Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QFWm1lzOqgwpIgLlCYUOKzuHejQ.roa
File: QFWm1lzOqgwpIgLlCYUOKzuHejQ.roa (raw, json)
Hash identifier: j9hGO5IT5WZ912Z/Q+kWBjA1k/Y3WWeJsGPFql+7CJA=
Subject key identifier: 40:55:A6:D6:5C:CE:AA:0C:29:22:02:E5:09:85:0E:2B:3B:87:7A:34
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB15260384CFF12D3FEEF473C8531D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QFWm1lzOqgwpIgLlCYUOKzuHejQ.roa
Signing time: Sun 01 Jan 2023 10:05:26 +0000
ROA not before: Sun 01 Jan 2023 10:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211564
IP address blocks: 192.165.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:15:26:03:84:cf:f1:2d:3f:ee:f4:73:c8:53:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4055a6d65cceaa0c292202e509850e2b3b877a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:b3:0d:4d:06:26:6a:e1:1f:64:ca:cf:08:
f9:11:72:4c:50:43:44:a4:9a:35:c0:54:dd:d5:2d:
dd:7d:bd:0c:cd:a6:e0:5a:81:90:bf:78:23:33:2d:
b1:d9:0d:fb:d5:d6:fa:d1:b0:2c:2b:c3:c8:60:37:
16:9f:03:d5:1b:f8:9a:68:fd:e9:98:5e:cc:64:7d:
4b:db:f0:0e:b6:36:5a:cf:dc:e0:b7:00:cc:cc:a2:
45:65:39:ce:2c:ed:5c:a4:6d:c1:e9:d8:9f:51:d5:
11:36:52:25:12:ba:29:18:c0:6e:7d:8f:bd:c6:6c:
76:18:0d:dc:36:1d:07:94:d9:f6:2f:37:e2:dc:61:
57:85:42:8a:55:cf:39:6b:fb:ee:e1:a1:bf:eb:bf:
c1:1d:ae:54:ba:dc:bc:db:45:c3:88:1d:03:8a:63:
77:66:b5:89:72:42:b3:fc:6c:33:e2:2e:3a:2f:b1:
1d:c3:ac:88:fa:56:a5:04:21:f9:f2:9b:81:05:56:
f3:3e:df:eb:80:40:90:50:32:82:7a:39:4d:55:72:
b4:ec:a5:22:5a:67:95:92:bd:e2:84:3e:61:4b:bf:
dd:82:0b:cd:4e:11:5b:70:10:1d:ce:0e:3a:ca:d9:
f3:fc:41:b4:4c:00:cf:54:31:99:42:62:30:b4:f6:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:A6:D6:5C:CE:AA:0C:29:22:02:E5:09:85:0E:2B:3B:87:7A:34
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QFWm1lzOqgwpIgLlCYUOKzuHejQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:68:8f:4d:0d:73:b8:74:b6:42:5f:fb:4e:aa:a1:16:77:42:
92:18:66:22:55:62:ce:2f:60:e4:b8:c3:59:a3:ef:a3:cc:2a:
dc:88:7c:07:7c:6f:ba:40:e2:42:97:61:5b:58:70:86:37:39:
6e:a4:f1:ec:f5:c2:56:e7:fc:07:1a:73:88:be:06:8a:5e:76:
ec:8f:10:93:c8:dc:89:9f:30:aa:bd:32:d8:6a:8c:25:d9:c9:
ae:e5:4b:db:a7:f4:4f:0e:aa:2e:96:e9:9e:dd:da:c6:11:4b:
90:8f:b9:5b:00:b3:31:01:6f:04:91:28:fd:83:89:39:fd:84:
b0:4f:f3:56:1d:e0:a9:eb:08:56:e3:e1:74:d9:29:80:a1:d4:
f5:a4:f2:f3:6d:97:5f:1b:57:de:5f:78:4b:fb:e1:10:78:b7:
68:1e:23:a7:8e:06:d2:79:fa:dd:0d:9d:0b:cf:74:a7:0c:b6:
b1:79:e5:d8:01:e3:2c:1d:00:e7:14:4c:26:13:0e:ed:32:f1:
2c:0f:af:dc:1e:46:bb:f4:46:51:5d:de:88:17:56:d2:4d:d3:
7a:0d:41:59:19:b7:6e:f2:ff:b5:52:6e:fa:22:bf:6a:7e:f8:
8c:27:cf:ed:b3:36:99:65:1e:cc:be:8e:4a:0e:37:f2:af:34:
c6:14:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:10 2025 by rpki-client