Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QLDsx43ZuNwJUw1ElNMN5hfB2JQ.roa
File: QLDsx43ZuNwJUw1ElNMN5hfB2JQ.roa (raw, json)
Hash identifier: a/UQH7zne7mzJTAHK7qSceis+kolGJKP8f+kvXzCzYM=
Subject key identifier: 40:B0:EC:C7:8D:D9:B8:DC:09:53:0D:44:94:D3:0D:E6:17:C1:D8:94
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274871D2A34425E3E3A55CBB18C3FA38
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QLDsx43ZuNwJUw1ElNMN5hfB2JQ.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203245
IP address blocks: 194.71.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:71:d2:a3:44:25:e3:e3:a5:5c:bb:18:c3:fa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40b0ecc78dd9b8dc09530d4494d30de617c1d894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:50:1f:05:a6:59:cb:44:55:bc:2e:d5:e0:
6e:4e:e4:ba:dd:f0:92:8f:ac:52:ae:68:2f:39:47:
a7:01:8a:36:ed:0b:fe:b7:e3:19:af:44:41:6d:56:
20:16:77:9b:09:f5:6b:63:22:d3:0e:f4:05:ca:e4:
ff:89:8e:0a:fb:16:5c:56:a4:0d:63:4e:8c:36:5e:
c8:81:e3:33:8c:89:61:97:8c:b3:38:4b:c4:9e:d0:
54:06:4d:73:2b:86:7e:78:e8:22:fa:e1:e8:8a:c3:
b4:d6:26:b1:fc:7c:cc:13:3a:ce:6a:10:06:55:67:
56:80:ed:63:f7:33:40:b1:01:84:0f:96:e9:72:f4:
1e:2c:78:a3:5f:41:71:be:89:25:02:df:c9:74:74:
56:b7:3c:19:77:58:a3:5e:7b:32:88:b5:23:4f:d2:
4f:f4:cd:2f:03:80:9f:d6:97:ab:b7:3d:05:7a:f3:
0f:fe:04:7b:6d:97:56:01:81:a5:1b:bb:30:0c:5c:
2b:51:8f:37:fc:d5:87:79:23:73:0d:49:f7:3e:d9:
05:20:33:18:8e:d4:00:d1:96:8b:68:b3:f7:09:41:
b9:7a:0d:d4:ad:b3:60:3a:79:14:0f:69:a8:2f:a9:
12:0f:25:10:8e:4c:aa:73:ca:86:47:e3:cf:21:55:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B0:EC:C7:8D:D9:B8:DC:09:53:0D:44:94:D3:0D:E6:17:C1:D8:94
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QLDsx43ZuNwJUw1ElNMN5hfB2JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
11:fb:c0:1e:27:7f:95:af:39:0a:a8:be:be:5e:f5:d4:c1:f6:
a1:25:e5:4b:85:a4:bf:8b:c5:7c:ce:df:c2:a0:bb:b8:23:92:
38:a4:9f:2b:68:dd:6f:54:f9:9a:0a:ce:f5:92:2e:d5:7f:a9:
14:ac:20:6e:7c:97:8e:39:30:c0:53:75:c4:b1:7f:84:ab:c6:
04:eb:eb:95:55:24:95:fe:3f:cf:12:8b:43:c4:ee:54:ea:36:
39:6a:c1:5c:0e:0f:3f:14:cd:49:e5:38:64:d7:46:0c:03:9d:
f2:9e:4b:77:c3:55:64:1f:93:2b:d7:88:64:e6:59:f1:cb:a6:
9b:a6:cf:8d:d7:61:06:65:ea:8a:97:d4:02:91:a1:ae:bb:0e:
24:bc:50:3c:38:71:7c:53:d5:fe:37:a9:ab:47:8d:85:4c:eb:
d1:03:cf:da:c1:3c:c3:67:2e:17:a1:a3:3e:99:e7:eb:2e:15:
db:75:a4:3e:1a:28:18:b1:51:40:44:ce:31:03:15:d1:e8:c5:
ee:ae:96:02:83:58:f0:2c:10:02:e8:89:5e:53:18:3f:89:4a:
77:a3:cf:ea:f7:89:74:70:ba:80:c6:03:f2:e9:77:69:d8:dd:
51:04:85:df:61:80:61:b0:ca:1f:60:08:4f:f7:35:e6:45:f2:
f0:90:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:57 2025 by rpki-client