Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/QECshKhyym3U39W11wvqgySCjwE.roa
File: QECshKhyym3U39W11wvqgySCjwE.roa (raw, json)
Hash identifier: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=
Subject key identifier: 40:40:AC:84:A8:72:CA:6D:D4:DF:D5:B5:D7:0B:EA:83:24:82:8F:01
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0194206833F087F4DEFF228EFFA07A2B6ABD
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/QECshKhyym3U39W11wvqgySCjwE.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209742
IP address blocks: 193.151.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:33:f0:87:f4:de:ff:22:8e:ff:a0:7a:2b:6a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4040ac84a872ca6dd4dfd5b5d70bea8324828f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:4b:ce:c5:14:9b:1f:21:46:29:3b:e7:5e:
ee:05:b8:76:fd:35:3b:90:30:c4:a1:6b:da:93:ad:
0d:4e:58:53:17:33:e0:4e:00:a3:bf:07:d9:15:6c:
44:57:a5:b8:0d:bc:10:33:54:16:19:a7:77:7a:0b:
49:41:27:0f:d6:58:82:af:6b:08:a8:54:30:41:39:
d7:05:66:b9:98:fa:bf:b0:ef:a7:4a:d2:48:45:9b:
00:1b:06:b4:8d:c6:93:bf:49:0f:bd:37:74:e0:32:
62:da:3f:bb:7e:8e:1f:73:53:69:42:78:8d:b1:ac:
c6:44:33:cc:44:bc:b5:a4:5b:36:e6:97:1d:6d:49:
83:1e:ea:90:ba:f3:42:2d:69:81:f7:1d:30:ea:80:
2a:01:38:19:26:c1:50:08:cb:1b:47:24:50:55:13:
d4:f4:a3:26:b4:bc:cd:43:ca:91:a9:58:05:12:ca:
3b:9c:12:03:9a:b1:91:c8:fe:4d:d7:57:f9:f1:00:
bf:6d:21:6f:3d:04:50:a1:0a:01:51:79:8c:e8:2d:
78:12:d0:af:b5:fe:19:fd:a2:7b:f6:28:6d:3c:b9:
99:30:de:29:fb:2a:04:8e:71:d0:42:60:b6:a0:b3:
30:ea:95:0b:a5:8c:be:6d:5b:4c:a8:9a:6c:b5:9d:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:40:AC:84:A8:72:CA:6D:D4:DF:D5:B5:D7:0B:EA:83:24:82:8F:01
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/QECshKhyym3U39W11wvqgySCjwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.166.0/24
Signature Algorithm: sha256WithRSAEncryption
55:80:79:a4:c9:8b:6c:69:a1:df:9c:b3:94:34:9d:af:77:e1:
c9:40:58:d4:42:a3:21:00:4b:f5:ce:3b:3b:4d:f6:55:c3:3c:
4c:25:56:8b:f0:ab:75:fe:62:01:2d:1a:c8:29:0f:df:b7:c3:
af:ce:99:a2:0e:b6:ca:2e:21:d3:3a:43:f0:7b:a5:6e:13:20:
de:67:a7:67:6c:43:16:15:7b:b5:05:99:66:f4:13:f2:25:7c:
c8:dd:54:ee:26:46:51:fa:bc:5c:56:10:52:7f:ac:a2:01:18:
6f:a4:0e:d4:00:59:38:be:6d:e7:1a:de:cf:91:5f:18:e1:97:
d6:5d:bc:ee:1b:d9:5a:6b:42:75:34:e5:e4:9b:17:78:c3:c7:
94:9b:8c:3c:18:8e:5e:7e:ad:26:0f:e0:bd:ed:7d:54:dc:c9:
88:03:cb:93:d3:97:07:92:8f:47:6c:7b:41:89:6c:f4:49:fc:
65:84:d0:d1:ac:58:3c:cd:a2:53:fb:a2:dc:9d:1e:bc:59:51:
39:75:88:06:41:94:5f:bb:42:a3:39:b8:e3:17:88:da:78:0f:
60:33:0e:84:c1:2d:30:95:05:ab:98:a0:65:ab:2e:65:60:12:
be:2f:8a:66:65:0f:c7:96:17:fa:d7:e9:fe:6b:9e:3c:f3:eb:
d0:87:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:17 2025 by rpki-client