Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Qnxur0sSJ9yp0SByKgiB7yhR3wU.roa
File: Qnxur0sSJ9yp0SByKgiB7yhR3wU.roa (raw, json)
Hash identifier: ig70/xgpJxrMGbiOIlExGkYIwHH+/25+K7tATKvD3Ts=
Subject key identifier: 42:7C:6E:AF:4B:12:27:DC:A9:D1:20:72:2A:08:81:EF:28:51:DF:05
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486C3DD72D748C56475D4A2A181B6E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Qnxur0sSJ9yp0SByKgiB7yhR3wU.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200559
IP address blocks: 192.71.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6c:3d:d7:2d:74:8c:56:47:5d:4a:2a:18:1b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=427c6eaf4b1227dca9d120722a0881ef2851df05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:d5:d6:9b:d6:d0:a2:fb:b0:79:a2:59:44:
61:c6:32:cc:49:5d:88:72:9a:91:82:9d:30:d1:f1:
a4:47:b9:ad:8f:db:79:a7:1e:d7:a5:29:38:28:95:
55:da:14:2e:85:d4:6d:3b:b8:4c:6e:fa:0c:4e:f9:
d6:5f:02:ee:e1:a9:2c:74:d9:cb:4b:19:cd:08:64:
1f:76:a6:62:a5:a6:cc:86:52:ae:e1:7f:e1:dd:81:
e6:f0:ef:05:f9:17:f4:48:40:f2:c7:3d:56:20:9e:
21:2c:7c:a2:3a:e7:cf:69:29:01:2e:69:6d:30:49:
bf:5d:67:af:63:01:95:49:3a:fa:e9:c6:13:26:f0:
f8:41:38:12:7a:1c:e2:1b:6a:4f:73:55:87:05:00:
af:ef:87:e3:35:77:30:f5:1e:74:cf:15:45:63:f8:
0b:cc:e6:91:47:bc:65:24:ff:97:6f:38:88:1c:67:
ed:4b:6d:7c:45:46:1d:de:92:cc:bd:9a:12:4b:19:
4f:59:84:f3:a7:39:5f:d2:1b:a3:a4:65:b2:30:f8:
c3:12:ec:ba:5a:73:6d:d8:3a:bc:57:73:1e:20:ad:
ea:41:e9:38:90:f2:d0:f1:56:8c:56:70:83:f5:cd:
ef:b1:a1:c9:6f:a7:13:90:34:b2:0d:27:95:e3:85:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7C:6E:AF:4B:12:27:DC:A9:D1:20:72:2A:08:81:EF:28:51:DF:05
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Qnxur0sSJ9yp0SByKgiB7yhR3wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:92:01:f4:3a:3b:90:45:75:bd:bb:3b:b0:af:9b:a7:19:59:
02:e4:e9:0c:0e:aa:a7:1c:cb:90:33:e7:a4:47:28:3a:1a:ad:
26:ef:ef:37:ea:b5:96:23:28:6b:c1:a5:5f:7b:42:8b:97:d1:
36:d2:e2:b9:82:06:80:c9:52:47:c9:4d:e3:9d:62:2b:3f:7a:
24:24:08:19:fc:af:11:b5:c8:d3:ea:83:54:63:7e:6f:a2:82:
c3:b0:b0:f7:c4:a2:f3:05:ad:ff:f3:0f:69:98:88:0d:2d:9a:
49:1b:0f:86:85:6d:86:a2:59:05:72:4e:79:f1:a3:30:68:4a:
e1:a9:54:af:6e:1a:07:6e:bf:55:ed:56:a8:bd:36:78:7a:83:
09:7a:6c:38:6f:7f:1a:ba:4b:de:74:15:a7:5e:0f:b4:01:7d:
92:e0:86:34:83:7d:ae:3f:ef:64:3a:64:73:bd:0e:07:5d:b6:
5e:ae:a4:e6:62:67:e7:9f:3b:13:97:32:73:eb:b4:02:89:96:
f7:36:67:8b:5e:e3:6b:20:31:47:9e:00:d8:1f:a3:97:70:68:
ff:f1:9f:72:2d:07:29:d3:a0:83:1a:94:46:57:c8:98:03:f0:
89:51:6f:bc:fe:ba:2c:93:f9:8d:04:c3:ae:14:ba:2c:c6:85:
96:5a:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:49 2025 by rpki-client