Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/qrGyAia3EWRsHEeYasfQ466gJbA.roa
File: qrGyAia3EWRsHEeYasfQ466gJbA.roa (raw, json)
Hash identifier: xtftmaoXsXXNlJIaeU6lB7H88ZT2KxGHbd89YkRpo8Q=
Subject key identifier: AA:B1:B2:02:26:B7:11:64:6C:1C:47:98:6A:C7:D0:E3:AE:A0:25:B0
Certificate issuer: /CN=fca160dd2a430cea7b5bd5488d518070c6e50808
Certificate serial: 090001ED
Authority key identifier: FC:A1:60:DD:2A:43:0C:EA:7B:5B:D5:48:8D:51:80:70:C6:E5:08:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KFg3SpDDOp7W9VIjVGAcMblCAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/qrGyAia3EWRsHEeYasfQ466gJbA.roa
Signing time: Sat 01 Jan 2022 09:02:30 +0000
ROA not before: Sat 01 Jan 2022 09:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209231
IP address blocks: 85.193.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150995437 (0x90001ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca160dd2a430cea7b5bd5488d518070c6e50808
Validity
Not Before: Jan 1 09:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aab1b20226b711646c1c47986ac7d0e3aea025b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:bb:f2:43:42:18:b6:7a:40:5d:87:03:35:
ea:e7:a7:21:5d:5e:bc:ff:d5:a2:92:ea:1c:7a:69:
d3:08:b5:41:23:63:c9:0a:4c:6e:6c:18:bb:4d:28:
42:47:e0:66:c2:b1:4c:5e:67:47:25:4d:5a:52:8a:
de:1a:a9:42:a6:d8:4c:e1:82:85:5e:06:85:59:0f:
6e:c2:39:a3:9d:bf:1f:93:8a:5f:76:91:ee:66:c3:
c4:48:ca:d6:1a:88:54:95:a8:a0:2d:d2:fb:f1:7f:
3c:a7:ca:d2:15:14:9b:b1:e9:5e:e1:32:8a:0a:49:
8b:12:de:fe:b7:9b:18:39:cf:03:da:10:cb:68:c3:
48:0f:63:63:e1:75:5e:a7:ad:c0:87:77:af:ab:19:
10:27:8f:fd:33:e5:c4:ce:07:30:b0:8c:21:d3:64:
27:8b:95:1e:cf:63:75:ff:c6:57:e1:3e:43:a6:55:
7b:48:cf:54:97:26:ae:26:b6:26:bd:10:0f:08:9a:
50:c9:ee:f6:ed:69:0e:e0:d8:74:f8:88:3c:43:1d:
a7:4f:f4:43:b6:f5:01:be:62:2b:0b:29:39:60:7b:
08:7b:aa:7d:f1:11:de:24:b3:43:4c:22:9a:cc:82:
53:7e:3d:b1:8c:88:b6:e6:2e:7f:79:e3:c9:1a:50:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:B2:02:26:B7:11:64:6C:1C:47:98:6A:C7:D0:E3:AE:A0:25:B0
X509v3 Authority Key Identifier:
keyid:FC:A1:60:DD:2A:43:0C:EA:7B:5B:D5:48:8D:51:80:70:C6:E5:08:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KFg3SpDDOp7W9VIjVGAcMblCAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/qrGyAia3EWRsHEeYasfQ466gJbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/_KFg3SpDDOp7W9VIjVGAcMblCAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.76.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:bb:fa:ed:97:b6:f8:56:c9:a9:a4:a9:5c:73:be:99:e3:37:
b9:b0:db:ed:83:0c:0a:62:27:fc:a1:03:ce:3d:11:b8:40:0e:
15:ae:3b:f4:f0:69:3b:02:95:c2:36:a8:14:76:5c:99:22:ea:
f8:d1:86:95:d6:ed:27:8a:26:cb:e5:16:b5:0a:02:b1:b9:8c:
0e:49:e8:fa:59:c7:68:a1:55:f4:3f:32:c6:ee:71:ad:60:54:
99:3e:9b:ec:c3:2d:d8:5c:bc:db:fc:d1:e3:be:3e:c3:85:6c:
6a:8d:22:d1:51:c5:21:bd:f6:c9:af:b9:ec:34:f3:db:87:dd:
35:bd:b1:e0:f8:3b:ec:8e:f1:6f:7c:1f:73:2b:0f:f8:0d:d9:
c0:ff:0d:10:db:47:e4:05:51:e9:90:1b:6c:f0:f6:ab:0e:75:
54:ee:94:aa:99:98:32:7a:32:ac:74:ef:0b:93:8e:b7:5f:52:
2c:da:81:f6:9e:5a:3d:3d:3f:b2:fd:bb:e0:f8:cd:a7:09:7b:
01:a5:e3:96:c9:22:5f:2e:23:d1:18:1a:79:ad:b7:26:1c:02:
7a:5c:1f:34:0b:97:ba:60:24:09:b7:dd:c6:91:7f:54:7f:b2:
70:a3:b6:7c:e6:68:ee:56:eb:68:63:57:74:bd:db:13:66:1a:
6e:a0:0c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:34 2025 by rpki-client