Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QhB89Nrl3ndW5nDD391PesRz8ow.roa
File: QhB89Nrl3ndW5nDD391PesRz8ow.roa (raw, json)
Hash identifier: cJnS/jWIIQKgjg4X2g3uQXwcNQciuxstcU63YcBr+kY=
Subject key identifier: 42:10:7C:F4:DA:E5:DE:77:56:E6:70:C3:DF:DD:4F:7A:C4:73:F2:8C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195370AB700F5999CB8C98564C88C40FA81
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QhB89Nrl3ndW5nDD391PesRz8ow.roa
Signing time: Mon 24 Feb 2025 08:20:03 +0000
ROA not before: Mon 24 Feb 2025 08:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34946
IP address blocks: 193.183.126.0/23 maxlen: 23
193.234.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:0a:b7:00:f5:99:9c:b8:c9:85:64:c8:8c:40:fa:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 24 08:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42107cf4dae5de7756e670c3dfdd4f7ac473f28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:da:fe:13:7b:4b:37:11:48:6b:4a:11:d2:
cc:5a:b9:88:80:d5:20:21:d8:3f:db:2e:e6:14:4f:
ba:7b:2b:77:9d:21:fa:c1:0a:8a:c6:07:ac:35:8b:
b2:31:c0:3b:33:56:60:15:50:9b:78:74:3d:c3:aa:
ff:54:9a:b1:a0:64:fe:24:e8:05:e5:38:f5:fe:9d:
c1:b5:8a:14:d4:57:89:7c:6f:3f:de:76:96:c0:d8:
40:17:7e:b4:35:68:e2:de:59:2c:2d:5b:d0:b0:05:
a6:b4:f9:cb:24:0d:88:ec:e0:bc:8d:40:ca:e3:c0:
37:81:9f:e7:55:44:dc:d5:ed:b5:d8:27:f0:3a:08:
c1:b6:7c:d9:64:75:76:00:16:9a:b9:56:b1:d6:e6:
48:6c:a2:be:12:e3:f6:fb:90:b5:1b:e6:50:48:b2:
0d:c4:f2:f5:4d:26:83:79:72:83:29:c6:a1:4c:53:
9c:8b:c3:cb:d2:5f:03:94:db:7a:29:30:4f:1e:3d:
1e:32:96:b5:f7:80:29:fc:51:9d:22:03:5f:d1:97:
2f:66:87:ea:ea:8c:f9:cd:2f:be:cd:a8:06:0e:e7:
8e:74:7d:78:01:a0:83:34:ae:c4:fe:4b:5d:e1:2f:
d4:ca:84:4c:fd:f5:fe:6f:24:9c:bb:01:cb:2e:26:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:7C:F4:DA:E5:DE:77:56:E6:70:C3:DF:DD:4F:7A:C4:73:F2:8C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QhB89Nrl3ndW5nDD391PesRz8ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.126.0/23
193.234.149.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3d:3f:e4:54:af:6a:c0:45:16:11:0a:51:66:32:93:fd:9d:
04:52:4a:e9:9c:eb:65:6d:8b:8f:d9:d9:39:40:99:f1:5a:20:
ae:90:ab:f9:bb:69:d4:b1:26:59:af:5e:aa:24:0b:44:5c:88:
48:14:c5:0f:4c:4e:d2:5f:d9:a1:55:6d:8f:ca:d1:0e:a8:b7:
5e:e6:2a:e6:fa:85:a5:f0:b6:50:ed:51:c7:8b:18:c2:0f:7b:
77:15:45:d8:c0:7e:cc:83:1e:76:5e:47:2b:15:81:4b:f5:96:
90:05:ae:d8:45:33:40:96:6d:8a:c6:af:4e:12:7a:d6:19:b5:
13:bc:55:37:ed:d6:c2:6d:85:4d:46:7e:52:61:ba:5e:6b:ae:
be:42:9e:45:e7:8b:0f:6f:e4:77:21:42:c7:e3:4c:13:4e:b0:
62:53:69:e0:b8:d7:85:1e:31:5b:02:33:ce:26:24:d6:84:ea:
51:2f:45:d6:9a:10:2c:df:f4:62:3d:ee:ba:88:dc:ea:8f:e9:
10:bf:e9:6a:c7:ff:f8:94:0b:8c:58:03:a0:63:bd:3b:4c:29:
74:e4:ca:ca:45:40:84:5b:17:13:b2:f3:44:b5:81:bb:ac:08:
19:99:b4:94:00:5b:8d:e1:12:cd:e4:80:2e:0c:95:d1:e6:1f:
bf:99:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:51:32 2025 by rpki-client