Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/QenhLqx_zM62B9O8VfGZuLNMpB8.roa
File: QenhLqx_zM62B9O8VfGZuLNMpB8.roa (raw, json)
Hash identifier: SBeDgpcFa38O27iNC6DbBYLGJoeykwPovwiTn6M0r48=
Subject key identifier: 41:E9:E1:2E:AC:7F:CC:CE:B6:07:D3:BC:55:F1:99:B8:B3:4C:A4:1F
Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Certificate serial: 01856F4B6EC285BE300DB70FB9DE444B7D5A
Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/QenhLqx_zM62B9O8VfGZuLNMpB8.roa
Signing time: Sun 01 Jan 2023 21:44:52 +0000
ROA not before: Sun 01 Jan 2023 21:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.54.124.0/24 maxlen: 24
185.54.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:6e:c2:85:be:30:0d:b7:0f:b9:de:44:4b:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Validity
Not Before: Jan 1 21:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41e9e12eac7fccceb607d3bc55f199b8b34ca41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:f1:ce:a0:f2:10:ec:80:2b:7d:bb:2e:05:
e0:82:6d:8c:a3:56:70:71:7a:48:3e:2b:7f:56:b9:
4d:e0:ef:a7:fd:f4:08:10:c3:d3:4c:2b:fe:8f:84:
88:cc:b5:3d:eb:af:8c:b2:84:a6:33:c8:d2:61:84:
45:a0:e3:50:3f:ca:c8:f5:31:32:ff:28:93:6e:5f:
e2:3a:11:2a:95:e3:ef:e2:d9:18:c7:6e:15:3b:4e:
98:d3:e6:a3:4c:96:e6:39:c0:1d:5f:ad:a7:dc:07:
0b:70:24:1b:49:49:a2:11:42:14:ce:aa:18:58:a1:
5c:7b:5a:f8:12:fd:e4:fe:c4:40:ff:c0:86:17:77:
f4:cf:fd:74:69:7a:98:a3:8d:dc:08:4e:99:da:ec:
59:e5:bf:38:ed:f3:21:04:5e:58:a9:e8:ce:aa:55:
28:53:1a:63:4e:71:5c:b6:e7:e8:d2:43:7c:f0:e9:
8e:99:7f:30:c9:38:57:32:4b:ca:cc:5c:28:5b:6d:
25:f1:8f:68:a3:7f:5f:fb:99:40:9a:d8:bc:19:85:
a0:ea:21:b3:1b:f6:fe:2f:65:18:79:41:83:fa:3a:
9b:dc:c9:fc:ae:31:70:70:b8:85:62:26:18:2e:57:
ad:69:3b:ff:0c:49:50:ad:86:3b:85:1e:27:3f:e6:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E9:E1:2E:AC:7F:CC:CE:B6:07:D3:BC:55:F1:99:B8:B3:4C:A4:1F
X509v3 Authority Key Identifier:
keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/QenhLqx_zM62B9O8VfGZuLNMpB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.124.0/24
185.54.126.0/24
Signature Algorithm: sha256WithRSAEncryption
97:96:95:42:a6:ff:5e:c9:2e:29:82:36:75:91:39:dc:8e:89:
86:f2:df:f1:2a:3c:1b:5d:ec:a8:82:97:ec:da:1b:bc:f8:7f:
1d:ed:6b:27:ba:5f:08:e9:bd:3d:2d:7d:c3:52:f1:dc:50:a4:
c1:ab:dc:02:8c:c1:d2:8b:bc:a9:3c:6e:4b:00:ac:c8:65:6a:
cc:d6:c7:0d:e8:f2:44:47:81:35:f3:c1:b3:b5:bb:5e:ec:23:
7c:06:13:14:58:ef:7f:90:36:63:e5:98:4f:79:d8:92:13:3b:
84:5e:87:1d:dd:27:92:e0:71:6b:ed:69:aa:b5:f5:04:28:ff:
80:25:e1:57:54:34:49:29:ea:56:39:d4:c7:cc:2e:44:8c:64:
5f:fe:52:9b:5f:7e:59:6a:31:27:2d:bf:c8:14:67:c4:8d:8f:
73:f3:1d:5c:da:ad:6a:5a:e3:72:a6:ee:8f:d8:a5:89:f8:1d:
89:dc:dc:69:27:1d:24:39:98:b0:76:b0:83:3f:da:46:90:af:
6e:a6:1a:f2:6e:44:b8:1a:42:6f:38:45:f0:dd:de:7d:2c:19:
19:5c:07:04:8f:45:ed:b6:3c:b1:5f:fd:e8:83:ed:b2:32:3e:
ae:3a:6a:8d:1d:ab:4c:40:af:fe:1f:8a:a6:36:55:f1:6f:f2:
36:6a:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:22 2025 by rpki-client