a9:a3:8b:8a:fe:63:ac:65:c8:
42:d9:a0:18:ba:09:de:e5:ee:6b:28:84:8b:88:ec:
5b:26:fb:b1:cc:69:8b:d7:83:b2:e7:74:c6:1f:db:
f8:e7:a9:b5:50:9e:33:46:3f:66:c3:20:ed:91:ae:
01:00:c4:f0:eb:c7:af:01:b1:43:c9:df:63:d4:db:
ae:21:ce:dd:7e:44:8d:90:16:d1:9b:f6:86:80:e3:
71:d0:e5:0d:c0:42:ca:ef:a1:c6:d8:e8:45:eb:ab:
6f:87:2e:04:6e:7b:6e:13:14:7e:14:83:b6:a5:e6:
a6:01:5a:02:ac:50:25:63:b5:c6:da:b0:10:57:05:
a4:3d:f2:da:85:55:be:97:25:92:34:1a:34:10:ec:
72:c9:de:47:66:ae:5d:06:92:1e:33:a5:47:7f:9d:
b2:1c:2b:6c:15:3b:f9:92:78:84:30:49:9f:a3:ae:
15:06:d3:d9:d2:84:f7:c4:73:4e:22:a2:9d:1a:57:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:A0:30:50:97:9F:02:19:CF:DB:93:53:CD:45:A1:79:9C:04:4D
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/qqCgMFCXnwIZz9uTU81FoXmcBE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.216.0/24
45.8.219.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b5:4f:c7:69:61:1e:fa:53:98:92:0d:5b:c8:e7:48:4c:b8:
6e:f5:08:f9:61:76:bf:f4:dc:82:42:fe:24:87:39:43:b0:88:
aa:24:94:bb:ee:5f:0f:98:57:d5:34:01:2f:34:7e:d7:2c:c8:
25:31:b0:3a:f6:51:ce:ce:ec:b4:5c:a2:44:0e:7e:46:a1:02:
53:41:c5:cf:67:73:73:a1:67:23:b8:01:0a:1e:4a:4b:be:5e:
f3:35:49:fc:49:24:f1:9e:41:80:55:93:41:08:12:b1:52:6e:
38:76:19:2a:55:89:91:d3:44:c1:15:1c:07:66:25:79:fe:4b:
29:c9:8e:b9:b2:e6:20:b5:55:e9:ae:99:62:07:cf:e3:b0:be:
62:e3:47:a9:e1:73:dc:1e:71:b8:20:3a:30:43:bf:e1:34:d7:
0d:2b:b9:e8:b0:28:85:19:20:58:e3:11:5c:8f:05:ee:07:72:
cf:9b:36:0f:ba:95:7f:2a:1c:1e:11:0a:ac:ec:48:10:74:ef:
f0:11:96:e3:b1:e6:fa:6b:44:4f:68:fa:7c:7f:bd:6c:01:a8:
43:e1:1d:8c:84:38:cf:33:c1:d5:e6:0b:1e:a7:6b:41:0f:4c:
9d:b7:ca:83:b7:12:d3:2e:05:8f:1d:29:26:4a:2b:30:57:14:
f2:54:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:12 2025 by rpki-client