Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QchvlNVwXcYj5QpSa_MdkiPw6fk.roa
File: QchvlNVwXcYj5QpSa_MdkiPw6fk.roa (raw, json)
Hash identifier: GAA3C9qiLTrcRrywsQRLezCvozejVt2IICpzrPgmT6s=
Subject key identifier: 41:C8:6F:94:D5:70:5D:C6:23:E5:0A:52:6B:F3:1D:92:23:F0:E9:F9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 43619A31
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QchvlNVwXcYj5QpSa_MdkiPw6fk.roa
Signing time: Mon 21 Mar 2022 15:02:10 +0000
ROA not before: Mon 21 Mar 2022 15:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210422
IP address blocks: 194.68.41.0/24 maxlen: 24
194.68.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1130469937 (0x43619a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 21 15:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41c86f94d5705dc623e50a526bf31d9223f0e9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:46:b2:68:b3:7e:a7:25:7f:47:b2:41:5e:
45:a5:ed:27:78:d3:ef:40:00:53:83:06:9f:af:ea:
f7:d9:5b:36:f6:d8:fd:58:13:2d:e7:13:86:6e:3a:
07:95:24:01:c3:8f:d0:98:d8:75:89:20:9c:fa:8c:
f4:70:16:bb:fc:f7:8f:f0:0e:c1:d2:f1:84:99:9b:
af:1d:bb:75:0f:d4:63:77:1a:08:3e:83:db:3e:ff:
eb:8f:76:a5:07:4f:49:73:fe:61:08:63:f0:47:29:
22:0e:a8:c3:5c:2f:75:69:99:db:0d:70:6c:77:88:
59:e6:e7:ca:a3:6c:82:43:b0:c7:be:69:38:14:f2:
2c:fd:08:81:76:f1:25:bb:08:46:94:35:ab:1b:07:
bc:71:d1:b3:de:a5:b3:2c:79:fe:ee:76:de:56:28:
db:5d:d8:26:f0:ac:5f:f4:ba:ab:71:e4:a6:a8:92:
f5:fe:1c:de:ff:0a:54:35:a5:7f:66:c3:1a:97:8c:
e9:c1:9a:ea:94:40:3e:69:5d:72:f5:64:a3:f0:e5:
16:63:ac:9b:8e:2d:94:82:7f:87:c5:b3:d4:52:33:
cf:09:af:a8:02:15:f8:d1:3f:cd:0e:c6:89:85:71:
58:8a:27:40:cc:21:22:b6:0d:2c:98:0f:33:01:90:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C8:6F:94:D5:70:5D:C6:23:E5:0A:52:6B:F3:1D:92:23:F0:E9:F9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QchvlNVwXcYj5QpSa_MdkiPw6fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.41.0/24
194.68.63.0/24
Signature Algorithm: sha256WithRSAEncryption
29:26:29:1b:11:dc:df:10:50:e9:e4:65:57:e8:6a:9e:df:ca:
f3:cc:0b:1e:bd:2e:db:63:ae:28:47:41:c8:bd:ac:8e:cd:ec:
44:53:76:f0:1f:1b:c6:70:73:d2:f3:7a:0c:bc:98:9d:0e:c8:
2a:50:0c:2c:02:30:ef:74:b8:41:ed:98:73:34:3b:e1:8a:ce:
22:c5:a1:ed:38:5d:8b:f5:a0:cc:e6:2f:07:23:27:bb:35:42:
6b:10:9f:09:42:70:e7:92:d1:4e:eb:e2:39:0f:57:2b:5f:35:
d0:5c:46:8e:88:e9:94:c3:ed:dc:69:ec:19:f2:e6:e4:8a:f7:
c3:92:d5:79:c8:5f:d0:db:79:7f:00:6a:35:b7:c4:4c:4d:9f:
79:d1:7a:be:46:57:c8:df:51:42:8a:3d:d9:37:92:39:73:59:
9d:21:67:54:9a:ad:fc:b8:85:63:75:f3:16:2b:4c:74:92:a5:
74:9c:70:8f:08:25:4b:a3:b1:00:11:1c:af:64:83:b7:c9:84:
dd:3c:b5:31:60:8c:1b:47:84:06:2a:26:76:ad:cd:83:9d:2c:
2c:d0:2d:5d:66:24:a5:26:5d:38:66:d0:eb:ae:aa:ca:46:d8:
49:ce:7e:fe:25:d8:a7:b6:43:6f:de:23:b9:5b:1b:c4:4e:54:
3a:8f:a4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:05 2025 by rpki-client